$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa File: ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa (raw, json) Hash identifier: 47HGxX9n9V41mmgNtK8fUCJcq7lRNXJlqRuehBp3ltI= Subject key identifier: BC:1D:41:CC:B1:56:A6:4D:40:46:71:04:9B:D6:12:2A:09:81:51:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAB542ACB4BEF9BCBDA00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.78.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ab:54:2a:cb:4b:ef:9b:cb:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6ced5277-716e-4a01-b9f6-92313ce62844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:d0:2a:47:cc:b0:1d:3e:a5:68:89:f0:bb: 88:7d:5e:82:e0:d0:04:12:28:7d:b9:d1:76:89:4d: 12:ad:d6:fd:dd:56:d1:76:e6:cc:71:6b:46:28:4d: 74:c4:af:1a:a6:d5:9c:e7:5d:47:6d:62:fc:fe:00: 57:c0:65:5a:21:9a:86:3f:97:a5:0f:fd:d7:0c:70: 83:84:2d:45:c9:6c:6f:75:86:13:1c:53:e9:c1:e0: d4:a2:28:6f:7a:74:2c:d9:64:52:f7:3b:c5:fe:b8: df:26:6c:95:32:e2:0a:bd:79:44:fb:94:3e:9c:c5: bf:a4:3a:9e:b5:85:b9:e4:52:91:cc:f1:33:6c:60: 38:d2:17:7c:6a:ed:6f:3c:d9:a8:22:e5:ca:e5:94: ed:f2:df:30:6d:be:e0:54:60:2f:5e:9f:57:57:28: 19:67:d0:41:fc:68:41:f8:2b:67:8e:b2:76:63:af: 2f:43:ec:f2:18:74:73:a0:63:0f:4c:35:62:df:68: c5:1d:73:12:b1:58:13:68:66:0f:26:f3:fa:cd:f3: 3f:e1:2d:58:f1:0b:85:d2:c5:7c:88:42:43:cf:33: 28:95:b0:f3:b9:dc:02:45:5f:31:98:e6:43:d7:3a: 5b:64:14:a2:2c:aa:c9:20:12:8a:15:51:f2:b2:97: 00:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1D:41:CC:B1:56:A6:4D:40:46:71:04:9B:D6:12:2A:09:81:51:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6d:8b:ee:03:e0:00:7f:16:e1:93:ff:08:5f:df:7d:c4:52: f8:f4:87:f8:f7:b0:e7:bc:42:8f:ac:b7:66:61:19:8f:8f:79: b6:e6:43:4d:d8:8b:75:e6:cf:04:33:c4:af:34:a0:25:9b:a8: e7:dc:c0:66:c1:93:9a:8b:94:5b:d7:55:49:51:32:43:31:af: 00:dc:e1:ee:66:60:a1:5e:05:b0:c3:7a:e4:e0:87:14:5a:f1: c7:b8:82:c5:e1:0b:89:3f:a7:f4:a9:28:ee:86:a6:82:9c:f2: 1d:22:88:63:5b:17:4c:36:48:6a:06:3b:9a:ad:f6:c6:0a:dd: ae:2d:60:8d:25:89:74:27:47:76:c0:b4:a5:6c:3c:6a:1a:ae: ac:e5:ed:8e:39:c1:de:08:d5:51:7e:d3:5c:e0:c1:9f:ed:4a: e8:3a:55:ae:45:4b:08:5b:1f:55:10:5d:5e:08:3d:fd:62:2e: 32:d6:18:4d:a1:22:60:b0:b0:7b:6a:02:2e:da:35:b2:26:42: f5:97:e4:06:13:e4:c4:d4:fb:ab:7c:0a:14:1d:27:61:92:24: ac:d8:13:78:b0:9c:25:6a:50:49:09:f7:a2:e9:13:e1:ee:52: 86:6a:63:a9:e1:54:c8:df:a9:27:c9:a8:2a:18:f2:d6:42:c0: 5d:c7:88:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPatUKstL75vL2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmNlZDUyNzctNzE2ZS00YTAxLWI5ZjYtOTIzMTNjZTYyODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRTQKkfMsB0+pWiJ8LuIfV6C4NAEEih9udF2 iU0Srdb93VbRdubMcWtGKE10xK8aptWc511HbWL8/gBXwGVaIZqGP5elD/3XDHCD hC1FyWxvdYYTHFPpweDUoihvenQs2WRS9zvF/rjfJmyVMuIKvXlE+5Q+nMW/pDqe tYW55FKRzPEzbGA40hd8au1vPNmoIuXK5ZTt8t8wbb7gVGAvXp9XVygZZ9BB/GhB +CtnjrJ2Y68vQ+zyGHRzoGMPTDVi32jFHXMSsVgTaGYPJvP6zfM/4S1Y8QuF0sV8 iEJDzzMolbDzudwCRV8xmOZD1zpbZBSiLKrJIBKKFVHyspcASQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwdQcyxVqZNQEZxBJvWEioJgVGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWY2Nzk1YzUtZmY3Mi0z ZjQ3LTljNWYtNGEyYWFkMTYyZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdti+4D4AB/FuGT/whf333EUvj0h/j3sOe8Qo+st2ZhGY+PebbmQ03Y i3XmzwQzxK80oCWbqOfcwGbBk5qLlFvXVUlRMkMxrwDc4e5mYKFeBbDDeuTghxRa 8ce4gsXhC4k/p/SpKO6GpoKc8h0iiGNbF0w2SGoGO5qt9sYK3a4tYI0liXQnR3bA tKVsPGoarqzl7Y45wd4I1VF+01zgwZ/tSug6Va5FSwhbH1UQXV4IPf1iLjLWGE2h ImCwsHtqAi7aNbImQvWX5AYT5MTU+6t8ChQdJ2GSJKzYE3iwnCVqUEkJ96LpE+Hu UoZqY6nhVMjfqSfJqCoY8tZCwF3HiEI= -----END CERTIFICATE-----Generated at Tue Sep 29 01:15:57 2026 by rpki-client