$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa File: af5296f1-8df0-36d8-8a09-14eade4ba563.roa (raw, json) Hash identifier: DAhY1uozbQoIS8Kpbxx1UL0HAbb1SWV8lfGrSteX08M= Subject key identifier: CE:F5:F6:70:49:AC:96:19:AA:67:9A:0C:8A:11:E7:FF:9D:3B:9C:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBC02494F8C0E34C49F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.80.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bc:02:49:4f:8c:0e:34:c4:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3c03a1a5-948c-4fa1-af95-9bd336c8f681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:18:c6:ae:07:d2:52:ac:66:6b:4d:cc:f2:76: 17:a6:18:10:62:8d:2e:eb:85:17:80:99:d4:bc:3e: 02:cd:a3:01:ab:d3:f4:9d:db:2b:f3:bb:29:32:d0: af:ff:90:fe:fd:cf:2a:59:ad:42:d0:3b:e1:b7:e9: 81:5c:cb:2e:e6:79:ef:0b:4f:84:21:c6:6b:24:b4: 06:37:4d:52:fb:72:0b:22:85:1d:41:24:2f:37:c0: b4:49:1c:57:ea:57:25:b3:d4:8f:19:58:3d:c9:02: 67:5b:4a:64:ae:ae:2e:52:33:24:0e:54:81:c6:20: 0f:17:0e:77:7d:cb:b1:da:a6:c0:f4:d2:cc:c9:78: 76:85:34:b8:a4:45:19:fd:5a:c2:20:26:ee:9a:0b: d8:3b:58:fa:4e:f5:fd:2f:e3:ca:5b:00:90:cf:c8: 5f:c7:b8:fe:e1:fa:f0:76:f3:f3:40:89:0d:ff:2c: 8d:b4:38:22:e3:15:10:e1:76:b0:0f:88:51:3a:44: 78:4c:bc:fc:c8:41:b0:a9:f4:fa:d2:55:3c:6b:ab: 81:16:4a:fc:5f:f0:f4:cd:c3:0c:87:8e:f9:ba:c7: b4:c4:bf:59:c1:f0:91:42:e6:82:e2:9a:78:01:14: 1e:15:89:38:ef:a3:2e:31:1f:00:d8:b8:f8:1b:97: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:F6:70:49:AC:96:19:AA:67:9A:0C:8A:11:E7:FF:9D:3B:9C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.80.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:00:3d:cd:b0:a7:10:e3:d3:21:5d:08:ab:ae:9a:09:0f:b3: 40:8c:a0:f1:88:07:f7:3c:9d:18:a4:8d:2a:87:db:a1:aa:15: 12:07:6b:fd:7e:a6:df:5f:f3:cc:2d:bd:58:95:b6:6c:4c:dc: cd:18:c2:d2:a4:d2:9e:10:c8:a9:73:aa:99:75:8a:28:18:1c: e5:13:e0:91:ec:53:8c:e0:da:c0:d0:20:ea:a4:6c:3e:d8:3e: b6:3c:48:72:f7:41:96:c0:85:3c:55:73:2a:ad:bc:ca:b0:bf: f0:c6:f7:36:4f:db:8d:85:1c:78:18:0a:7d:8a:a6:c6:6c:28: e5:26:c1:14:a9:43:b8:71:a6:e8:3c:d4:c1:81:d5:73:9a:43: b8:53:72:3f:93:cf:58:5d:21:bf:85:9f:e5:65:45:04:8f:39: 79:22:5b:eb:77:e9:af:42:6c:43:7e:6b:ec:6d:8d:b1:ec:49: c7:81:ce:39:d6:5a:4c:50:65:38:d5:67:da:12:6e:8e:67:98: 57:2a:9f:2c:46:3d:43:5d:23:40:52:57:7a:78:38:59:58:97: b5:cd:b4:25:e7:63:d2:3e:20:b2:1c:25:f0:58:7b:8d:1c:72: e4:dc:08:ad:64:59:7e:01:85:6d:6d:62:47:3a:97:d2:73:da: bc:84:76:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbwCSU+MDjTEn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk M2MwM2ExYTUtOTQ4Yy00ZmExLWFmOTUtOWJkMzM2YzhmNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxjGrgfSUqxma03M8nYXphgQYo0u64UXgJnU vD4CzaMBq9P0ndsr87spMtCv/5D+/c8qWa1C0Dvht+mBXMsu5nnvC0+EIcZrJLQG N01S+3ILIoUdQSQvN8C0SRxX6lcls9SPGVg9yQJnW0pkrq4uUjMkDlSBxiAPFw53 fcux2qbA9NLMyXh2hTS4pEUZ/VrCICbumgvYO1j6TvX9L+PKWwCQz8hfx7j+4frw dvPzQIkN/yyNtDgi4xUQ4XawD4hROkR4TLz8yEGwqfT60lU8a6uBFkr8X/D0zcMM h475use0xL9ZwfCRQuaC4pp4ARQeFYk476MuMR8A2Lj4G5e1YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM719nBJrJYZqmeaDIoR5/+dO5xSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWY1Mjk2ZjEtOGRmMC0z NmQ4LThhMDktMTRlYWRlNGJhNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEAPc2wpxDj0yFdCKuumgkPs0CMoPGIB/c8nRikjSqH26GqFRIHa/1+ pt9f88wtvViVtmxM3M0YwtKk0p4QyKlzqpl1iigYHOUT4JHsU4zg2sDQIOqkbD7Y PrY8SHL3QZbAhTxVcyqtvMqwv/DG9zZP242FHHgYCn2KpsZsKOUmwRSpQ7hxpug8 1MGB1XOaQ7hTcj+Tz1hdIb+Fn+VlRQSPOXkiW+t36a9CbEN+a+xtjbHsSceBzjnW WkxQZTjVZ9oSbo5nmFcqnyxGPUNdI0BSV3p4OFlYl7XNtCXnY9I+ILIcJfBYe40c cuTcCK1kWX4BhW1tYkc6l9Jz2ryEdu0= -----END CERTIFICATE-----Generated at Mon Sep 28 17:07:47 2026 by rpki-client