$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa File: d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa (raw, json) Hash identifier: 4PRIv5YhmiQnnB7ygwmCuQNmNsgcEWEyvBZ8vh0XIZQ= Subject key identifier: D8:E7:ED:79:E5:CB:17:AC:FC:D2:52:85:65:3F:75:2E:57:A8:66:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB366A165DB146CECB480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.176.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b3:66:a1:65:db:14:6c:ec:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bc55f852-eda3-477d-8d3f-92cba4349e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fc:10:03:06:df:ed:44:d7:63:b2:d6:25:08: af:b9:1a:9f:0d:3c:56:53:cd:d0:1c:c1:e3:2e:a6: d7:9f:7e:8d:f3:a6:ed:4a:74:52:06:7c:73:10:c4: 04:72:7e:36:f1:70:1e:0f:01:c4:c3:47:ec:ab:d9: b7:6b:af:fb:d1:c6:c4:95:ed:0f:39:7c:52:9b:3c: fa:5e:f4:f5:eb:76:1c:ef:79:28:60:5f:ef:e2:dd: dc:d6:39:d3:9a:24:94:05:10:b7:45:48:7f:1c:cd: 6e:d4:64:e4:96:6a:22:7b:74:04:96:5a:78:89:84: 16:90:96:7d:83:21:e0:61:83:3c:64:9b:b2:39:01: 1b:5d:ac:99:c1:32:97:3a:78:83:32:be:13:47:16: 3c:a0:06:f0:ea:49:74:0b:cd:a8:d0:96:3d:96:b5: 36:6a:05:81:69:7d:36:b5:19:43:f2:cf:7a:5c:3d: 83:19:4e:eb:f9:cd:e0:bf:ab:1b:09:c8:77:7b:0f: ae:55:c6:70:1a:d5:48:01:a2:04:76:96:31:6a:67: f0:10:fd:b8:57:c2:8f:87:c3:c1:d1:b0:23:92:af: a4:27:d4:ee:a9:7e:22:7c:20:30:c4:6c:16:f1:9c: 52:91:7e:5f:b2:6f:41:b4:2e:9d:89:c0:46:3d:8a: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E7:ED:79:E5:CB:17:AC:FC:D2:52:85:65:3F:75:2E:57:A8:66:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0f307a2-c0e1-30f1-8ae8-2171dc620710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c1:70:00:50:d4:63:25:4a:0b:7d:d8:c2:7d:d4:f6:85:1b: df:3d:d0:bd:9e:17:ca:9f:64:29:6b:41:d2:f1:0a:ff:92:2d: a5:38:8d:1e:d5:c4:f9:d7:9f:e3:e9:99:85:42:02:16:c1:b0: 6b:47:c5:40:8c:bd:55:85:4a:fb:be:7d:98:c6:cb:30:30:cb: a1:82:2d:89:97:10:f8:08:7e:7f:6f:d0:4a:8c:d6:aa:c9:8b: a2:23:47:18:39:f3:a8:9c:a1:9f:a7:16:77:94:37:e8:b0:27: 7d:91:07:b4:c4:7c:f5:87:77:dd:ea:55:7e:a8:7a:56:85:fa: 68:3a:ac:11:d3:7b:34:27:4e:cd:78:0e:cd:1c:de:3b:1b:ef: 73:83:1c:a0:85:ad:d7:3b:e0:74:75:26:df:09:06:7b:2b:1e: a8:5c:64:b3:66:3c:8a:1c:bd:17:61:83:fe:aa:71:6c:fe:d3: f7:35:95:a5:d4:28:2f:71:e8:2b:88:44:10:e6:6a:b3:cd:7f: f4:ba:7a:69:14:a2:47:cc:ec:50:00:23:40:8a:b5:12:f1:ac: b5:48:73:5b:d5:2e:3a:84:aa:9e:fe:7a:7b:b9:80:96:6d:f0: 5d:6b:a3:ad:6f:e3:38:78:f9:96:99:05:07:8d:7a:df:6b:6e: 37:66:04:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbNmoWXbFGzstIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmM1NWY4NTItZWRhMy00NzdkLThkM2YtOTJjYmE0MzQ5ZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPwQAwbf7UTXY7LWJQivuRqfDTxWU83QHMHj LqbXn36N86btSnRSBnxzEMQEcn428XAeDwHEw0fsq9m3a6/70cbEle0POXxSmzz6 XvT163Yc73koYF/v4t3c1jnTmiSUBRC3RUh/HM1u1GTklmoie3QEllp4iYQWkJZ9 gyHgYYM8ZJuyOQEbXayZwTKXOniDMr4TRxY8oAbw6kl0C82o0JY9lrU2agWBaX02 tRlD8s96XD2DGU7r+c3gv6sbCch3ew+uVcZwGtVIAaIEdpYxamfwEP24V8KPh8PB 0bAjkq+kJ9TuqX4ifCAwxGwW8ZxSkX5fsm9BtC6dicBGPYpBMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjn7Xnlyxes/NJShWU/dS5XqGYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDBmMzA3YTItYzBlMS0z MGYxLThhZTgtMjE3MWRjNjIwNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/BcABQ1GMlSgt92MJ91PaFG9890L2eF8qfZClrQdLxCv+SLaU4jR7V xPnXn+PpmYVCAhbBsGtHxUCMvVWFSvu+fZjGyzAwy6GCLYmXEPgIfn9v0EqM1qrJ i6IjRxg586icoZ+nFneUN+iwJ32RB7TEfPWHd93qVX6oelaF+mg6rBHTezQnTs14 Ds0c3jsb73ODHKCFrdc74HR1Jt8JBnsrHqhcZLNmPIocvRdhg/6qcWz+0/c1laXU KC9x6CuIRBDmarPNf/S6emkUokfM7FAAI0CKtRLxrLVIc1vVLjqEqp7+enu5gJZt 8F1ro61v4zh4+ZaZBQeNet9rbjdmBO8= -----END CERTIFICATE-----Generated at Mon Sep 28 13:30:27 2026 by rpki-client