$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa File: ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa (raw, json) Hash identifier: pumF+VivDS0ZLHJLhAs/Wp+CtmKc6xho/9fMx+s4Dcs= Subject key identifier: A2:8F:60:E5:94:2C:F7:2F:03:E3:F5:0A:F5:5C:EC:02:35:82:F6:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC6DBFD3134D2E84EBB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.169.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c6:db:fd:31:34:d2:e8:4e:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=af77d493-5e22-4b05-9420-fbc2e0129e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:f0:d3:8c:3e:e5:02:ec:8c:86:f9:b2:02: c9:60:ab:2b:87:fd:a5:6b:97:df:4a:ec:1b:ff:12: 54:75:1e:a1:40:73:83:9b:f8:f1:f4:4b:ea:d9:18: bd:ff:16:d1:3d:83:96:28:10:c4:bd:80:51:c9:01: 9b:55:1e:8f:9c:97:12:e3:27:df:22:a7:76:9a:b5: 19:52:13:25:5e:3d:1e:43:92:d8:31:0d:1b:ca:b2: 01:98:18:26:05:ec:a3:17:fe:cd:9f:14:79:6a:88: a9:c5:27:09:66:8e:3f:71:e1:e2:ab:5d:06:01:6d: dc:e3:21:a7:6b:db:ee:82:ec:45:8e:50:7e:95:f6: 5d:78:62:c8:46:eb:ab:9f:b0:d5:c8:12:e8:fd:d6: 6d:04:ac:5b:86:79:22:51:68:f8:82:b5:53:89:fd: 22:85:89:50:24:d1:4a:13:54:42:70:e6:ef:29:92: 29:94:21:c2:9f:f8:b4:5e:9f:b3:1b:d5:3e:45:98: 47:ac:a3:cd:6a:24:aa:c4:d5:f6:00:67:da:f5:8f: 9d:48:8c:e2:04:66:88:ca:18:15:05:e4:e6:58:0d: 31:be:65:e2:7d:db:d9:97:f1:16:b1:32:37:4a:22: 64:4a:7d:b5:0d:46:ab:88:99:a8:44:e9:69:37:a1: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8F:60:E5:94:2C:F7:2F:03:E3:F5:0A:F5:5C:EC:02:35:82:F6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.169.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:59:07:1b:3a:56:da:ec:f0:44:32:9e:b0:6e:bf:ea:fe:d1: 4b:2f:58:6a:de:fa:d4:f7:df:ad:a5:6b:97:34:c9:c6:5e:48: 75:0f:d3:66:8b:49:87:f3:5e:66:d0:38:34:6e:42:dc:4c:54: 3a:f2:ac:a9:e3:70:f0:10:87:59:e0:d4:53:41:35:5c:5c:51: 20:54:46:d7:21:47:4a:96:6e:83:ee:eb:f0:2b:e8:76:b1:8a: 81:82:15:cc:10:ae:64:70:39:2b:31:74:a6:3a:8e:0e:27:71: 94:18:06:c6:8a:d9:34:24:c9:03:36:09:31:fe:bf:bc:cd:08: 36:ed:c1:50:6e:64:9b:0a:8b:a6:fe:91:c1:57:51:b7:7b:3b: 77:0a:7d:26:b2:43:f2:2e:bd:d4:35:c8:04:c0:f1:7a:11:e3: 6b:94:a2:8b:3c:be:08:cd:bc:8e:08:3e:18:fd:03:d4:84:8b: 92:39:3b:80:99:aa:1c:73:ac:15:5e:f2:b8:0d:be:85:95:8d: f1:8b:96:ff:c3:0a:1a:64:7a:db:ef:75:61:c5:fb:79:bc:28: 91:55:59:90:b8:f6:8d:27:d6:5e:fe:9d:0f:ad:9c:68:7f:7f: 4d:43:fc:f8:27:6d:0e:0e:3a:97:3d:fe:d6:c9:2f:45:2a:50: 76:88:8f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcbb/TE00uhOu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWY3N2Q0OTMtNWUyMi00YjA1LTk0MjAtZmJjMmUwMTI5ZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysrw04w+5QLsjIb5sgLJYKsrh/2la5ffSuwb /xJUdR6hQHODm/jx9Evq2Ri9/xbRPYOWKBDEvYBRyQGbVR6PnJcS4yffIqd2mrUZ UhMlXj0eQ5LYMQ0byrIBmBgmBeyjF/7NnxR5aoipxScJZo4/ceHiq10GAW3c4yGn a9vuguxFjlB+lfZdeGLIRuurn7DVyBLo/dZtBKxbhnkiUWj4grVTif0ihYlQJNFK E1RCcObvKZIplCHCn/i0Xp+zG9U+RZhHrKPNaiSqxNX2AGfa9Y+dSIziBGaIyhgV BeTmWA0xvmXifdvZl/EWsTI3SiJkSn21DUariJmoROlpN6HaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKPYOWULPcvA+P1CvVc7AI1gvZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWQ0N2ZkMjktMzBlMy0z YzliLWJjYWEtMmE0ZTZiNTJlNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVZBxs6Vtrs8EQynrBuv+r+0UsvWGre+tT3362la5c0ycZeSHUP02aL SYfzXmbQODRuQtxMVDryrKnjcPAQh1ng1FNBNVxcUSBURtchR0qWboPu6/Ar6Hax ioGCFcwQrmRwOSsxdKY6jg4ncZQYBsaK2TQkyQM2CTH+v7zNCDbtwVBuZJsKi6b+ kcFXUbd7O3cKfSayQ/IuvdQ1yATA8XoR42uUoos8vgjNvI4IPhj9A9SEi5I5O4CZ qhxzrBVe8rgNvoWVjfGLlv/DChpketvvdWHF+3m8KJFVWZC49o0n1l7+nQ+tnGh/ f01D/PgnbQ4OOpc9/tbJL0UqUHaIj0I= -----END CERTIFICATE-----Generated at Mon Sep 28 16:20:18 2026 by rpki-client