$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa File: a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa (raw, json) Hash identifier: AXPeLfTxn/NgmwV4Qu1nolBatJIbho8rtC8wKDWMbqE= Subject key identifier: 2C:15:12:00:D0:C8:BC:B2:E7:1A:3C:35:AE:38:39:DC:36:01:E4:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9D5B5C8C1C70DE9802C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.95.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9d:5b:5c:8c:1c:70:de:98:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a6bb08f8-2ca8-453a-8936-f4ee786fdd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:f3:63:7b:68:7c:38:ec:a8:53:a2:4b:b9: 3f:8f:0c:fd:e8:82:b7:d6:d3:34:8e:8c:e2:25:b4: 73:8a:8f:57:27:a1:0d:b0:00:d2:a4:f2:84:34:1c: a3:6f:7a:c8:e5:6b:e5:4a:a1:d9:49:92:9a:2a:77: 97:48:38:14:a3:50:b3:88:99:7e:b7:a6:0f:4b:02: 66:c7:18:ca:90:9a:45:84:60:e4:9c:fd:cc:c5:26: fc:e2:bd:42:38:5d:7c:f4:81:17:be:a1:93:f6:42: 57:6d:9b:b5:b8:a4:59:6f:3e:cc:8c:be:0d:cd:28: 21:ea:b6:4b:a7:46:8a:9e:f4:f7:2d:b3:c3:3b:c1: cf:66:56:d2:87:ff:8b:5d:6d:70:f2:d9:33:1e:14: b7:37:40:97:bb:d8:b6:53:f9:cc:77:2f:1c:22:ca: 7f:90:9f:df:59:0c:2c:50:77:db:88:53:65:06:de: 08:4b:8b:c0:aa:0d:2d:f1:a8:c2:a6:9f:84:d2:b1: 03:a4:3a:7e:2f:be:2b:53:56:b0:37:d0:83:c6:72: 8e:06:5d:04:6f:ae:2e:a0:6b:af:0e:af:88:94:6c: af:5d:5b:ce:8b:d2:de:bd:a9:2b:23:21:30:50:18: 94:15:72:55:16:66:be:55:87:82:89:48:14:84:02: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:15:12:00:D0:C8:BC:B2:E7:1A:3C:35:AE:38:39:DC:36:01:E4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fb:7b:fe:86:64:d6:55:7f:f8:9a:2b:67:68:46:28:16:7c: d1:6a:20:d6:8b:38:9e:b9:ea:e1:82:5a:ad:21:bf:12:b2:22: d5:aa:1f:1d:f8:b7:81:6b:22:94:f1:7f:8e:5f:f2:98:6a:bd: 8b:65:1c:3a:58:c6:ce:9a:ac:d4:fb:d3:bb:4b:8c:32:89:db: 16:68:a0:a4:cb:c6:c0:55:74:f1:2d:57:a5:0d:a4:c0:81:a3: 9b:d1:ea:1a:fc:67:e6:cb:b2:82:29:c1:ad:b0:12:9b:39:52: 25:4b:f3:8b:24:f9:c6:a1:77:81:f6:fa:19:66:e8:e6:41:af: 7e:58:48:b4:4f:87:f2:79:07:6d:2e:d6:2d:31:f3:38:22:02: 20:b8:17:df:c2:f2:73:ee:4d:5a:83:99:0f:eb:8b:c3:76:cc: 1b:cf:b7:56:94:41:5d:89:2e:45:32:09:b9:4d:f6:39:5d:58: 9b:ed:cb:ba:b0:81:a2:e5:64:46:76:28:dd:1c:e1:1a:72:c7: 96:08:04:d2:6a:3a:55:ce:37:fa:bf:c6:5e:b1:5c:4d:ab:ae: 06:2b:5a:13:0d:a4:13:da:4f:80:e0:e2:42:95:98:1a:09:7e: f6:26:ea:a6:8a:c5:6f:16:8b:ba:c5:e9:29:43:0e:63:27:f7: 2b:1c:bf:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ1bXIwccN6YAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTZiYjA4ZjgtMmNhOC00NTNhLTg5MzYtZjRlZTc4NmZkZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhrzY3tofDjsqFOiS7k/jwz96IK31tM0jozi JbRzio9XJ6ENsADSpPKENByjb3rI5WvlSqHZSZKaKneXSDgUo1CziJl+t6YPSwJm xxjKkJpFhGDknP3MxSb84r1COF189IEXvqGT9kJXbZu1uKRZbz7MjL4NzSgh6rZL p0aKnvT3LbPDO8HPZlbSh/+LXW1w8tkzHhS3N0CXu9i2U/nMdy8cIsp/kJ/fWQws UHfbiFNlBt4IS4vAqg0t8ajCpp+E0rEDpDp+L74rU1awN9CDxnKOBl0Eb64uoGuv Dq+IlGyvXVvOi9LevakrIyEwUBiUFXJVFma+VYeCiUgUhAI8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwVEgDQyLyy5xo8Na44Odw2AeQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVkODkxZDktMjUzMC0z MjJmLWFmZjEtYWU2MWQyMmQ0ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP7e/6GZNZVf/iaK2doRigWfNFqINaLOJ656uGCWq0hvxKyItWqHx34 t4FrIpTxf45f8phqvYtlHDpYxs6arNT707tLjDKJ2xZooKTLxsBVdPEtV6UNpMCB o5vR6hr8Z+bLsoIpwa2wEps5UiVL84sk+cahd4H2+hlm6OZBr35YSLRPh/J5B20u 1i0x8zgiAiC4F9/C8nPuTVqDmQ/ri8N2zBvPt1aUQV2JLkUyCblN9jldWJvty7qw gaLlZEZ2KN0c4Rpyx5YIBNJqOlXON/q/xl6xXE2rrgYrWhMNpBPaT4Dg4kKVmBoJ fvYm6qaKxW8Wi7rF6SlDDmMn9yscv30= -----END CERTIFICATE-----Generated at Mon Sep 28 15:08:17 2026 by rpki-client