$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa File: dfebcbdf-d4e0-3652-832c-311510c65ca3.roa (raw, json) Hash identifier: pfpqiBLXEt7xzU5B9mI/Fp9ThPxZPxJM/4UxmYRM6D4= Subject key identifier: B1:8F:48:03:69:19:31:18:3B:56:97:EF:30:24:AD:2D:39:E3:8F:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9C560FD1AC5843217C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.140.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9c:56:0f:d1:ac:58:43:21:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=08d2c060-2b97-4286-8814-4965dd407aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:a9:90:9d:f6:f6:ba:18:46:25:fa:8e:c0: c4:e6:ae:02:80:22:9a:04:42:54:74:5b:2a:61:1c: 1c:a6:e8:f3:ba:49:c0:e8:d0:0a:bc:c8:43:de:60: 38:44:d8:af:d3:05:c6:8f:9c:b4:c1:5d:b8:cb:cc: 6f:58:33:03:4f:19:d0:e1:4c:a6:78:92:00:b2:da: 3b:b3:b6:df:78:6b:f4:7e:da:d1:2d:83:68:26:26: 5f:83:b9:bd:c4:d5:fe:d0:91:d2:25:55:88:c0:02: 50:60:81:81:16:08:59:48:6a:b9:35:c1:b4:3f:1c: 34:bc:d9:a3:78:66:03:f4:9e:ef:49:9d:cb:fc:d2: 43:ad:09:64:24:f9:a8:fd:70:bc:92:70:a7:3f:44: a4:0e:8e:f0:1a:30:22:99:6e:a3:6a:b6:58:1e:8c: e8:5f:8d:b5:04:62:b0:f0:dd:51:3f:39:04:dc:e2: 8c:ea:f0:ba:73:d3:bc:f5:c7:c1:70:fa:7f:9f:29: 43:78:bb:a3:7a:78:70:21:39:35:83:c1:d6:47:9e: 14:1f:9c:6b:91:09:88:d3:2d:a0:69:89:cf:9d:23: 8b:ca:83:85:b7:83:ad:3b:a3:94:04:2e:4e:88:0b: 5e:12:95:4c:9b:20:cf:3e:e9:f0:b7:17:4f:96:f2: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:48:03:69:19:31:18:3B:56:97:EF:30:24:AD:2D:39:E3:8F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0d:0b:e4:03:e9:07:02:29:1c:0f:b3:50:77:c4:40:77:a6: f4:f4:20:12:b9:35:cd:65:60:3b:05:ad:58:10:57:76:4b:74: 23:42:41:23:52:bf:2c:ea:eb:35:78:68:f1:63:ad:50:51:b7: 71:2b:4a:86:0e:cc:c8:ed:1d:70:6c:60:de:60:a2:88:26:7c: 08:71:db:b7:cc:be:ac:fc:18:31:e5:30:2e:9d:5d:ee:5c:65: 1e:7c:e7:37:94:7e:9f:3b:ad:3b:5e:2f:c1:46:36:7a:ca:47: e6:34:a4:c8:e3:9d:30:9b:96:4e:f9:a9:0e:a5:8f:66:db:88: 65:39:16:b7:cd:96:94:db:9e:ec:9b:63:95:33:e1:5d:d8:19: 65:09:bd:89:22:78:e4:41:84:6a:58:b0:87:e0:1f:8e:46:a4: 19:bd:a3:10:8c:e1:1f:70:fd:d2:8e:fb:a0:d7:6b:14:e6:3e: 62:c4:be:90:ce:a8:98:f4:38:2f:1a:a2:75:6f:73:ba:e6:e2: 80:40:3e:8a:01:b1:d5:f2:4a:6a:fa:94:53:3f:8b:c5:76:31: 18:23:dc:a6:39:ab:f6:da:6a:5b:93:db:e1:fc:1d:88:35:9f: 04:57:ec:2f:22:6f:bb:18:f0:cd:01:a2:f4:f7:38:10:26:c7: 77:c8:f8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZxWD9GsWEMhfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDhkMmMwNjAtMmI5Ny00Mjg2LTg4MTQtNDk2NWRkNDA3YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ+pkJ329roYRiX6jsDE5q4CgCKaBEJUdFsq YRwcpujzuknA6NAKvMhD3mA4RNiv0wXGj5y0wV24y8xvWDMDTxnQ4UymeJIAsto7 s7bfeGv0ftrRLYNoJiZfg7m9xNX+0JHSJVWIwAJQYIGBFghZSGq5NcG0Pxw0vNmj eGYD9J7vSZ3L/NJDrQlkJPmo/XC8knCnP0SkDo7wGjAimW6jarZYHozoX421BGKw 8N1RPzkE3OKM6vC6c9O89cfBcPp/nylDeLujenhwITk1g8HWR54UH5xrkQmI0y2g aYnPnSOLyoOFt4OtO6OUBC5OiAteEpVMmyDPPunwtxdPlvIW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGPSANpGTEYO1aX7zAkrS0544/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGZlYmNiZGYtZDRlMC0z NjUyLTgzMmMtMzExNTEwYzY1Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4NC+QD6QcCKRwPs1B3xEB3pvT0IBK5Nc1lYDsFrVgQV3ZLdCNCQSNS vyzq6zV4aPFjrVBRt3ErSoYOzMjtHXBsYN5googmfAhx27fMvqz8GDHlMC6dXe5c ZR585zeUfp87rTteL8FGNnrKR+Y0pMjjnTCblk75qQ6lj2bbiGU5FrfNlpTbnuyb Y5Uz4V3YGWUJvYkieORBhGpYsIfgH45GpBm9oxCM4R9w/dKO+6DXaxTmPmLEvpDO qJj0OC8aonVvc7rm4oBAPooBsdXySmr6lFM/i8V2MRgj3KY5q/baaluT2+H8HYg1 nwRX7C8ib7sY8M0BovT3OBAmx3fI+H0= -----END CERTIFICATE-----Generated at Tue Sep 29 11:30:00 2026 by rpki-client