$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddd2c10a-8e6a-3371-8c2d-2319dbee140f.roa File: ddd2c10a-8e6a-3371-8c2d-2319dbee140f.roa (raw, json) Hash identifier: ju2bZbABYWxxhYWp2iVZcoN1D7LfRGoO3U1PzrCEyfk= Subject key identifier: 52:DA:0D:E0:25:4B:19:0A:69:1D:D8:76:67:93:3F:0A:0C:9A:15:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4974C8DCC7C4FBACD6DE1260 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddd2c10a-8e6a-3371-8c2d-2319dbee140f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.191.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c8:dc:c7:c4:fb:ac:d6:de:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3376ac5c-58ac-4af0-a5bb-c6d4b681f94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:b0:96:de:e4:d3:c9:5a:b6:76:81:50:e0: 97:c4:51:6f:06:09:3a:36:a9:45:64:ea:e7:39:eb: 7f:37:77:78:63:e4:42:c0:5c:ca:5b:e2:3e:a4:cc: 92:f9:34:e5:12:09:be:5e:4a:ac:8d:ce:66:26:22: af:51:a1:53:53:2d:76:ab:39:95:0f:ef:ca:56:bf: a6:eb:ab:b2:b5:fd:71:2b:3a:da:fa:f9:28:68:cb: 2f:d3:1e:11:fd:8c:1c:33:51:93:56:29:34:34:33: 45:84:4d:73:b7:80:f3:84:a4:31:ba:f8:8d:b5:68: b2:88:df:ce:cc:61:f9:2c:61:8b:d8:4d:da:6c:8b: eb:b3:a8:b7:7e:0c:4e:e9:1b:00:86:e7:c1:07:78: 4c:f4:56:98:db:a4:df:26:72:fd:c7:5e:c1:29:02: 07:09:e2:18:1c:8b:fa:7b:99:d9:60:02:d0:c7:20: 67:63:9f:60:b5:f6:cd:fc:7d:ad:0d:34:a6:0c:aa: d9:9c:4d:72:12:79:2e:33:99:8d:5f:84:9d:d0:96: 5d:72:18:02:99:b8:95:99:98:c2:9e:95:17:42:2c: 9c:0c:b1:d1:d8:16:8b:21:3b:60:56:4c:c3:41:fb: 34:7c:6b:d8:64:24:1d:ff:ef:a5:a9:43:db:06:25: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DA:0D:E0:25:4B:19:0A:69:1D:D8:76:67:93:3F:0A:0C:9A:15:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddd2c10a-8e6a-3371-8c2d-2319dbee140f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ea:d9:87:7a:43:ae:1b:1e:12:79:34:3b:23:96:8a:9d:ed: 36:8f:87:d8:bb:19:d4:d2:bf:4e:de:a5:26:c6:ed:ab:57:4e: 16:48:b3:18:74:70:7a:ce:e1:73:de:31:21:18:68:d5:e5:37: 87:fe:a3:19:fc:04:b8:c4:af:72:95:e8:5d:1a:79:fa:ba:76: f7:6b:0b:bf:01:87:b7:34:11:e0:23:80:e7:1c:f7:61:94:7f: 13:45:c5:fc:9b:41:31:a6:29:d9:bd:bf:f8:f9:a6:fd:df:86: b9:f0:d5:c6:c4:0b:c3:ba:6d:4f:12:18:55:86:59:c0:36:be: 08:0f:e6:b9:d9:28:af:ac:18:55:65:dc:23:04:12:e0:69:b5: e3:da:6c:56:24:a1:1a:4a:7b:eb:13:01:b8:e1:67:05:fd:53: 39:d6:ab:0b:ea:7b:e6:49:46:71:8b:6f:b1:ea:36:e2:af:67: e0:83:8b:c8:68:15:a9:fb:71:ac:97:29:25:b2:58:b5:91:b2: 0e:57:d6:83:fa:af:ae:ed:e8:5d:81:e8:4b:bf:50:5d:04:d9: 01:23:53:21:4a:4b:7f:b1:c4:b1:1c:a3:4a:5b:35:78:28:5e: cd:a8:82:75:44:09:16:89:14:3a:90:12:7e:73:b8:8a:a6:ac: 68:28:70:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMjcx8T7rNbeEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzM3NmFjNWMtNThhYy00YWYwLWE1YmItYzZkNGI2ODFmOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZewlt7k08latnaBUOCXxFFvBgk6NqlFZOrn Oet/N3d4Y+RCwFzKW+I+pMyS+TTlEgm+Xkqsjc5mJiKvUaFTUy12qzmVD+/KVr+m 66uytf1xKzra+vkoaMsv0x4R/YwcM1GTVik0NDNFhE1zt4DzhKQxuviNtWiyiN/O zGH5LGGL2E3abIvrs6i3fgxO6RsAhufBB3hM9FaY26TfJnL9x17BKQIHCeIYHIv6 e5nZYALQxyBnY59gtfbN/H2tDTSmDKrZnE1yEnkuM5mNX4Sd0JZdchgCmbiVmZjC npUXQiycDLHR2BaLITtgVkzDQfs0fGvYZCQd/++lqUPbBiX2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLaDeAlSxkKaR3YdmeTPwoMmhU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGRkMmMxMGEtOGU2YS0z MzcxLThjMmQtMjMxOWRiZWUxNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7q2Yd6Q64bHhJ5NDsjloqd7TaPh9i7GdTSv07epSbG7atXThZIsxh0 cHrO4XPeMSEYaNXlN4f+oxn8BLjEr3KV6F0aefq6dvdrC78Bh7c0EeAjgOcc92GU fxNFxfybQTGmKdm9v/j5pv3fhrnw1cbEC8O6bU8SGFWGWcA2vggP5rnZKK+sGFVl 3CMEEuBptePabFYkoRpKe+sTAbjhZwX9UznWqwvqe+ZJRnGLb7HqNuKvZ+CDi8ho Fan7cayXKSWyWLWRsg5X1oP6r67t6F2B6Eu/UF0E2QEjUyFKS3+xxLEco0pbNXgo Xs2ognVECRaJFDqQEn5zuIqmrGgocEA= -----END CERTIFICATE-----Generated at Sat Sep 26 19:09:07 2026 by rpki-client