$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa File: d3e7c7a6-4f36-36ab-a259-e80420017c29.roa (raw, json) Hash identifier: /2Z5aIpmgQqfW6oeUszfxwtHml4St9NgdqDhc4vOfLo= Subject key identifier: F9:D0:26:EA:1C:30:41:33:73:59:E3:05:38:33:4A:03:8E:B9:F8:81 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC94F30640A8FF5CD1710 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.133.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c9:4f:30:64:0a:8f:f5:cd:17:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=331b8e56-fde2-4a12-bf15-656d9cebb4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:f4:49:64:82:5b:16:ae:50:92:ca:43:9b: 7f:e3:39:d4:7a:ea:c2:4c:a4:d0:11:e5:94:0f:3d: 8b:8f:ce:0f:13:8c:25:96:70:fc:9d:1c:f9:8b:3a: 65:cd:9e:76:df:93:c4:74:26:0c:a0:d8:2a:fb:f2: f9:3d:2c:d1:e1:70:bd:cb:fa:d6:f2:4c:54:1f:9e: e2:36:86:da:b6:5f:05:5b:92:eb:ff:ad:1f:42:f0: 9b:01:6d:12:a0:c6:22:16:22:b3:35:d8:63:6c:ba: dd:d9:0f:7a:27:d9:21:75:f8:8b:e9:ba:03:49:64: ba:71:1c:d9:06:d1:c9:b2:c2:a9:af:83:e3:97:fc: 7a:56:30:74:a2:62:92:fc:68:1c:fa:55:c7:2c:30: 3f:ec:68:45:37:3b:0e:77:e4:fb:17:c2:26:22:39: 51:8e:d1:1a:f5:11:4d:1b:bd:44:51:09:7a:c4:80: 79:0c:78:a0:62:b4:0e:29:84:b0:9b:dc:da:15:8c: 6c:cc:13:64:63:49:2f:01:50:7c:bb:d1:e5:19:bd: c3:06:59:cd:20:2e:6c:d6:d4:43:9d:63:38:4f:44: 3e:f2:8a:8e:2f:a8:56:9b:cc:e0:36:94:50:55:c3: 36:e8:34:c3:e7:f4:7a:65:9c:aa:a9:ea:1e:8e:34: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D0:26:EA:1C:30:41:33:73:59:E3:05:38:33:4A:03:8E:B9:F8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0f:c6:44:bb:bb:fe:0e:4e:2a:a4:ef:1c:ad:2a:30:d3:74: 09:c6:fb:70:b4:61:00:b8:35:bf:dd:29:d2:78:8d:4d:8a:6a: 5e:67:ec:2a:cb:15:e1:05:37:dd:2b:87:7b:8b:6f:46:8b:5e: 77:34:ae:34:2d:fb:62:8d:94:4f:98:80:4f:3d:20:d3:5c:a3: 65:4f:a1:71:2a:80:d5:e3:76:97:9d:ea:fe:d0:ea:2b:a0:aa: 28:a8:12:1e:e2:20:4c:f8:7e:70:64:10:72:1f:33:c4:ab:7f: 63:0d:1b:29:04:02:f4:e5:9c:34:9b:ad:d8:2f:86:3e:5d:f4: 2b:4d:a4:9b:e9:a9:91:4b:dc:89:8f:1c:11:17:68:d8:91:64: 89:27:39:df:f8:79:72:4e:ea:1c:dc:40:a1:cb:ed:2d:4d:6f: de:74:2a:e3:2a:bb:47:7f:ed:d9:20:fb:50:89:1b:c4:8a:0e: bd:6b:03:1b:70:4b:45:9e:1b:36:2f:5a:d1:d7:c0:a4:f4:ba: cb:46:e9:80:d7:4e:89:5c:a3:e7:bc:0a:27:e5:3a:d4:3e:ea: a9:c7:ed:8a:3b:98:c1:63:a7:35:ff:17:14:5e:5d:6a:d0:71: b3:39:1f:d5:b8:ad:cd:f5:c7:d7:d6:7f:33:b9:f5:38:49:c2: c8:98:87:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPclPMGQKj/XNFxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzMxYjhlNTYtZmRlMi00YTEyLWJmMTUtNjU2ZDljZWJiNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhH0SWSCWxauUJLKQ5t/4znUeurCTKTQEeWU Dz2Lj84PE4wllnD8nRz5izplzZ5235PEdCYMoNgq+/L5PSzR4XC9y/rW8kxUH57i Nobatl8FW5Lr/60fQvCbAW0SoMYiFiKzNdhjbLrd2Q96J9khdfiL6boDSWS6cRzZ BtHJssKpr4Pjl/x6VjB0omKS/Ggc+lXHLDA/7GhFNzsOd+T7F8ImIjlRjtEa9RFN G71EUQl6xIB5DHigYrQOKYSwm9zaFYxszBNkY0kvAVB8u9HlGb3DBlnNIC5s1tRD nWM4T0Q+8oqOL6hWm8zgNpRQVcM26DTD5/R6ZZyqqeoejjSyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnQJuocMEEzc1njBTgzSgOOufiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDNlN2M3YTYtNGYzNi0z NmFiLWEyNTktZTgwNDIwMDE3YzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkPxkS7u/4OTiqk7xytKjDTdAnG+3C0YQC4Nb/dKdJ4jU2Kal5n7CrL FeEFN90rh3uLb0aLXnc0rjQt+2KNlE+YgE89INNco2VPoXEqgNXjdped6v7Q6iug qiioEh7iIEz4fnBkEHIfM8Srf2MNGykEAvTlnDSbrdgvhj5d9CtNpJvpqZFL3ImP HBEXaNiRZIknOd/4eXJO6hzcQKHL7S1Nb950KuMqu0d/7dkg+1CJG8SKDr1rAxtw S0WeGzYvWtHXwKT0ustG6YDXTolco+e8CiflOtQ+6qnH7Yo7mMFjpzX/FxReXWrQ cbM5H9W4rc31x9fWfzO59ThJwsiYh8A= -----END CERTIFICATE-----Generated at Mon Sep 28 09:30:33 2026 by rpki-client