$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa File: 967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa (raw, json) Hash identifier: 3PQRBluHGFWllMOiq7m61y9yGjwlOWT0o1JDdt7C1Yg= Subject key identifier: 28:5F:9A:A2:AA:80:2F:5D:3C:2C:46:BF:DF:08:9D:E0:BC:85:8D:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8E75ABA35C8AD4506C40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.87.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8e:75:ab:a3:5c:8a:d4:50:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2a4d941a-b263-4916-b672-3f75558b600a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:ea:1e:bc:e1:ab:6e:06:60:87:d5:5d:0a: 68:c4:d4:02:89:90:7a:a9:7a:d3:2b:e6:5c:d9:a7: 57:9d:ea:8b:58:5f:7a:65:7a:78:12:f3:7e:cd:89: e6:e6:9f:8d:ff:9b:c8:f5:c0:8e:1b:1f:f2:56:18: 62:4c:bb:ce:9e:06:64:33:2a:9d:67:31:2d:98:40: 2a:dd:ad:56:08:ba:cf:10:28:cf:cd:14:fe:a5:d7: bd:3c:83:e2:9b:84:a5:4d:57:be:fb:1a:90:40:29: 82:97:52:c6:c9:04:0d:a3:e8:7a:5b:14:a1:5a:f3: 2a:b3:1f:0b:10:78:59:86:44:5a:6e:c0:22:6b:2c: d3:cc:97:f8:7c:ee:e9:ab:d4:ac:26:b5:aa:08:eb: 70:da:27:8e:5b:73:4b:eb:b9:5b:d8:4f:d2:9c:96: e4:0d:5d:eb:2c:18:64:8c:90:c1:29:38:05:b7:6f: 37:7a:03:88:2b:b0:a0:82:36:b9:05:1e:b1:2c:0b: 94:d9:9e:5d:ca:ba:0a:15:b8:39:40:ac:da:f3:cb: 4a:f1:f6:62:aa:3f:9f:c5:b7:7e:ab:df:5c:b9:41: d4:7e:a0:30:a0:9f:c0:8e:dd:ee:7d:89:08:84:7f: 19:1f:7f:61:7d:61:34:8b:63:e3:3f:9a:cf:cd:eb: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:9A:A2:AA:80:2F:5D:3C:2C:46:BF:DF:08:9D:E0:BC:85:8D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:69:d4:ce:c0:e3:0a:07:58:08:ef:1e:bc:30:d1:9a:df:93: 59:aa:d6:7b:0b:b3:d8:ec:7f:92:39:a8:61:f5:8c:0f:cb:31: 39:fa:4c:75:ed:7a:90:49:22:90:42:ee:3c:82:fb:ed:fc:21: 52:58:0a:12:5c:45:8f:4d:55:6f:41:db:ab:fe:89:ac:f2:01: 0e:04:2d:4a:ac:83:d0:e9:cc:a3:69:12:50:de:38:d4:2f:f0: 02:04:43:08:2b:3d:86:42:64:49:b9:a3:2e:96:74:1b:88:82: 0a:5d:5b:11:96:0b:b2:3f:b3:78:43:5e:e9:95:5b:92:6b:b4: 2b:47:69:81:da:61:86:ff:7a:7c:0d:7a:eb:ff:5f:de:fc:6e: e1:d6:5a:6b:87:86:9b:56:83:f1:c5:dc:8e:e6:ed:5d:83:2b: 8f:87:3d:10:c5:09:38:64:e1:7b:d6:3e:48:e7:dc:6e:c4:87: b1:39:cc:d2:33:04:26:14:b7:40:29:da:77:75:b9:42:3f:61: a7:f2:5b:13:14:18:a4:08:5c:57:c5:d5:49:7c:c5:4a:05:a0: 26:63:60:70:a6:22:96:35:e0:fd:ef:a9:99:68:db:21:23:6b: 44:8c:8b:a6:4e:f0:ab:31:8e:23:76:e9:65:6d:5e:be:06:3f: 2a:19:a4:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY51q6NcitRQbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmE0ZDk0MWEtYjI2My00OTE2LWI2NzItM2Y3NTU1OGI2MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum/qHrzhq24GYIfVXQpoxNQCiZB6qXrTK+Zc 2adXneqLWF96ZXp4EvN+zYnm5p+N/5vI9cCOGx/yVhhiTLvOngZkMyqdZzEtmEAq 3a1WCLrPECjPzRT+pde9PIPim4SlTVe++xqQQCmCl1LGyQQNo+h6WxShWvMqsx8L EHhZhkRabsAiayzTzJf4fO7pq9SsJrWqCOtw2ieOW3NL67lb2E/SnJbkDV3rLBhk jJDBKTgFt283egOIK7Cggja5BR6xLAuU2Z5dyroKFbg5QKza88tK8fZiqj+fxbd+ q99cuUHUfqAwoJ/Ajt3ufYkIhH8ZH39hfWE0i2PjP5rPzesN4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChfmqKqgC9dPCxGv98IneC8hY2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY3YjU4NTItMzRlYS0z ZmUyLWExYWItMzA4NzNkYzViZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApp1M7A4woHWAjvHrww0Zrfk1mq1nsLs9jsf5I5qGH1jA/LMTn6THXt epBJIpBC7jyC++38IVJYChJcRY9NVW9B26v+iazyAQ4ELUqsg9DpzKNpElDeONQv 8AIEQwgrPYZCZEm5oy6WdBuIggpdWxGWC7I/s3hDXumVW5JrtCtHaYHaYYb/enwN euv/X978buHWWmuHhptWg/HF3I7m7V2DK4+HPRDFCThk4XvWPkjn3G7Eh7E5zNIz BCYUt0Ap2nd1uUI/YafyWxMUGKQIXFfF1Ul8xUoFoCZjYHCmIpY14P3vqZlo2yEj a0SMi6ZO8KsxjiN26WVtXr4GPyoZpHc= -----END CERTIFICATE-----Generated at Tue Sep 29 13:57:17 2026 by rpki-client