$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa File: 9a959411-f4f4-3ff7-af68-485ef8c1d984.roa (raw, json) Hash identifier: wF8atRcAD+rn/9K3rm/casf5eVAsiUVtbMSj2a86SLU= Subject key identifier: 42:1A:46:64:A2:61:46:79:4D:86:C8:58:EE:AD:50:73:A6:1E:C6:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA05DB613474FB59FAE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.89.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a0:5d:b6:13:47:4f:b5:9f:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=af887464-dd0f-43ba-bf10-0a25cc107ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:84:a7:f7:b7:2c:3c:65:d0:07:f1:95:9a: 28:b5:18:cf:5c:d3:6e:43:68:41:12:b0:95:7f:ef: 23:53:6f:8a:f4:69:67:ec:d1:fc:1c:d1:1a:cd:5b: f8:66:cc:38:c3:ed:37:c4:14:bb:f7:9e:b3:b1:e0: 1d:9f:4e:97:54:06:1a:2f:66:ca:c9:72:e8:02:8e: d1:40:31:41:d4:3b:a8:bf:67:95:c4:df:f2:4a:15: dc:d8:df:ca:6a:fa:09:a7:f9:9a:3a:f6:70:5a:42: 10:cb:01:d3:96:6a:42:62:92:83:6c:05:81:ff:f1: bc:70:17:de:9b:ea:57:c8:64:d5:9f:f8:68:cd:da: ef:7e:36:09:c7:0b:f2:fc:91:2c:2f:17:ca:91:d9: d6:64:a9:a1:ac:83:31:41:25:fc:8b:c9:00:2f:a3: 46:0b:0c:5f:a8:2e:c3:9b:76:60:ac:1d:b8:43:14: 9b:15:f9:00:b0:ea:0f:52:ed:32:15:3f:77:7f:78: 52:5b:5a:6b:ba:79:10:b0:fa:7e:d7:e7:d5:49:4d: 6a:08:a9:71:1c:7e:cd:27:4c:cd:e5:0f:b4:45:1b: 80:63:d5:1d:eb:00:0f:28:86:80:a5:c3:f7:2e:c2: 6c:85:76:69:2e:48:c6:4c:18:02:86:75:4f:2f:78: cb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:46:64:A2:61:46:79:4D:86:C8:58:EE:AD:50:73:A6:1E:C6:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6c:dd:dd:93:48:1b:c1:63:5f:0f:6d:1c:65:cb:7c:9d:2b: c3:13:e0:47:c8:aa:36:3c:0b:e8:6a:54:d2:22:61:7d:d9:6d: 2e:59:4d:6a:5a:f8:a9:f7:cd:0c:08:86:59:55:d4:39:fe:87: 51:74:f3:2f:39:61:fc:4a:e8:10:b7:b8:cd:6f:af:95:d9:36: 55:db:f2:10:0a:f7:ce:74:e6:7f:e9:e4:f2:96:37:38:a6:c1: 7d:60:db:d0:7b:23:0c:d3:8b:d4:0f:6a:3a:dc:75:bc:5a:75: c1:be:77:ea:22:0b:64:b6:35:b0:61:9d:c9:7f:b7:79:f6:aa: b7:03:a5:ea:59:5c:2d:40:d0:9d:bb:b9:45:74:cd:f4:87:36: f4:18:42:12:8a:74:ed:2c:8f:24:c7:4b:3e:61:11:c9:1c:b3: 16:6e:66:38:6c:27:35:36:57:c0:d5:62:0e:33:6f:a8:51:71: 73:d5:6d:ef:85:31:93:8f:46:42:bc:45:c6:39:b0:9f:c1:d4: 47:0b:08:ad:d8:6f:fc:3f:21:f5:e1:cc:16:15:c2:a3:0b:6c: 28:a9:a3:f9:c9:bb:64:03:62:8c:00:db:cb:56:0b:a5:a6:bd: 15:82:c3:ed:91:0a:f1:04:35:a8:05:6d:1f:45:22:d4:b0:81: e8:ff:6b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaBdthNHT7WfrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWY4ODc0NjQtZGQwZi00M2JhLWJmMTAtMGEyNWNjMTA3YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA+Ep/e3LDxl0AfxlZootRjPXNNuQ2hBErCV f+8jU2+K9Gln7NH8HNEazVv4Zsw4w+03xBS7956zseAdn06XVAYaL2bKyXLoAo7R QDFB1Duov2eVxN/yShXc2N/KavoJp/maOvZwWkIQywHTlmpCYpKDbAWB//G8cBfe m+pXyGTVn/hozdrvfjYJxwvy/JEsLxfKkdnWZKmhrIMxQSX8i8kAL6NGCwxfqC7D m3ZgrB24QxSbFfkAsOoPUu0yFT93f3hSW1prunkQsPp+1+fVSU1qCKlxHH7NJ0zN 5Q+0RRuAY9Ud6wAPKIaApcP3LsJshXZpLkjGTBgChnVPL3jLcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIaRmSiYUZ5TYbIWO6tUHOmHsaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWE5NTk0MTEtZjRmNC0z ZmY3LWFmNjgtNDg1ZWY4YzFkOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVs3d2TSBvBY18PbRxly3ydK8MT4EfIqjY8C+hqVNIiYX3ZbS5ZTWpa +Kn3zQwIhllV1Dn+h1F08y85YfxK6BC3uM1vr5XZNlXb8hAK98505n/p5PKWNzim wX1g29B7IwzTi9QPajrcdbxadcG+d+oiC2S2NbBhncl/t3n2qrcDpepZXC1A0J27 uUV0zfSHNvQYQhKKdO0sjyTHSz5hEckcsxZuZjhsJzU2V8DVYg4zb6hRcXPVbe+F MZOPRkK8RcY5sJ/B1EcLCK3Yb/w/IfXhzBYVwqMLbCipo/nJu2QDYowA28tWC6Wm vRWCw+2RCvEENagFbR9FItSwgej/a8I= -----END CERTIFICATE-----Generated at Sat Oct 10 14:12:41 2026 by rpki-client