$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa File: d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa (raw, json) Hash identifier: ZY3diOROgrJU/0eBkKiEDVJZ2ixvghias5rWLoYQtKA= Subject key identifier: 67:01:56:40:00:55:BF:1E:47:A5:73:13:54:66:66:E4:A6:CA:8B:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA1319EBA255642A1FD1C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.99.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a1:31:9e:ba:25:56:42:a1:fd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a44b5f46-55e9-42f0-9248-b14b575b7602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:f1:e1:90:fd:9f:9f:cf:7c:9b:49:aa:33: 73:09:0d:fc:41:18:6e:55:37:50:0b:13:a5:92:51: 23:42:40:13:c5:0c:0b:e5:2f:8b:b2:fd:62:88:d7: aa:61:70:62:37:54:39:ae:ee:ad:52:7c:50:1b:d9: 1e:35:0e:a3:f7:76:f4:9a:94:26:6d:95:fb:d3:8b: 22:bb:2d:17:ef:33:47:04:73:ac:8c:83:e3:09:13: 1a:ba:3e:7d:05:87:2a:e8:db:2d:c6:46:00:80:b6: f9:9a:4e:c4:bc:0a:b5:29:da:14:a3:df:68:ca:25: f5:e8:aa:8f:5f:d5:5f:5d:bf:9c:6f:ef:fa:78:3c: 89:50:f4:15:51:63:fe:8f:2f:c9:8c:07:93:70:e3: a6:91:53:03:8d:6d:f7:92:81:dc:a1:7d:bb:7c:ee: 72:8a:1a:84:e3:31:b3:3e:ea:da:e2:47:c7:d8:bc: 19:4b:32:de:73:82:4c:36:7c:d7:00:94:54:ed:57: 60:8d:9e:e6:83:72:af:43:57:05:cf:a9:42:47:fc: 6e:d0:9a:1c:40:80:1b:67:60:b1:f0:dc:f5:3e:ee: 90:f2:65:8d:39:be:70:4d:ca:bc:5e:77:79:25:82: e6:4a:8c:0b:45:77:f2:c6:b5:18:75:08:36:ac:29: 49:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:56:40:00:55:BF:1E:47:A5:73:13:54:66:66:E4:A6:CA:8B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:15:8f:c9:81:48:e5:57:0a:56:a6:f8:c2:67:84:ff:5d:81: 72:d6:fb:c7:30:d7:ca:eb:c5:7a:7e:62:68:71:9a:67:53:b1: 38:9e:bd:77:a4:80:68:38:23:60:98:77:54:59:6b:97:10:0d: 71:19:20:e0:d0:f0:fd:a2:f8:e1:51:f3:db:5e:30:18:4d:30: 2a:b2:82:fa:e9:74:53:a2:63:80:01:55:a9:f5:50:77:93:59: 2c:f4:9c:86:54:d5:92:60:ee:43:3c:1e:b7:5f:16:6a:3c:d8: ac:0b:08:5a:7a:ca:b0:97:b6:2c:29:ef:8d:49:61:e2:8d:b2: c7:39:ef:a9:e1:a5:19:a1:19:48:45:fe:d5:5d:f7:99:88:10: 63:32:3e:d4:8b:f1:98:05:a9:e2:9f:97:ce:2d:47:13:71:f6: d5:ff:31:a3:e2:ce:19:b8:ed:4e:51:f2:b2:66:75:e9:e9:c3: 8c:50:4c:92:d6:20:eb:80:99:22:67:7d:42:ab:3a:86:25:aa: 21:3f:c3:f9:31:9e:a1:57:cc:d9:8a:26:3e:bd:83:a5:e0:fc: 26:04:2f:c0:a9:6f:03:0a:cb:67:70:87:2f:8d:b8:24:e6:d7: 48:fe:f4:25:b3:a7:17:01:cc:e9:e1:6a:52:8f:74:01:dd:b4: 0e:3c:53:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaExnrolVkKh/RwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTQ0YjVmNDYtNTVlOS00MmYwLTkyNDgtYjE0YjU3NWI3NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnXx4ZD9n5/PfJtJqjNzCQ38QRhuVTdQCxOl klEjQkATxQwL5S+Lsv1iiNeqYXBiN1Q5ru6tUnxQG9keNQ6j93b0mpQmbZX704si uy0X7zNHBHOsjIPjCRMauj59BYcq6NstxkYAgLb5mk7EvAq1KdoUo99oyiX16KqP X9VfXb+cb+/6eDyJUPQVUWP+jy/JjAeTcOOmkVMDjW33koHcoX27fO5yihqE4zGz Pura4kfH2LwZSzLec4JMNnzXAJRU7VdgjZ7mg3KvQ1cFz6lCR/xu0JocQIAbZ2Cx 8Nz1Pu6Q8mWNOb5wTcq8Xnd5JYLmSowLRXfyxrUYdQg2rClJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcBVkAAVb8eR6VzE1RmZuSmyounMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDFiZGFmMDUtOTg1YS0z NTVjLThiM2MtNWFkNjkzYTljYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwVj8mBSOVXClam+MJnhP9dgXLW+8cw18rrxXp+YmhxmmdTsTievXek gGg4I2CYd1RZa5cQDXEZIODQ8P2i+OFR89teMBhNMCqygvrpdFOiY4ABVan1UHeT WSz0nIZU1ZJg7kM8HrdfFmo82KwLCFp6yrCXtiwp741JYeKNssc576nhpRmhGUhF /tVd95mIEGMyPtSL8ZgFqeKfl84tRxNx9tX/MaPizhm47U5R8rJmdenpw4xQTJLW IOuAmSJnfUKrOoYlqiE/w/kxnqFXzNmKJj69g6Xg/CYEL8CpbwMKy2dwhy+NuCTm 10j+9CWzpxcBzOnhalKPdAHdtA48U9E= -----END CERTIFICATE-----Generated at Tue Sep 29 03:00:23 2026 by rpki-client