$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa File: 8b23c060-e118-3105-b169-4562d614483f.roa (raw, json) Hash identifier: kcWma9Jl0j6E+jVYu2YfDpEpBJad5TqMm07HP1dhS+A= Subject key identifier: BA:E4:BB:77:3E:C1:EE:A6:9D:39:61:62:11:FF:04:77:C9:EB:5E:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB138CDAA519CB6DFE500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.68.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b1:38:cd:aa:51:9c:b6:df:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=67008c48-ee72-4f7c-9509-48458c367698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:96:59:d5:cc:ed:a6:b8:9d:51:6b:53:56: 49:4b:52:ad:24:97:cd:72:41:28:1e:65:e9:b9:89: fe:bc:15:be:48:44:d4:03:bd:31:a1:68:08:5f:b0: b6:79:e7:5f:d1:1f:45:a8:04:55:f5:ca:d3:66:a1: 1d:45:28:f3:85:4f:80:43:47:7a:74:de:dd:13:63: e0:15:e0:c7:69:0e:39:e9:fd:00:6e:b2:0f:22:fc: 88:2f:62:19:45:fa:3e:b5:90:02:fd:ec:c0:ad:0c: d1:8e:4b:1b:bc:6f:cd:03:c1:f1:45:23:52:0e:c1: 6e:67:ae:bc:9d:be:04:ef:83:e4:06:ca:f0:86:ed: 63:a7:2a:21:d2:0d:9f:8c:0e:96:25:10:16:51:9c: 74:1f:70:a1:84:ca:bf:4a:71:23:9c:89:fe:36:6b: 3e:1c:70:5e:f5:38:f0:a3:e8:de:2c:a4:e5:d7:23: a4:f6:ee:99:8f:7d:40:65:e2:31:7c:10:46:58:fa: ef:33:0a:77:fd:2c:09:48:3f:c4:98:13:42:08:c3: 8f:5b:17:d0:cc:80:9e:b7:62:a1:8f:f9:be:12:38: 1c:04:9f:d4:2d:d7:58:38:1c:6e:15:7f:bd:85:fa: 15:41:61:f2:2e:f6:14:89:c1:4d:76:c3:8a:aa:20: ba:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E4:BB:77:3E:C1:EE:A6:9D:39:61:62:11:FF:04:77:C9:EB:5E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e4:f8:07:dc:e8:f8:1a:8c:14:b3:61:55:b2:94:96:92:78: e9:90:fd:8c:36:d1:c0:0e:43:58:5c:8f:05:15:b6:b2:d5:41: 4f:fd:ae:02:ab:ef:0e:79:9e:9b:f2:ef:54:52:fb:a7:4a:a3: ff:de:b1:5f:81:9c:33:77:5b:a3:10:7a:38:4c:ea:00:f9:e3: 31:4d:c2:1c:db:20:a8:67:72:c8:38:d8:67:b6:49:dd:2d:ef: 36:95:01:fa:1d:5e:3e:02:23:39:56:8a:d0:b3:f7:50:04:b7: 92:23:75:0c:6e:23:1e:de:f2:7a:4d:e6:5f:94:70:e5:84:54: 14:0c:99:05:78:e7:a3:c4:dc:0f:a8:a8:ea:b3:bc:96:35:a8: fd:16:61:ed:b7:c8:1a:5a:8f:9d:b1:16:01:01:bf:91:90:4a: 7f:7c:c3:41:83:d0:38:98:8c:22:0b:a4:11:c6:1e:fa:86:d6: 7c:bc:8b:1e:b7:ca:1b:82:be:b4:5f:05:6a:37:85:fd:a7:3c: 50:ac:c4:6c:55:12:de:58:53:5f:5f:d3:b8:1c:55:4b:6c:fc: ee:22:1c:67:b7:ba:8a:53:85:5f:6a:57:52:bc:56:9d:83:e7: f5:c1:66:fb:04:36:16:a3:bc:2b:58:c3:c9:17:41:5d:b0:b9: 28:cf:ce:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbE4zapRnLbf5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjcwMDhjNDgtZWU3Mi00ZjdjLTk1MDktNDg0NThjMzY3Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ6WWdXM7aa4nVFrU1ZJS1KtJJfNckEoHmXp uYn+vBW+SETUA70xoWgIX7C2eedf0R9FqARV9crTZqEdRSjzhU+AQ0d6dN7dE2Pg FeDHaQ456f0AbrIPIvyIL2IZRfo+tZAC/ezArQzRjksbvG/NA8HxRSNSDsFuZ668 nb4E74PkBsrwhu1jpyoh0g2fjA6WJRAWUZx0H3ChhMq/SnEjnIn+Nms+HHBe9Tjw o+jeLKTl1yOk9u6Zj31AZeIxfBBGWPrvMwp3/SwJSD/EmBNCCMOPWxfQzICet2Kh j/m+EjgcBJ/ULddYOBxuFX+9hfoVQWHyLvYUicFNdsOKqiC69QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrku3c+we6mnTlhYhH/BHfJ617ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGIyM2MwNjAtZTExOC0z MTA1LWIxNjktNDU2MmQ2MTQ0ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPk+Afc6PgajBSzYVWylJaSeOmQ/Yw20cAOQ1hcjwUVtrLVQU/9rgKr 7w55npvy71RS+6dKo//esV+BnDN3W6MQejhM6gD54zFNwhzbIKhncsg42Ge2Sd0t 7zaVAfodXj4CIzlWitCz91AEt5IjdQxuIx7e8npN5l+UcOWEVBQMmQV456PE3A+o qOqzvJY1qP0WYe23yBpaj52xFgEBv5GQSn98w0GD0DiYjCILpBHGHvqG1ny8ix63 yhuCvrRfBWo3hf2nPFCsxGxVEt5YU19f07gcVUts/O4iHGe3uopThV9qV1K8Vp2D 5/XBZvsENhajvCtYw8kXQV2wuSjPzlw= -----END CERTIFICATE-----Generated at Fri Oct 9 21:22:05 2026 by rpki-client