$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa File: cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa (raw, json) Hash identifier: nbjN8ly1Yf1U0H7LfILR1AFvqaz0iplhKieBy13Ve1s= Subject key identifier: C5:C0:81:17:AF:7B:C2:7D:ED:C5:79:DC:55:1D:63:A5:1B:B1:B0:FD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DDA6F30EB92BFCEB90A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.123.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:da:6f:30:eb:92:bf:ce:b9:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=195b3b43-d867-4551-a5df-366c24276b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:07:b8:3a:2a:24:59:af:96:3f:9c:db:7f: 2c:37:80:3d:3b:1a:dd:23:54:db:27:c9:7d:9c:e5: c8:35:85:cc:5c:82:57:56:4f:eb:0c:8e:96:67:2d: b0:de:43:a5:ec:e0:25:bb:ac:0e:b3:2b:8c:e3:67: 6f:ac:c9:74:bc:f0:a8:d3:19:1d:57:06:2c:69:93: df:7c:ae:d8:6d:f7:8b:a7:d5:b3:4a:06:5e:a0:ba: dc:aa:e3:94:ca:1c:05:77:50:30:1a:30:7c:90:8b: b0:7e:ae:e5:d7:d9:2a:d0:b3:04:0e:0a:99:87:bb: ac:06:3a:93:48:8a:e7:d0:fb:d9:b1:8e:10:d6:98: 0d:f4:33:16:c7:77:35:e7:f5:f1:5d:78:88:89:bd: 3f:84:bc:41:73:56:d7:9f:6c:7e:5f:98:6f:85:c7: 65:1e:fe:a8:c1:97:45:f1:e8:3a:6e:88:91:af:97: 2e:93:a3:b1:86:f6:26:b7:1b:69:61:c9:ee:88:c3: ff:a0:af:e1:83:be:9e:4e:50:2b:f9:f4:21:bd:9a: 00:40:a1:a1:da:10:e2:03:5f:b8:65:3c:67:e5:ef: 4a:62:b9:72:1b:83:6d:d2:8b:60:2b:bd:f6:dc:e7: cb:44:99:56:85:08:35:6d:39:15:08:22:68:36:58: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C0:81:17:AF:7B:C2:7D:ED:C5:79:DC:55:1D:63:A5:1B:B1:B0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d8:a0:45:4b:e9:44:63:91:b1:36:59:ef:3e:65:f5:54:9a: 43:d6:a4:29:0f:8f:0c:af:d8:a4:df:af:e3:4f:c1:ed:d6:eb: 7d:f6:d2:25:c3:e0:0e:91:11:32:e9:9d:90:05:3d:03:52:35: 03:da:97:17:78:1b:72:a6:7f:49:59:77:81:62:bf:d3:22:c9: 9f:f7:21:17:49:c5:e2:be:36:fa:6b:a3:64:b3:e3:e9:77:cd: d6:d7:da:b2:9c:1e:ed:ef:1a:68:ca:4a:38:da:d7:d1:df:15: b0:5d:10:9e:cb:d0:74:d2:98:fb:8e:77:8b:0d:62:2b:40:17: e3:8c:c4:51:3d:80:58:93:a6:ec:8c:7c:d6:e0:15:8a:45:9b: 32:cc:8b:bd:be:34:41:c8:29:35:e6:ac:29:3f:34:e8:67:fa: b8:f6:dc:72:66:c7:52:20:07:2a:11:5c:b6:99:66:2d:84:ed: f3:a2:dc:25:d3:f0:69:7b:e1:33:2a:0c:a8:5e:14:a7:41:9c: a5:a5:4d:df:c1:0f:9c:24:b4:bc:73:22:4e:9a:b4:bf:27:fe: 98:ce:9f:4e:52:0d:b0:32:16:a9:23:cf:a1:db:8f:82:55:b4: 13:56:00:c8:6c:e0:5b:bf:46:4a:b5:2b:27:0e:97:70:7f:a5: 9a:dc:c2:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdpvMOuSv865CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTk1YjNiNDMtZDg2Ny00NTUxLWE1ZGYtMzY2YzI0Mjc2YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPAHuDoqJFmvlj+c238sN4A9OxrdI1TbJ8l9 nOXINYXMXIJXVk/rDI6WZy2w3kOl7OAlu6wOsyuM42dvrMl0vPCo0xkdVwYsaZPf fK7YbfeLp9WzSgZeoLrcquOUyhwFd1AwGjB8kIuwfq7l19kq0LMEDgqZh7usBjqT SIrn0PvZsY4Q1pgN9DMWx3c15/XxXXiIib0/hLxBc1bXn2x+X5hvhcdlHv6owZdF 8eg6boiRr5cuk6OxhvYmtxtpYcnuiMP/oK/hg76eTlAr+fQhvZoAQKGh2hDiA1+4 ZTxn5e9KYrlyG4Nt0otgK7323OfLRJlWhQg1bTkVCCJoNljDMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXAgReve8J97cV53FUdY6UbsbD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZmZGVhYjgtNGIxYi0z OTI4LTkxNmUtMWRlZGMxODlkZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXYoEVL6URjkbE2We8+ZfVUmkPWpCkPjwyv2KTfr+NPwe3W63320iXD 4A6RETLpnZAFPQNSNQPalxd4G3Kmf0lZd4Fiv9MiyZ/3IRdJxeK+Nvpro2Sz4+l3 zdbX2rKcHu3vGmjKSjja19HfFbBdEJ7L0HTSmPuOd4sNYitAF+OMxFE9gFiTpuyM fNbgFYpFmzLMi72+NEHIKTXmrCk/NOhn+rj23HJmx1IgByoRXLaZZi2E7fOi3CXT 8Gl74TMqDKheFKdBnKWlTd/BD5wktLxzIk6atL8n/pjOn05SDbAyFqkjz6Hbj4JV tBNWAMhs4Fu/Rkq1KycOl3B/pZrcwng= -----END CERTIFICATE-----Generated at Tue Sep 29 02:08:28 2026 by rpki-client