$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa File: aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa (raw, json) Hash identifier: oJlY1N3lAmPNZCLhxBjXNGFfpuHB4Zv5PKnLWflTIWI= Subject key identifier: B5:88:7A:04:78:4C:7C:C4:7E:A4:CF:65:CF:29:FE:84:5E:23:B9:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9B7261157A2D48D27FC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.66.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9b:72:61:15:7a:2d:48:d2:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0dbab435-d480-457e-ad46-c10ab2c7351c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:4e:d3:38:96:94:47:6b:4b:42:3b:f4:4f: e0:a2:de:4a:2d:9b:f9:28:27:fc:d7:b5:ba:33:a9: f0:cf:39:67:7d:3f:a5:26:78:de:f4:55:86:df:76: 3f:33:ea:6f:9c:c3:26:89:4c:80:de:47:9f:f2:88: 43:72:e1:1c:c3:2e:ab:0f:d9:e8:bd:ac:52:b2:8c: b2:7c:df:90:d6:95:89:1f:1a:c3:d0:26:e7:e2:59: 60:9c:8d:4e:db:91:da:37:bd:83:fd:65:9f:93:84: e9:aa:aa:79:7d:c6:24:ce:8a:51:7f:3b:9e:ff:78: 22:2e:77:c5:5e:50:2b:9c:4d:2f:8e:c4:84:9b:49: 2f:93:5f:a6:5a:de:78:99:94:09:19:70:ac:eb:86: 91:eb:e3:21:06:35:7d:d4:d0:ed:7c:ec:11:91:f3: 0d:60:0f:66:13:f5:5d:be:d6:e5:a1:da:f2:b7:5d: ba:06:27:a5:01:26:1e:5a:23:ff:10:75:2a:dd:69: 81:5e:1a:13:fd:8d:0a:8e:16:a5:73:de:cc:29:4e: c9:88:0e:31:85:f3:51:2d:1d:fe:f7:fd:77:08:68: 67:10:d4:1b:60:8d:fa:49:f6:18:93:d5:62:7b:df: e9:92:68:1d:96:51:9b:4d:94:0d:72:0f:f5:44:54: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:7A:04:78:4C:7C:C4:7E:A4:CF:65:CF:29:FE:84:5E:23:B9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:9d:cc:8f:3d:2f:d0:7b:79:43:81:52:52:5c:f3:7c:b1:df: 0a:2d:32:36:28:66:17:f9:dd:ed:fc:04:ac:6a:ba:2e:fd:47: 08:e3:0c:ec:95:53:3e:d8:68:47:97:47:af:2d:83:a6:39:ac: a5:e2:ed:50:14:5d:24:93:bd:33:31:cc:e5:bc:1b:ca:03:61: ed:b0:43:27:c5:85:84:3e:ac:5c:58:b6:06:3d:15:59:8d:32: 27:c0:2d:da:fc:ab:f4:25:4c:27:f7:06:e9:fc:7d:9d:61:b5: b1:36:ac:25:73:a6:18:c9:3b:73:ab:37:a0:00:f3:de:78:74: 50:24:07:66:a6:57:7b:f3:f6:19:b2:6c:ce:33:50:0f:04:32: 3e:75:19:d2:56:28:f0:0d:de:40:24:e0:e9:c0:69:4d:fc:46: be:90:af:22:a2:f2:02:ee:c7:bb:ec:ad:97:8d:b3:f6:b9:f9: b0:ac:57:ad:2a:dc:97:a2:21:77:ad:5a:b2:5e:e8:03:86:8d: 69:e1:7e:da:09:3a:3e:08:2e:d7:3e:6c:d8:dc:08:4c:46:6d: b4:35:80:5e:92:64:cf:69:0b:97:ac:93:5d:26:59:af:91:12: 8c:c1:f5:dd:bf:8c:f6:2b:53:b6:93:2e:bc:ec:a3:57:48:52: b2:95:da:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZtyYRV6LUjSf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGRiYWI0MzUtZDQ4MC00NTdlLWFkNDYtYzEwYWIyYzczNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5dO0ziWlEdrS0I79E/got5KLZv5KCf817W6 M6nwzzlnfT+lJnje9FWG33Y/M+pvnMMmiUyA3kef8ohDcuEcwy6rD9novaxSsoyy fN+Q1pWJHxrD0Cbn4llgnI1O25HaN72D/WWfk4Tpqqp5fcYkzopRfzue/3giLnfF XlArnE0vjsSEm0kvk1+mWt54mZQJGXCs64aR6+MhBjV91NDtfOwRkfMNYA9mE/Vd vtblodryt126BielASYeWiP/EHUq3WmBXhoT/Y0Kjhalc97MKU7JiA4xhfNRLR3+ 9/13CGhnENQbYI36SfYYk9Vie9/pkmgdllGbTZQNcg/1RFTLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWIegR4THzEfqTPZc8p/oReI7k1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzZjcyOGMtMmI1Zi0z M2NjLWE3ODYtZjVhOTMzM2FjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIidzI89L9B7eUOBUlJc83yx3wotMjYoZhf53e38BKxqui79RwjjDOyV Uz7YaEeXR68tg6Y5rKXi7VAUXSSTvTMxzOW8G8oDYe2wQyfFhYQ+rFxYtgY9FVmN MifALdr8q/QlTCf3Bun8fZ1htbE2rCVzphjJO3OrN6AA8954dFAkB2amV3vz9hmy bM4zUA8EMj51GdJWKPAN3kAk4OnAaU38Rr6QryKi8gLux7vsrZeNs/a5+bCsV60q 3JeiIXetWrJe6AOGjWnhftoJOj4ILtc+bNjcCExGbbQ1gF6SZM9pC5esk10mWa+R EozB9d2/jPYrU7aTLrzso1dIUrKV2jo= -----END CERTIFICATE-----Generated at Sat Oct 3 10:57:07 2026 by rpki-client