$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa File: bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa (raw, json) Hash identifier: 3B87ZN7BCV/hvS5/ub1gmhw0bPt3FSxBvea8vQB6qbo= Subject key identifier: 40:99:38:F9:5A:E6:0D:7B:2C:05:A8:36:D9:C1:46:7B:B5:CB:60:2D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EEA87774D62CB5B159C30E600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.53.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:77:4d:62:cb:5b:15:9c:30:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=d1a8fb9b-a2d0-4690-9958-03bfdbf8c0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:ea:37:c8:a2:be:40:81:9a:44:dc:8e:66: 86:92:c8:6c:7f:72:f1:da:02:d8:43:07:c7:60:b7: 95:b8:51:38:aa:67:57:b8:4d:47:cd:8b:94:ff:2e: 43:6c:f2:ed:50:51:62:73:0b:f6:ae:a4:c3:ea:bb: 88:50:29:2d:15:84:08:1a:1c:2f:0a:74:66:6c:0d: 20:cc:9e:5d:4b:cc:fa:c3:2f:b9:bd:7f:db:25:24: 39:50:80:1a:47:c4:e1:fe:7f:9b:80:1d:b2:d9:e2: ad:72:57:ec:c6:29:07:ab:17:93:68:fb:43:13:f1: 2c:b4:a2:ee:db:da:e1:b5:64:b1:85:59:e5:3a:8f: 27:9d:01:8a:08:4b:b8:4f:f9:28:32:f6:a1:35:be: 7e:55:50:9b:7e:b3:31:6d:c3:c8:3d:9a:9d:70:e1: ba:4d:64:ea:96:fe:3d:a5:4b:94:f2:fe:50:61:56: 3c:5d:fe:8b:2e:4d:6f:93:fa:2d:a4:cd:3c:8d:d8: 1f:1c:8b:40:56:8c:39:91:23:32:18:d1:07:58:f9: 85:9a:50:a7:b1:dd:35:19:a4:c6:08:a3:ec:c0:df: 9b:43:bd:d2:4d:4b:8c:31:20:2f:60:51:82:e5:83: 70:2d:6c:17:a5:2d:07:44:8d:f1:c1:f6:2b:03:17: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:99:38:F9:5A:E6:0D:7B:2C:05:A8:36:D9:C1:46:7B:B5:CB:60:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf34c38a-1f32-36f7-8a06-10b5fe0803e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.53.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bd:43:e1:e8:c9:89:3b:8b:22:f1:3b:e7:1e:c7:c2:f4:8c: af:f9:b5:ab:14:ba:48:d9:99:34:5e:1b:71:3c:af:e0:8a:62: 93:64:6f:b5:16:58:fb:e2:01:42:e9:56:41:6a:3c:9a:a9:32: 46:03:5a:e6:32:8f:52:ef:24:1b:c7:2b:91:6a:f0:68:49:ce: fb:2d:35:dc:45:6e:ec:b8:79:ca:13:dc:d3:06:b6:19:35:85: 86:9e:e1:f8:b1:d0:4f:d6:1f:48:e5:18:56:58:c5:cf:80:e1: 13:be:48:21:f5:9e:54:e4:b3:5f:4f:f1:5c:c0:06:54:56:81: 3d:53:75:be:18:09:94:3b:0c:24:d3:51:0f:87:56:95:b0:60: a0:f7:34:23:d7:a4:b9:41:3f:e8:05:ec:90:ad:12:09:41:2c: 03:ed:77:6d:57:c6:34:78:44:0f:66:32:10:04:f3:b3:9f:7d: 8f:02:a0:eb:35:2c:10:92:6b:20:aa:df:18:86:db:7c:6b:c9: e4:11:20:69:8c:d6:f7:40:f4:98:ae:fc:84:3d:d4:75:0c:e0: 20:10:48:74:18:cb:d9:63:5e:dd:1f:7e:8e:b7:df:a3:c7:3d: 81:90:48:20:99:92:b7:b2:3a:9e:f5:ad:92:87:fa:af:6c:d5: 63:5b:e0:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3dNYstbFZww5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFhOGZiOWItYTJkMC00NjkwLTk5NTgtMDNiZmRiZjhjMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01TqN8iivkCBmkTcjmaGkshsf3Lx2gLYQwfH YLeVuFE4qmdXuE1HzYuU/y5DbPLtUFFicwv2rqTD6ruIUCktFYQIGhwvCnRmbA0g zJ5dS8z6wy+5vX/bJSQ5UIAaR8Th/n+bgB2y2eKtclfsxikHqxeTaPtDE/EstKLu 29rhtWSxhVnlOo8nnQGKCEu4T/koMvahNb5+VVCbfrMxbcPIPZqdcOG6TWTqlv49 pUuU8v5QYVY8Xf6LLk1vk/otpM08jdgfHItAVow5kSMyGNEHWPmFmlCnsd01GaTG CKPswN+bQ73STUuMMSAvYFGC5YNwLWwXpS0HRI3xwfYrAxcZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECZOPla5g17LAWoNtnBRnu1y2AtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYzNGMzOGEtMWYzMi0z NmY3LThhMDYtMTBiNWZlMDgwM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIjWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+9Q+HoyYk7iyLxO+cex8L0jK/5tasUukjZmTReG3E8r+CKYpNkb7UW WPviAULpVkFqPJqpMkYDWuYyj1LvJBvHK5Fq8GhJzvstNdxFbuy4ecoT3NMGthk1 hYae4fix0E/WH0jlGFZYxc+A4RO+SCH1nlTks19P8VzABlRWgT1Tdb4YCZQ7DCTT UQ+HVpWwYKD3NCPXpLlBP+gF7JCtEglBLAPtd21XxjR4RA9mMhAE87OffY8CoOs1 LBCSayCq3xiG23xryeQRIGmM1vdA9Jiu/IQ91HUM4CAQSHQYy9ljXt0ffo6336PH PYGQSCCZkreyOp71rZKH+q9s1WNb4O4= -----END CERTIFICATE-----Generated at Tue Sep 29 16:08:25 2026 by rpki-client