$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa File: e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa (raw, json) Hash identifier: CtQAqWORY/qHiQx8CfGezYoqpzn6xG6PUkW6SwHBk2c= Subject key identifier: 3E:9C:81:EC:BF:4D:3B:FF:48:A3:48:60:6F:2F:D1:FA:37:84:91:E8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB25B662BC16228D3D480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.66.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b2:5b:66:2b:c1:62:28:d3:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a593ec54-44b5-48d6-adb5-69cad7766ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:2c:b8:2d:78:5d:4f:bd:b8:d1:0a:47:92: e1:b4:a8:97:2c:87:ae:75:8d:f5:da:f2:82:09:a6: dc:fa:1d:ef:52:ca:39:30:b8:ba:83:ec:94:4b:44: 9e:aa:71:d7:d5:08:99:09:a5:bf:92:9f:43:da:c9: 19:fb:2c:2b:e9:55:17:13:8e:8e:71:a0:76:7e:a6: 34:92:f3:56:24:2b:46:68:7e:fc:80:e7:30:5e:c9: 2b:05:bf:ee:da:49:e9:5d:f5:a6:0a:2e:84:7d:cb: 20:40:12:31:05:81:3c:e1:2d:fe:3b:ad:6a:68:72: 25:76:33:75:e9:f3:a7:d8:b3:4f:4c:97:54:15:bb: 2c:0e:56:e6:50:c3:ff:72:12:71:1d:cc:61:24:41: a8:88:e1:75:d0:36:4a:c7:f9:fb:39:b1:83:9e:54: 95:42:40:95:a9:eb:53:0e:5b:74:d9:c7:c3:0a:fe: 4e:0a:5f:47:4b:a1:76:ca:aa:36:92:aa:e9:5a:b7: 14:37:ce:e6:55:9d:52:98:76:db:66:78:fb:de:7d: 1a:dd:d1:19:9a:cb:6e:0a:55:76:56:e5:59:55:d4: 2f:04:81:64:ae:e4:c9:ca:e7:bf:30:e5:a2:de:48: aa:e0:d6:63:4e:95:9d:55:1f:36:df:32:0c:4e:65: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:81:EC:BF:4D:3B:FF:48:A3:48:60:6F:2F:D1:FA:37:84:91:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0a:ac:1b:48:dd:3a:52:b1:f7:00:94:36:e2:c7:b3:5f:85: 1b:95:74:d7:94:42:07:bd:aa:a4:ae:bd:0d:46:ce:ce:ce:0b: af:dc:23:75:ce:e4:e3:45:07:0a:54:95:27:a6:f8:fb:29:51: 3c:96:63:0d:c4:62:a0:af:65:67:06:06:f5:03:a3:68:c0:2d: d8:f1:9b:8c:46:d1:f0:2b:c2:ab:0b:d6:32:af:a7:29:59:90: c9:b0:9e:3c:c6:59:38:0d:8d:dc:e9:89:ea:06:7d:cf:d9:08: 35:5c:ca:45:35:bb:2f:77:39:81:8d:72:e7:40:36:72:df:ce: 5b:ed:30:3e:ce:fd:b3:3c:28:dd:fe:68:f2:d8:99:cc:ae:04: 47:32:02:c1:65:90:9b:be:74:52:02:93:54:8a:37:02:bd:18: 31:6a:64:6b:3d:84:24:42:06:fa:53:4e:c8:2d:1b:4d:32:d3: e2:2a:c6:6b:af:d3:f8:7e:c7:b7:42:92:e5:80:93:0b:58:f1: ce:ce:2e:28:8a:58:31:0a:ae:56:81:67:eb:83:1a:3a:e4:9c: 9c:cf:3a:2b:a0:20:c3:5e:52:de:7f:e7:23:45:60:48:e3:a4: e6:b6:ab:d9:35:71:a5:91:ce:85:63:ec:29:2c:d0:a8:5b:a4: 04:aa:5e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbJbZivBYijT1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTU5M2VjNTQtNDRiNS00OGQ2LWFkYjUtNjljYWQ3NzY2ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviIsuC14XU+9uNEKR5LhtKiXLIeudY312vKC Cabc+h3vUso5MLi6g+yUS0SeqnHX1QiZCaW/kp9D2skZ+ywr6VUXE46OcaB2fqY0 kvNWJCtGaH78gOcwXskrBb/u2knpXfWmCi6EfcsgQBIxBYE84S3+O61qaHIldjN1 6fOn2LNPTJdUFbssDlbmUMP/chJxHcxhJEGoiOF10DZKx/n7ObGDnlSVQkCVqetT Dlt02cfDCv5OCl9HS6F2yqo2kqrpWrcUN87mVZ1SmHbbZnj73n0a3dEZmstuClV2 VuVZVdQvBIFkruTJyue/MOWi3kiq4NZjTpWdVR823zIMTmV8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6cgey/TTv/SKNIYG8v0fo3hJHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTFiYWY4MTAtYzFlMC0z YzMzLWE4YzgtNDExYjM4MjFlMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQKrBtI3TpSsfcAlDbix7NfhRuVdNeUQge9qqSuvQ1Gzs7OC6/cI3XO 5ONFBwpUlSem+PspUTyWYw3EYqCvZWcGBvUDo2jALdjxm4xG0fArwqsL1jKvpylZ kMmwnjzGWTgNjdzpieoGfc/ZCDVcykU1uy93OYGNcudANnLfzlvtMD7O/bM8KN3+ aPLYmcyuBEcyAsFlkJu+dFICk1SKNwK9GDFqZGs9hCRCBvpTTsgtG00y0+Iqxmuv 0/h+x7dCkuWAkwtY8c7OLiiKWDEKrlaBZ+uDGjrknJzPOiugIMNeUt5/5yNFYEjj pOa2q9k1caWRzoVj7Cks0KhbpASqXm0= -----END CERTIFICATE-----Generated at Tue Sep 29 02:47:33 2026 by rpki-client