$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa File: bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa (raw, json) Hash identifier: X04oK0H240iBNXhDWHo+Hs6t+J36uJkXG50N9XxJfWg= Subject key identifier: B0:07:F6:A5:47:BE:D1:E4:1F:38:41:98:13:8B:AA:86:54:55:CD:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DDD70F9F30A343178F280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.158.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:dd:70:f9:f3:0a:34:31:78:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1951fbba-007a-468c-adb0-e353e2585f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:d5:7e:d2:7c:0d:be:14:e5:b9:e1:4f:57: 45:4b:5a:30:2c:79:f7:4c:cd:08:bf:b6:29:d9:a0: d6:09:3b:3d:a6:67:c4:80:eb:d1:70:d6:d0:dc:e6: 4f:5e:93:78:89:98:e5:73:d8:c1:9a:e3:81:ad:6e: 77:2b:47:2c:41:93:ee:9e:7f:38:78:d7:c0:a4:b3: a1:71:fc:35:5f:3a:ed:83:4e:c7:f9:76:34:5e:b0: b2:9f:a0:67:68:8d:3b:27:4e:22:c2:8d:16:27:44: e7:ad:bd:d0:25:7a:ec:26:56:16:9e:ab:4f:c0:66: 7a:10:29:52:6a:8b:ab:07:93:b1:51:95:7c:dd:fa: 6c:31:e0:a8:19:f1:ee:c8:b7:8b:ae:e0:dd:70:d6: 59:18:91:11:2c:b3:58:62:e9:55:ea:f7:4c:f7:aa: e4:58:d7:d3:23:12:b7:16:5e:a0:a6:f3:14:3f:fc: 6d:a8:6d:08:b7:9d:e1:08:0d:0e:0c:71:5a:1b:e9: b2:ca:d0:ae:a1:61:d1:1a:a0:96:2a:2b:cf:b6:75: c2:02:44:e9:5c:a4:fe:c4:2a:66:aa:ac:31:22:93: d4:dd:25:e9:3e:39:97:e0:c7:4c:cf:8b:04:08:73: ba:b5:96:bd:1c:ca:73:bf:5d:64:49:bc:52:ed:de: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:07:F6:A5:47:BE:D1:E4:1F:38:41:98:13:8B:AA:86:54:55:CD:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9f:d5:85:ce:aa:37:74:d3:fa:9a:19:6e:f2:10:9f:fb:f4: 46:5c:ee:31:85:59:44:3b:62:b3:3e:9f:d6:9f:02:43:4a:13: bf:2c:8a:4c:66:3a:94:bd:c7:2d:ae:b7:94:ee:14:5f:17:95: 11:7e:36:8c:2a:f2:52:89:20:0c:13:78:cd:4e:4b:86:23:e5: 5b:f0:83:3c:66:61:db:01:4c:7d:7d:b6:df:2f:30:80:09:a3: b0:9f:7b:e0:af:ad:d8:07:c3:25:b9:5c:a9:8d:18:14:75:af: 28:19:2a:ca:9f:0a:ad:1a:67:8f:68:c7:b9:aa:bd:98:9b:e1: 65:3d:e0:fc:bd:27:11:ec:2f:40:db:70:96:af:b7:17:c4:26: aa:19:ca:e6:ba:86:8a:9c:ac:8d:15:c5:1c:82:1c:ae:8d:67: 6d:09:99:8d:ef:e0:57:93:48:1e:86:8b:f5:e1:85:7e:e7:ca: 72:a2:4a:6d:05:54:bb:f0:9a:8e:c4:39:7c:77:44:77:7f:eb: bb:ae:3e:36:05:e4:7e:8d:22:8a:41:70:96:3a:0c:46:f1:f6: 38:c7:ed:62:8e:1c:a7:7d:66:d1:fb:49:6c:9c:ba:21:ba:b7: 3c:65:9b:cb:c0:93:a8:9f:0f:ee:d3:b4:df:5d:47:cd:7e:72: da:ff:e0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd1w+fMKNDF48oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTk1MWZiYmEtMDA3YS00NjhjLWFkYjAtZTM1M2UyNTg1Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomTVftJ8Db4U5bnhT1dFS1owLHn3TM0Iv7Yp 2aDWCTs9pmfEgOvRcNbQ3OZPXpN4iZjlc9jBmuOBrW53K0csQZPunn84eNfApLOh cfw1Xzrtg07H+XY0XrCyn6BnaI07J04iwo0WJ0Tnrb3QJXrsJlYWnqtPwGZ6EClS aourB5OxUZV83fpsMeCoGfHuyLeLruDdcNZZGJERLLNYYulV6vdM96rkWNfTIxK3 Fl6gpvMUP/xtqG0It53hCA0ODHFaG+myytCuoWHRGqCWKivPtnXCAkTpXKT+xCpm qqwxIpPU3SXpPjmX4MdMz4sECHO6tZa9HMpzv11kSbxS7d6qfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAH9qVHvtHkHzhBmBOLqoZUVc1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYwMjRhNjQtN2RjYS0z ZmQ0LWI5YjQtYzRkOTQ5NGZjMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIp78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOf1YXOqjd00/qaGW7yEJ/79EZc7jGFWUQ7YrM+n9afAkNKE78sikxm OpS9xy2ut5TuFF8XlRF+Nowq8lKJIAwTeM1OS4Yj5VvwgzxmYdsBTH19tt8vMIAJ o7Cfe+CvrdgHwyW5XKmNGBR1rygZKsqfCq0aZ49ox7mqvZib4WU94Py9JxHsL0Db cJavtxfEJqoZyua6hoqcrI0VxRyCHK6NZ20JmY3v4FeTSB6Gi/XhhX7nynKiSm0F VLvwmo7EOXx3RHd/67uuPjYF5H6NIopBcJY6DEbx9jjH7WKOHKd9ZtH7SWycuiG6 tzxlm8vAk6ifD+7TtN9dR81+ctr/4HE= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:21 2026 by rpki-client