$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91e33832-9868-312c-9af5-43522a2e1ae0.roa File: 91e33832-9868-312c-9af5-43522a2e1ae0.roa (raw, json) Hash identifier: /vZhIuSIt2EkGlNcGM2eAOjj0O/6GPl6OMD1+re1F7Y= Subject key identifier: 13:54:E3:E5:59:61:E6:63:21:89:F9:D7:6E:9E:C7:D5:21:72:10:EA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBAC5AF6C420DACFE9E40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91e33832-9868-312c-9af5-43522a2e1ae0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.90.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ba:c5:af:6c:42:0d:ac:fe:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1da1df10-5b9c-4c2d-842a-8a19ce30f286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:d7:24:47:f4:8c:f5:e2:10:20:11:79:e9: 8b:3f:34:4f:90:36:80:26:b7:c4:6d:5f:99:8f:7b: a5:07:8d:33:1e:f4:5a:eb:eb:e9:d6:2c:32:a2:b4: 6b:68:59:44:36:17:0f:2c:4d:0a:90:fe:b6:2b:7a: 86:a2:20:36:2f:57:b8:30:76:72:7f:f9:38:1b:66: c4:3a:6b:7e:ad:b5:51:87:9b:ee:88:e6:9d:99:cb: c9:f4:0f:a3:fa:57:05:77:38:09:bb:4b:27:d4:21: b1:35:3f:f4:f0:3e:f4:1e:20:4e:9c:a7:ee:9f:83: 71:fb:a5:77:9a:09:22:fc:8d:9a:d2:64:50:d9:d1: 8e:0e:1f:85:bd:9c:11:cd:ca:fb:04:36:40:87:47: af:60:6d:0e:b4:e9:4b:2f:41:0c:e8:63:76:68:93: ad:ed:b7:ba:16:0c:66:8d:e1:01:47:61:10:bd:8e: 5b:b1:6e:10:0f:26:92:70:7a:4e:e9:bc:fe:c0:c4: c0:c4:70:2e:74:34:88:9c:33:ab:fc:43:c4:60:16: 6b:2a:59:73:7e:7a:47:63:f9:55:de:91:d5:6e:ac: cd:1c:59:06:0f:97:22:85:2c:1e:10:fb:28:13:f5: b8:43:40:2c:79:db:67:2e:22:5e:f4:87:21:a3:f1: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:54:E3:E5:59:61:E6:63:21:89:F9:D7:6E:9E:C7:D5:21:72:10:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91e33832-9868-312c-9af5-43522a2e1ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.90.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:21:79:54:42:4e:d3:5b:eb:09:7a:16:cd:95:0d:25:6c:0d: 02:3f:d9:e8:c7:78:9c:72:3f:40:09:9a:81:7f:9f:6a:fc:af: 99:b8:f7:07:e3:1f:5f:10:f1:c9:9f:78:07:e8:e5:57:c4:9a: 75:da:8c:6a:5b:76:70:83:ee:66:af:2e:dd:69:49:d1:90:93: fa:8a:19:41:b0:98:3c:8c:30:2a:58:84:d9:71:ed:7e:e9:b6: 02:49:b3:a1:bf:3a:d4:0d:67:98:0d:e0:a0:8b:31:7b:0c:80: ae:14:5c:0d:a4:bf:ba:3d:cf:1f:e2:13:38:21:63:5d:5f:ea: f0:ee:b5:2e:76:5b:e4:23:eb:e1:c6:b6:73:da:3e:09:d2:5d: 2b:39:d8:29:24:46:db:78:2b:00:51:02:ed:33:7c:9f:b8:b8: 1d:ae:8d:88:a3:3b:42:f6:8c:21:15:2b:0d:8b:96:fe:89:e1: 45:0d:56:2e:c0:ef:4d:08:f7:fc:95:a1:16:ed:65:d1:69:1c: 68:47:7d:9e:f8:6b:4b:51:74:d4:7b:52:e5:19:39:03:e1:f6: b6:48:aa:60:a2:4c:64:8a:e9:e6:56:2f:bf:0c:54:57:13:68: a8:1f:12:d2:64:42:85:ca:f6:a8:ac:34:84:89:40:82:f1:f5: da:84:2a:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbrFr2xCDaz+nkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWRhMWRmMTAtNWI5Yy00YzJkLTg0MmEtOGExOWNlMzBmMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/XJEf0jPXiECAReemLPzRPkDaAJrfEbV+Z j3ulB40zHvRa6+vp1iwyorRraFlENhcPLE0KkP62K3qGoiA2L1e4MHZyf/k4G2bE Omt+rbVRh5vuiOadmcvJ9A+j+lcFdzgJu0sn1CGxNT/08D70HiBOnKfun4Nx+6V3 mgki/I2a0mRQ2dGODh+FvZwRzcr7BDZAh0evYG0OtOlLL0EM6GN2aJOt7be6Fgxm jeEBR2EQvY5bsW4QDyaScHpO6bz+wMTAxHAudDSInDOr/EPEYBZrKllzfnpHY/lV 3pHVbqzNHFkGD5cihSweEPsoE/W4Q0AsedtnLiJe9Icho/GfHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNU4+VZYeZjIYn5126ex9UhchDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFlMzM4MzItOTg2OC0z MTJjLTlhZjUtNDM1MjJhMmUxYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4heVRCTtNb6wl6Fs2VDSVsDQI/2ejHeJxyP0AJmoF/n2r8r5m49wfj H18Q8cmfeAfo5VfEmnXajGpbdnCD7mavLt1pSdGQk/qKGUGwmDyMMCpYhNlx7X7p tgJJs6G/OtQNZ5gN4KCLMXsMgK4UXA2kv7o9zx/iEzghY11f6vDutS52W+Qj6+HG tnPaPgnSXSs52CkkRtt4KwBRAu0zfJ+4uB2ujYijO0L2jCEVKw2Llv6J4UUNVi7A 700I9/yVoRbtZdFpHGhHfZ74a0tRdNR7UuUZOQPh9rZIqmCiTGSK6eZWL78MVFcT aKgfEtJkQoXK9qisNISJQILx9dqEKjk= -----END CERTIFICATE-----Generated at Sun Oct 4 22:20:15 2026 by rpki-client