$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb40673e-d4df-34db-a91b-1178938f95a7.roa File: cb40673e-d4df-34db-a91b-1178938f95a7.roa (raw, json) Hash identifier: e/OS7ohO/PJpRS4cLbTcfBOY8sv6VH3VgB3FVqMsqY4= Subject key identifier: 4C:E6:DB:7A:4B:17:4A:8D:B2:2C:9B:F1:F3:41:AF:E4:8A:CA:4A:0B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9EBD55AECFCE15BAF040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb40673e-d4df-34db-a91b-1178938f95a7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.72.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9e:bd:55:ae:cf:ce:15:ba:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b92a9656-1821-4628-8eb2-6d43a4472e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:62:ca:a9:39:fc:5a:7c:74:f7:e9:3a:23:74: 48:15:ff:76:13:a4:b5:f0:9d:66:9c:6d:fb:9b:fe: 20:e7:09:cc:e8:e4:79:e5:58:07:df:5b:84:19:55: bc:91:fa:64:e2:83:45:6a:03:a3:9f:7c:6a:c6:5e: 42:43:04:3c:27:3c:08:79:cd:4f:ba:7a:4f:b5:be: e5:ce:be:32:6c:4a:4b:bc:ee:53:08:4b:e8:14:33: 76:9f:72:52:b3:3e:1b:32:15:d4:a4:b4:ae:1c:fb: df:d0:a4:a6:76:7f:87:7f:93:ac:02:6f:a7:b0:99: e5:62:69:1a:05:a6:03:4f:96:c1:8d:bf:51:3c:bb: c1:c0:ad:0e:3b:78:af:7c:8f:b4:e4:40:80:53:b8: a7:af:ac:55:25:42:63:d5:00:e3:fe:34:41:39:39: 7c:f1:08:f9:04:4a:f6:bb:ec:3b:b0:79:6e:a7:d3: 5f:e5:f8:eb:f5:8c:c5:ea:88:2d:4e:2b:3d:5a:f8: 4e:9a:43:72:c2:b9:f6:17:b8:33:29:91:8f:87:4d: 86:80:2f:89:74:3f:fb:19:42:c4:e8:0c:81:23:e9: ae:a5:1e:fa:8a:34:a0:67:4d:5d:a7:47:ba:dc:a3: 61:59:f4:8b:26:e5:d9:40:1f:ef:3c:84:2c:9a:07: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E6:DB:7A:4B:17:4A:8D:B2:2C:9B:F1:F3:41:AF:E4:8A:CA:4A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb40673e-d4df-34db-a91b-1178938f95a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a3:ff:02:5c:4c:fc:4d:85:8b:66:a8:5d:c6:2e:3c:24:99: 52:f3:ad:0a:3e:fe:34:2b:44:a3:23:5d:ca:47:c4:97:16:35: 95:03:68:43:76:7d:44:ed:3b:71:fe:ea:86:b7:7f:c0:25:74: 8f:6f:da:4f:bc:5e:4a:4f:00:80:f6:41:39:74:57:f7:cb:e9: 68:ba:ac:db:31:2e:d3:da:cd:a0:ee:4d:f6:6f:1e:f3:f7:b4: 70:0c:9b:6d:80:0c:dd:d7:7b:97:da:b8:36:e1:b9:bb:ce:6a: a1:c4:34:00:30:e2:55:91:6b:79:a6:49:7b:3e:ab:9a:01:bf: d2:b0:a2:1a:36:aa:f8:db:ea:35:82:af:34:f3:4b:83:8f:b5: 90:a2:59:e9:51:d7:f1:25:3c:95:f1:38:d7:77:4f:81:34:94: c2:0b:b5:7f:4e:d0:2a:95:80:6d:aa:64:46:57:0f:58:85:9e: 08:7d:af:08:9d:1c:ad:77:97:0c:71:ae:d1:fb:9b:ae:ed:43: 9f:f7:fe:dd:b7:aa:a8:49:4e:0d:37:ab:9d:e0:c7:8f:36:ee: 1d:a1:21:3b:b6:98:a5:62:e0:56:88:e4:bb:b0:23:b2:c3:ab: 98:6a:95:58:c5:5a:de:dc:fc:d6:4a:b6:d9:16:ce:29:34:4c: c9:9a:d1:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ69Va7PzhW68EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjkyYTk2NTYtMTgyMS00NjI4LThlYjItNmQ0M2E0NDcyZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimLKqTn8Wnx09+k6I3RIFf92E6S18J1mnG37 m/4g5wnM6OR55VgH31uEGVW8kfpk4oNFagOjn3xqxl5CQwQ8JzwIec1PunpPtb7l zr4ybEpLvO5TCEvoFDN2n3JSsz4bMhXUpLSuHPvf0KSmdn+Hf5OsAm+nsJnlYmka BaYDT5bBjb9RPLvBwK0OO3ivfI+05ECAU7inr6xVJUJj1QDj/jRBOTl88Qj5BEr2 u+w7sHlup9Nf5fjr9YzF6ogtTis9WvhOmkNywrn2F7gzKZGPh02GgC+JdD/7GULE 6AyBI+mupR76ijSgZ01dp0e63KNhWfSLJuXZQB/vPIQsmgcBwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzm23pLF0qNsiyb8fNBr+SKykoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I0MDY3M2UtZDRkZi0z NGRiLWE5MWItMTE3ODkzOGY5NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHej/wJcTPxNhYtmqF3GLjwkmVLzrQo+/jQrRKMjXcpHxJcWNZUDaEN2 fUTtO3H+6oa3f8AldI9v2k+8XkpPAID2QTl0V/fL6Wi6rNsxLtPazaDuTfZvHvP3 tHAMm22ADN3Xe5fauDbhubvOaqHENAAw4lWRa3mmSXs+q5oBv9Kwoho2qvjb6jWC rzTzS4OPtZCiWelR1/ElPJXxONd3T4E0lMILtX9O0CqVgG2qZEZXD1iFngh9rwid HK13lwxxrtH7m67tQ5/3/t23qqhJTg03q53gx4827h2hITu2mKVi4FaI5LuwI7LD q5hqlVjFWt7c/NZKttkWzik0TMma0dA= -----END CERTIFICATE-----Generated at Mon Sep 28 19:59:32 2026 by rpki-client