$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa File: d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa (raw, json) Hash identifier: KgvwgTquuQpqwxvQ6lUD0ZYRD2Ykj6GFAzFbcYW6itM= Subject key identifier: E0:56:47:97:EB:FE:D2:39:84:BA:32:D6:2A:A7:C8:2A:7A:FC:33:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8B1840766EE3F679DA73 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.159.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8b:18:40:76:6e:e3:f6:79:da:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a5c6cd7f-db32-414e-9f30-0028b3dd3edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:7b:8e:45:4a:98:c5:95:a9:4f:87:0c:21: 9e:16:49:06:83:c6:26:7d:24:52:ef:a1:cc:69:ee: 62:6a:64:f0:e6:2e:f0:ca:41:db:1f:c3:9f:b2:87: 84:f2:f3:7d:07:57:85:f6:5d:87:f3:09:5d:78:74: b8:0e:9b:1e:30:40:4a:ec:aa:bd:74:34:74:6a:11: 4f:50:20:51:50:c6:cd:b9:aa:b7:0f:82:3d:0f:b2: 6c:72:fc:be:29:aa:1d:cc:29:ca:e3:1f:00:93:7c: d6:57:8d:7c:a2:ab:d4:3b:85:90:e5:8d:0e:8d:e3: 84:21:f2:76:47:65:28:5b:fd:08:77:4d:32:71:69: 5b:77:ec:2c:db:b3:b6:1c:c0:b7:3f:1c:72:32:79: 39:f9:a1:c2:be:b0:d5:64:29:1c:d6:f4:a5:8c:84: ff:e0:84:6a:35:5a:76:d9:3e:de:81:eb:1b:57:4f: 11:c0:5f:57:77:c2:4d:b5:60:d2:1c:84:5d:0a:e4: de:45:b0:2e:50:00:3a:c3:dc:3a:4f:60:cd:f3:f2: 5f:2d:ab:4c:02:30:ec:5b:f7:b4:9b:6b:32:15:d3: bb:22:0d:22:28:c7:85:32:1a:ea:3a:0d:e6:8b:3c: 7d:43:3d:1d:3e:b6:ff:f5:d3:73:cb:fe:90:0c:12: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:56:47:97:EB:FE:D2:39:84:BA:32:D6:2A:A7:C8:2A:7A:FC:33:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.159.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e5:d1:89:b0:65:43:01:4d:f4:fd:4b:ce:d4:27:7f:55:a1: ba:b4:fa:c1:e5:66:94:28:0c:0c:64:6e:78:d4:d8:4c:31:2c: 38:16:82:87:fe:b7:cc:c4:4a:f4:8e:a9:f2:1c:a7:3d:67:2d: d7:a6:db:ea:6f:e8:01:35:38:f0:63:02:35:db:72:96:fa:ed: 37:98:80:21:f2:1e:7d:98:53:0a:a0:ea:87:98:c5:58:a9:59: 1c:50:fd:1f:df:63:55:3d:d5:22:af:5a:71:f3:50:ef:94:ad: ca:e7:a9:b5:e2:a7:c2:f3:1c:28:06:0c:86:16:f0:f7:49:2f: 7e:ce:7b:c8:d9:23:2b:37:f0:33:9c:4c:14:d1:07:43:52:af: ea:cb:c0:ac:56:23:52:6f:d8:3d:a4:c3:23:b8:1c:2f:5f:a1: 6c:13:e4:5a:2b:36:d8:94:ac:da:bf:ef:d3:71:fc:0c:2d:30: 18:a7:b7:e0:72:1a:e8:ef:0d:d4:34:4c:3c:34:9c:f6:74:eb: 4c:23:4b:9d:b1:63:d9:34:a4:be:88:71:19:d4:61:87:35:01: 4a:f6:52:74:ff:65:44:52:02:94:34:85:c4:36:f3:d3:e2:37: f4:58:d3:3c:96:f6:79:63:1f:8d:40:93:5b:8c:73:97:aa:55: 19:b0:19:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYsYQHZu4/Z52nMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTVjNmNkN2YtZGIzMi00MTRlLTlmMzAtMDAyOGIzZGQzZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VN7jkVKmMWVqU+HDCGeFkkGg8YmfSRS76HM ae5iamTw5i7wykHbH8OfsoeE8vN9B1eF9l2H8wldeHS4DpseMEBK7Kq9dDR0ahFP UCBRUMbNuaq3D4I9D7Jscvy+KaodzCnK4x8Ak3zWV418oqvUO4WQ5Y0OjeOEIfJ2 R2UoW/0Id00ycWlbd+ws27O2HMC3PxxyMnk5+aHCvrDVZCkc1vSljIT/4IRqNVp2 2T7egesbV08RwF9Xd8JNtWDSHIRdCuTeRbAuUAA6w9w6T2DN8/JfLatMAjDsW/e0 m2syFdO7Ig0iKMeFMhrqOg3mizx9Qz0dPrb/9dNzy/6QDBLbSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBWR5fr/tI5hLoy1iqnyCp6/DOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDFlZTBmYTQtMTcxYi0z MTZmLWFjNmEtZjc1MWYyYWJkNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIp+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHl0YmwZUMBTfT9S87UJ39Vobq0+sHlZpQoDAxkbnjU2EwxLDgWgof+ t8zESvSOqfIcpz1nLdem2+pv6AE1OPBjAjXbcpb67TeYgCHyHn2YUwqg6oeYxVip WRxQ/R/fY1U91SKvWnHzUO+UrcrnqbXip8LzHCgGDIYW8PdJL37Oe8jZIys38DOc TBTRB0NSr+rLwKxWI1Jv2D2kwyO4HC9foWwT5ForNtiUrNq/79Nx/AwtMBint+By GujvDdQ0TDw0nPZ060wjS52xY9k0pL6IcRnUYYc1AUr2UnT/ZURSApQ0hcQ289Pi N/RY0zyW9nljH41Ak1uMc5eqVRmwGTk= -----END CERTIFICATE-----Generated at Fri Oct 9 10:26:31 2026 by rpki-client