$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa File: a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa (raw, json) Hash identifier: kwPEdzKhilgzFQ+I9MyUPhIHLe1UWUBdrjGIkDLKc/c= Subject key identifier: FD:80:26:31:6C:3E:DE:08:5C:78:C9:8C:34:0E:F1:B8:15:52:39:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD23E4EE676B37CEAF520 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.85.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d2:3e:4e:e6:76:b3:7c:ea:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=21187e24-6923-4f14-9973-287191254a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:93:2e:23:10:09:92:ae:16:e4:24:71:65: 46:fa:cf:03:59:b6:9c:95:69:e9:57:76:3e:83:4a: 47:4a:48:03:93:92:1f:6e:69:c7:d6:ff:a3:a4:b6: 10:d0:0a:7f:bb:75:97:38:88:15:77:f1:7b:35:cc: ec:96:a7:7f:0c:68:26:4b:d5:f3:1d:f1:4c:08:96: 5a:07:ee:c8:d5:4b:16:17:02:19:96:cf:6e:f6:e8: e8:d8:df:98:31:a8:b2:a7:e7:ea:13:cc:d8:a2:9b: 16:d2:2f:39:78:95:bf:1f:91:3d:48:46:40:89:0e: 84:48:03:fb:e3:08:31:43:c3:59:4e:84:a3:3e:4a: 2e:88:ce:11:fa:9c:99:ff:29:3e:5f:49:93:f0:ff: 34:cd:0c:23:d4:b8:09:50:2c:62:61:7d:bb:80:4d: c6:2e:f4:6c:58:8d:fe:c5:e4:70:30:70:a6:58:e1: 14:3d:d8:83:a2:ad:e9:5e:7e:6a:4b:6c:db:c8:1c: 85:2f:06:eb:76:ce:3b:0d:b8:51:bb:72:44:db:a4: da:b6:1d:17:b2:82:d9:20:70:73:92:49:78:a8:bf: 5d:ea:48:fe:cb:ee:92:c6:23:d4:82:b4:46:08:8f: 77:6b:68:33:8b:a9:b9:df:4a:db:ad:de:47:08:04: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:80:26:31:6C:3E:DE:08:5C:78:C9:8C:34:0E:F1:B8:15:52:39:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:67:4d:58:bf:a7:52:27:16:40:ef:dd:65:03:11:39:f5:73: cd:c9:c6:14:bf:3d:fb:56:78:1f:5f:2e:31:80:bb:f9:f9:9f: c4:c6:41:fa:77:bc:3b:46:17:22:90:cc:ef:bc:27:a2:88:ca: d2:1c:33:7b:39:01:94:95:71:db:1e:68:4a:a7:fc:aa:9c:45: ca:a5:12:aa:25:18:06:27:51:aa:49:f1:dc:98:e6:0f:0c:1b: fa:13:d7:9f:76:f0:b5:a3:bf:ce:2f:75:23:97:7d:2c:c2:49: c8:68:53:4c:47:20:fc:27:a5:4e:8d:4e:7f:f3:6e:cd:8e:67: 0d:b9:77:84:c0:6b:a4:0f:8b:5e:fb:2f:74:f6:a4:8a:5c:33: 53:20:61:ed:87:a7:53:00:3f:5d:44:cb:a7:59:e1:bc:13:e6: 6d:8c:7b:4f:f2:24:66:a5:74:d1:f8:8b:82:b2:17:dc:52:a2: 31:a9:d7:09:aa:30:d6:05:c3:a1:fe:0c:08:33:f4:7d:7f:27: 6d:0d:d5:ce:51:4b:21:49:9b:6f:2d:c1:f9:0b:c0:8c:42:9e: 7e:40:37:c0:52:35:e7:f8:5c:68:b8:48:31:a6:c7:03:b6:11: 8f:22:9d:0e:7a:b4:8d:f7:2f:4f:5a:e6:59:b8:79:75:60:28: b7:73:e6:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdI+TuZ2s3zq9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjExODdlMjQtNjkyMy00ZjE0LTk5NzMtMjg3MTkxMjU0YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwCTLiMQCZKuFuQkcWVG+s8DWbaclWnpV3Y+ g0pHSkgDk5IfbmnH1v+jpLYQ0Ap/u3WXOIgVd/F7Nczslqd/DGgmS9XzHfFMCJZa B+7I1UsWFwIZls9u9ujo2N+YMaiyp+fqE8zYopsW0i85eJW/H5E9SEZAiQ6ESAP7 4wgxQ8NZToSjPkouiM4R+pyZ/yk+X0mT8P80zQwj1LgJUCxiYX27gE3GLvRsWI3+ xeRwMHCmWOEUPdiDoq3pXn5qS2zbyByFLwbrds47DbhRu3JE26Tath0XsoLZIHBz kkl4qL9d6kj+y+6SxiPUgrRGCI93a2gzi6m530rbrd5HCASjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2AJjFsPt4IXHjJjDQO8bgVUjkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTJjZmM2YTctMGNlMS0z ODE2LTg4ODAtZDQ1MGNiNGEzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhnTVi/p1InFkDv3WUDETn1c83JxhS/PftWeB9fLjGAu/n5n8TGQfp3 vDtGFyKQzO+8J6KIytIcM3s5AZSVcdseaEqn/KqcRcqlEqolGAYnUapJ8dyY5g8M G/oT15928LWjv84vdSOXfSzCSchoU0xHIPwnpU6NTn/zbs2OZw25d4TAa6QPi177 L3T2pIpcM1MgYe2Hp1MAP11Ey6dZ4bwT5m2Me0/yJGaldNH4i4KyF9xSojGp1wmq MNYFw6H+DAgz9H1/J20N1c5RSyFJm28twfkLwIxCnn5AN8BSNef4XGi4SDGmxwO2 EY8inQ56tI33L09a5lm4eXVgKLdz5tw= -----END CERTIFICATE-----Generated at Thu Oct 1 10:05:19 2026 by rpki-client