$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e84f1803-c51a-3e9a-96cf-569693207764.roa File: e84f1803-c51a-3e9a-96cf-569693207764.roa (raw, json) Hash identifier: svM5HWGvxuMNzUy/ijgzqI1IDa5dw9/uH5hMYQudLE4= Subject key identifier: B0:6B:25:B8:11:D8:F7:09:23:5D:C8:95:06:64:BB:58:85:0C:FB:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAF94A7A4081F33C343B8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e84f1803-c51a-3e9a-96cf-569693207764.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.138.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:af:94:a7:a4:08:1f:33:c3:43:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2a813a3d-44e2-4c7f-8579-2014082e9ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:c4:41:44:cf:d9:ae:1a:be:bc:e5:37:df: 2d:7b:76:33:5d:d9:08:96:66:53:21:95:8e:00:e9: 23:d3:bf:7b:f7:a0:1d:80:83:0b:98:3f:b2:33:c9: 71:b1:07:9d:cb:c4:60:07:ec:61:60:e2:9f:11:99: a2:37:9b:0e:12:cc:1d:4a:30:b1:af:3f:52:08:90: 9e:ca:c0:f5:37:a7:6c:c7:d1:b4:75:66:f0:72:dc: b1:ef:c5:41:a5:26:40:3d:52:dd:a6:a9:48:ab:38: 54:97:ee:32:41:69:33:d9:59:ec:34:00:5b:49:ab: 81:95:db:31:55:9f:76:d0:83:45:84:94:bd:50:6a: fe:8f:fd:17:f1:8c:73:b0:2c:d7:12:52:28:1c:01: f9:5a:a8:40:4b:12:aa:8f:b3:91:d4:cb:ea:09:49: 13:a3:ab:35:b0:ef:f9:50:31:6f:1d:5a:71:27:36: 81:07:1d:08:15:1c:b5:86:3d:67:00:49:3d:d7:21: 0c:37:48:a7:fa:93:1e:bc:4b:16:3a:e7:50:71:66: 41:97:3c:48:e4:3c:5d:1e:32:e2:dd:d2:4f:30:94: 63:a4:6b:7c:9f:b0:ae:7f:1e:af:76:f8:a4:f1:b0: 79:59:6b:1a:05:17:54:cb:b7:7a:8d:0f:69:d9:2e: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6B:25:B8:11:D8:F7:09:23:5D:C8:95:06:64:BB:58:85:0C:FB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e84f1803-c51a-3e9a-96cf-569693207764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:08:fd:c0:6c:a8:86:01:72:96:64:43:21:26:a1:13:3a:2a: 66:59:cf:ef:4d:06:3e:59:49:91:ba:0c:3f:04:8a:f7:78:77: cf:cf:68:86:38:38:66:3b:ca:e3:84:40:5a:be:fc:ff:4f:4e: 84:69:51:1b:6d:d6:33:ce:3b:83:af:a0:48:65:46:35:22:a5: 40:c3:fb:c9:a1:f3:06:7d:99:c9:76:f1:e5:37:0f:7d:e9:6e: 13:f4:a0:b6:11:00:30:5e:cc:24:49:8b:3c:ba:58:2f:f1:b0: eb:f3:8f:8a:ba:9d:5b:8f:13:e5:18:17:0b:46:12:da:a8:fd: 17:2b:fb:50:ba:a5:74:89:8e:5a:0e:01:97:28:8c:d2:42:86: 33:03:32:1d:67:f7:e0:27:2d:0f:c3:5c:d5:73:dd:11:8e:9f: 76:f1:b4:2c:b2:ec:2d:ed:d5:ea:6c:13:0a:6f:7d:cb:86:d2: 61:db:a0:a1:ce:36:13:c3:47:91:15:7e:d4:b8:97:a7:b4:b5: 05:da:11:56:80:4e:ed:f8:bf:3a:40:9d:cc:47:84:e0:22:f5: 8e:fd:55:58:e9:aa:54:a6:83:2f:6c:b9:22:32:49:0d:9a:ae: 5a:96:de:a6:04:1f:8d:b2:7a:33:6e:67:91:7e:02:56:8a:86: 5c:e8:d9:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPa+Up6QIHzPDQ7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmE4MTNhM2QtNDRlMi00YzdmLTg1NzktMjAxNDA4MmU5ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+LEQUTP2a4avrzlN98te3YzXdkIlmZTIZWO AOkj079796AdgIMLmD+yM8lxsQedy8RgB+xhYOKfEZmiN5sOEswdSjCxrz9SCJCe ysD1N6dsx9G0dWbwctyx78VBpSZAPVLdpqlIqzhUl+4yQWkz2VnsNABbSauBldsx VZ920INFhJS9UGr+j/0X8YxzsCzXElIoHAH5WqhASxKqj7OR1MvqCUkTo6s1sO/5 UDFvHVpxJzaBBx0IFRy1hj1nAEk91yEMN0in+pMevEsWOudQcWZBlzxI5DxdHjLi 3dJPMJRjpGt8n7Cufx6vdvik8bB5WWsaBRdUy7d6jQ9p2S5gKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBrJbgR2PcJI13IlQZku1iFDPuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTg0ZjE4MDMtYzUxYS0z ZTlhLTk2Y2YtNTY5NjkzMjA3NzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAI/cBsqIYBcpZkQyEmoRM6KmZZz+9NBj5ZSZG6DD8Eivd4d8/PaIY4 OGY7yuOEQFq+/P9PToRpURtt1jPOO4OvoEhlRjUipUDD+8mh8wZ9mcl28eU3D33p bhP0oLYRADBezCRJizy6WC/xsOvzj4q6nVuPE+UYFwtGEtqo/Rcr+1C6pXSJjloO AZcojNJChjMDMh1n9+AnLQ/DXNVz3RGOn3bxtCyy7C3t1epsEwpvfcuG0mHboKHO NhPDR5EVftS4l6e0tQXaEVaATu34vzpAncxHhOAi9Y79VVjpqlSmgy9suSIySQ2a rlqW3qYEH42yejNuZ5F+AlaKhlzo2aE= -----END CERTIFICATE-----Generated at Mon Sep 28 15:44:52 2026 by rpki-client