$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa File: dd7699ab-4990-3cb4-a38d-d21affd6272b.roa (raw, json) Hash identifier: CWrB2jUalgCe5lNWqN5YkIc7erhUVMR7ikuOYxKx4SI= Subject key identifier: DB:24:18:EE:E2:A5:07:5B:D5:33:5A:AE:09:8C:F5:DA:96:0A:5B:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD42F6EB8668CF3A03140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.152.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d4:2f:6e:b8:66:8c:f3:a0:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7f41b868-7d64-46e2-993f-0671109a7680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:9d:eb:34:cb:c3:ab:61:30:63:3d:3a:9d: 5e:d2:fa:e7:24:67:00:ef:41:4d:47:38:45:fe:e3: f5:3a:36:2c:81:95:cc:0f:5c:52:82:ee:af:3f:33: a6:2a:a5:c8:fb:f9:de:38:25:9d:7d:e9:72:8a:75: 8f:06:6d:a7:ac:85:58:53:77:89:23:a2:f7:b6:ac: ef:d3:aa:ad:7a:9a:05:6a:ac:17:f1:e1:b6:31:5d: ae:14:04:7f:1a:c8:b8:4f:45:00:af:e9:38:d3:38: c1:11:12:aa:b9:53:50:fb:30:ad:0f:c5:17:14:1f: 75:29:5a:fb:2f:8c:ab:94:f6:3b:41:62:10:a9:af: 49:76:50:cd:44:72:c4:cf:1d:91:15:61:6d:60:6c: 64:75:20:28:8b:df:1f:68:95:7f:d3:64:4a:ef:a7: 05:17:0d:45:e2:c0:e8:79:e2:1f:3b:ad:0c:42:8b: cf:c5:94:1f:d2:a0:88:6f:30:2d:f7:7b:d1:d0:fd: c5:1d:df:57:f6:b3:54:79:d6:61:00:c8:e5:f2:34: 7b:e3:2f:d5:a1:a1:5c:63:cc:0b:56:d5:6b:0c:fa: 55:7f:8b:6d:0f:68:6f:e7:7c:bc:0e:0a:df:de:55: 32:04:de:ba:52:e3:6f:b2:7f:cf:b8:16:50:f6:15: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:24:18:EE:E2:A5:07:5B:D5:33:5A:AE:09:8C:F5:DA:96:0A:5B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3b:21:d2:ed:23:b4:c6:b8:28:71:3d:98:4e:26:1a:26:9e: 12:d9:9f:a5:5a:a6:2c:b9:21:04:2f:20:48:0f:45:8b:3d:bd: 50:5f:d9:bf:b5:61:18:13:16:bf:16:84:2f:32:2e:80:e9:a5: 66:80:5b:53:bc:b5:d8:d6:65:84:9a:b5:5f:b0:e2:f1:4e:f4: e4:0a:b7:81:69:0a:7c:17:68:41:8b:f9:50:47:53:fd:60:17: a5:58:2a:82:7a:9e:77:7d:aa:04:e0:49:fa:4d:fb:ae:8e:f4: 4e:ea:a8:3f:c1:bb:ce:bf:31:a6:1a:97:db:9a:89:f0:78:a5: 2e:f3:58:5a:5a:f6:4d:0c:d6:96:f4:30:ea:79:55:f8:02:75: 80:78:0f:24:52:73:57:b8:e4:0f:88:5f:fd:79:26:0b:fe:05: 5b:dd:10:5f:1b:b9:50:7a:de:fc:67:27:14:23:f4:a8:10:ef: 7c:00:95:cf:c5:9d:ba:e4:3c:02:22:6c:a7:dd:47:49:af:ac: ee:01:53:c8:1b:9f:22:fb:05:a8:6e:0f:cd:57:b2:a2:46:fc: 14:32:9f:b8:78:3e:d0:20:7f:f7:4a:b6:1e:1a:82:f5:f4:ad: 62:47:0f:de:fd:a2:c9:48:43:00:58:ed:00:ea:5c:b4:e0:66: 65:e1:ef:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdQvbrhmjPOgMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk N2Y0MWI4NjgtN2Q2NC00NmUyLTk5M2YtMDY3MTEwOWE3NjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaid6zTLw6thMGM9Op1e0vrnJGcA70FNRzhF /uP1OjYsgZXMD1xSgu6vPzOmKqXI+/neOCWdfelyinWPBm2nrIVYU3eJI6L3tqzv 06qtepoFaqwX8eG2MV2uFAR/Gsi4T0UAr+k40zjBERKquVNQ+zCtD8UXFB91KVr7 L4yrlPY7QWIQqa9JdlDNRHLEzx2RFWFtYGxkdSAoi98faJV/02RK76cFFw1F4sDo eeIfO60MQovPxZQf0qCIbzAt93vR0P3FHd9X9rNUedZhAMjl8jR74y/VoaFcY8wL VtVrDPpVf4ttD2hv53y8Dgrf3lUyBN66UuNvsn/PuBZQ9hXiPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNskGO7ipQdb1TNargmM9dqWCltpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ3Njk5YWItNDk5MC0z Y2I0LWEzOGQtZDIxYWZmZDYyNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH47IdLtI7TGuChxPZhOJhomnhLZn6Vapiy5IQQvIEgPRYs9vVBf2b+1 YRgTFr8WhC8yLoDppWaAW1O8tdjWZYSatV+w4vFO9OQKt4FpCnwXaEGL+VBHU/1g F6VYKoJ6nnd9qgTgSfpN+66O9E7qqD/Bu86/MaYal9uaifB4pS7zWFpa9k0M1pb0 MOp5VfgCdYB4DyRSc1e45A+IX/15Jgv+BVvdEF8buVB63vxnJxQj9KgQ73wAlc/F nbrkPAIibKfdR0mvrO4BU8gbnyL7BahuD81XsqJG/BQyn7h4PtAgf/dKth4agvX0 rWJHD979oslIQwBY7QDqXLTgZmXh77E= -----END CERTIFICATE-----Generated at Mon Sep 28 12:29:58 2026 by rpki-client