$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bac5e927-f8ed-36be-90cd-6ebfe8459db5.roa File: bac5e927-f8ed-36be-90cd-6ebfe8459db5.roa (raw, json) Hash identifier: wUVAKMU7Fv8V3tlzsLhZPcpAzWur3cGPGNn/3EQElNw= Subject key identifier: 47:FA:F3:4B:79:A1:9F:77:B1:D7:B9:FE:11:62:51:3A:2A:16:B2:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EFB3A95ED42EBA5FC54F8BBEE Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bac5e927-f8ed-36be-90cd-6ebfe8459db5.roa Signing time: Fri 28 Aug 2026 00:34:27 +0000 ROA not before: Fri 28 Aug 2026 00:34:27 +0000 ROA not after: Thu 26 Nov 2026 01:34:27 +0000 asID: 19527 IP address blocks: 34.4.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:3a:95:ed:42:eb:a5:fc:54:f8:bb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 28 00:34:27 2026 GMT Not After : Nov 26 01:34:27 2026 GMT Subject: CN=8fa05fe1-85e7-4974-bbcd-2357a68ef025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7a:b5:be:fe:03:7e:97:23:fc:92:b0:e9:4b: 38:c6:64:9e:bb:d1:d5:21:b3:fa:d3:b1:e0:72:36: 78:68:36:3c:dc:80:04:b3:4e:29:68:c9:7b:31:24: e4:98:e8:94:95:25:59:0b:62:9c:64:7c:9c:2d:48: 02:c1:1b:e2:89:6e:b6:9f:07:e2:b9:a7:95:5c:f2: b2:be:2a:9b:80:90:ed:71:e4:b3:28:c3:9f:46:7f: a2:09:cb:aa:54:2a:d1:2a:45:4a:5a:c7:dd:41:b9: ba:49:42:ba:63:c0:6b:30:77:44:b7:3b:e3:ac:93: 53:ed:3a:b1:fb:8f:30:e0:38:29:15:f7:e3:3f:56: 3b:ec:96:da:43:5e:ce:40:ef:7c:78:04:a8:1c:0e: 5f:1b:32:83:c5:7a:1f:5e:51:3c:29:df:41:3b:40: 1b:c0:cd:21:be:4f:bb:b9:b8:89:b8:d6:5e:aa:7f: ae:f9:66:2e:de:22:35:80:28:29:4a:61:44:7f:2a: 09:de:1d:a4:17:f3:e9:20:e0:d3:29:6c:fe:e9:d9: 97:60:fe:ea:9f:03:94:1b:f5:92:29:3f:ee:d8:9d: a2:a5:41:65:75:60:14:4f:1f:bf:ee:b2:d7:2f:00: b5:7c:cf:bb:b9:a2:45:ab:8f:bd:6d:d6:df:b6:7d: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FA:F3:4B:79:A1:9F:77:B1:D7:B9:FE:11:62:51:3A:2A:16:B2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bac5e927-f8ed-36be-90cd-6ebfe8459db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:40:16:3e:1d:0e:bb:f0:a8:31:e9:bf:f6:67:cd:0e:f0:5b: 09:95:67:bf:40:b0:05:70:ae:00:3d:76:19:ca:b9:4a:22:05: a0:26:cb:fb:a7:5a:db:e0:6a:98:58:77:40:a2:76:78:a9:e7: 1c:02:e9:cf:12:6f:c9:a7:e6:fc:9d:e6:6a:07:01:9c:e9:bf: c0:c0:94:72:c4:ee:d3:85:f6:ee:65:a0:e8:f4:65:a5:6d:e0: 9d:0a:e5:04:08:cf:cd:8f:98:c0:8c:19:9c:d8:ae:75:c9:f8: ae:65:4f:cc:49:73:0e:98:da:e5:e3:24:78:8c:f5:a0:69:71: 75:81:b8:c4:56:76:6d:87:9a:c3:1e:a4:f5:f5:72:d8:4d:75: 20:d3:e5:9a:89:3a:f6:f7:a3:86:2e:c0:40:2a:55:03:6b:e5: 50:ca:f6:33:85:f7:46:e2:f0:25:fc:90:2f:35:7c:e6:1e:bd: a5:eb:32:41:d3:2c:6e:90:35:9d:b0:af:69:52:6a:16:35:94: 24:4a:be:2e:80:7a:07:26:6e:fd:61:45:a0:94:0b:de:ec:97: bd:99:6a:86:93:1d:5f:3c:d3:01:4d:f8:36:2d:31:9d:78:f2: d5:fe:6c:08:71:a8:9e:8c:ca:70:66:ef:2a:45:7f:48:c8:43: cd:a5:75:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77OpXtQuul/FT4u+4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgyODAwMzQyN1oXDTI2MTEyNjAxMzQyN1owLzEtMCsGA1UEAxMk OGZhMDVmZTEtODVlNy00OTc0LWJiY2QtMjM1N2E2OGVmMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hq1vv4Dfpcj/JKw6Us4xmSeu9HVIbP607Hg cjZ4aDY83IAEs04paMl7MSTkmOiUlSVZC2KcZHycLUgCwRviiW62nwfiuaeVXPKy viqbgJDtceSzKMOfRn+iCcuqVCrRKkVKWsfdQbm6SUK6Y8BrMHdEtzvjrJNT7Tqx +48w4DgpFffjP1Y77JbaQ17OQO98eASoHA5fGzKDxXofXlE8Kd9BO0AbwM0hvk+7 ubiJuNZeqn+u+WYu3iI1gCgpSmFEfyoJ3h2kF/PpIODTKWz+6dmXYP7qnwOUG/WS KT/u2J2ipUFldWAUTx+/7rLXLwC1fM+7uaJFq4+9bdbftn3VwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf680t5oZ93sde5/hFiUToqFrL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmFjNWU5MjctZjhlZC0z NmJlLTkwY2QtNmViZmU4NDU5ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxAFj4dDrvwqDHpv/ZnzQ7wWwmVZ79AsAVwrgA9dhnKuUoiBaAmy/un WtvgaphYd0Cidnip5xwC6c8Sb8mn5vyd5moHAZzpv8DAlHLE7tOF9u5loOj0ZaVt 4J0K5QQIz82PmMCMGZzYrnXJ+K5lT8xJcw6Y2uXjJHiM9aBpcXWBuMRWdm2HmsMe pPX1cthNdSDT5ZqJOvb3o4YuwEAqVQNr5VDK9jOF90bi8CX8kC81fOYevaXrMkHT LG6QNZ2wr2lSahY1lCRKvi6Aegcmbv1hRaCUC97sl72ZaoaTHV880wFN+DYtMZ14 8tX+bAhxqJ6MynBm7ypFf0jIQ82ldbQ= -----END CERTIFICATE-----Generated at Sat Sep 5 10:12:41 2026 by rpki-client