$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa File: f2295f90-4fbf-3d4d-b454-6992830a2568.roa (raw, json) Hash identifier: YLKoJXYyvBr3M4Mx0/kXRYhyy8zMVPVN8pk7I63ZuS0= Subject key identifier: A8:BD:AB:1C:54:D9:89:59:76:FB:98:9C:10:2E:8E:1F:C9:DF:DE:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8AB25795DCB181427BB0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8a:b2:57:95:dc:b1:81:42:7b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0bfb3883-f811-42b4-8838-36865eaa8741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:58:e6:18:e7:c6:8d:32:fd:9b:14:72:9d: 14:aa:12:a1:38:5e:8c:de:35:53:b9:af:f9:1f:c2: 16:39:1a:96:80:f0:8f:ba:83:35:1d:80:e9:71:b8: b5:75:29:b3:2b:3f:f6:fb:68:4a:58:3b:cf:9a:db: 36:8f:51:0f:a7:73:3b:69:fd:8f:6a:92:e9:4c:3f: 25:0f:7a:58:d3:88:d1:3d:6d:29:3d:ed:21:45:af: 9e:b5:8b:c1:4f:1a:5b:50:55:88:1e:ff:89:fd:c5: d9:88:fb:ab:57:b6:98:e4:ac:93:61:eb:25:03:82: 25:c4:86:29:c1:c5:77:46:ba:55:c7:09:ec:10:ee: 04:e7:4f:3e:07:7b:d4:f7:30:64:cd:0e:ac:9d:14: 48:7b:25:0c:03:fe:f1:99:bd:2f:b2:58:e4:55:7b: 98:1a:ae:37:b9:04:12:a2:b7:59:2d:b2:35:cb:c2: 4f:38:3e:13:d2:ae:ec:e6:4c:11:d2:9c:8b:8f:4d: 95:48:8f:fa:e4:d0:2d:55:b7:ed:27:00:8c:3c:63: 3d:dd:f8:e6:88:12:66:46:29:a4:a3:44:8c:37:93: 2a:ba:4a:18:e0:18:43:0c:1e:30:3f:44:49:42:dd: e4:60:b8:af:cc:ef:a0:90:84:74:27:87:2c:c3:40: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BD:AB:1C:54:D9:89:59:76:FB:98:9C:10:2E:8E:1F:C9:DF:DE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:6b:49:3c:30:89:a2:33:e9:e8:e6:16:02:c3:55:87:b8:78: a6:13:c2:c8:29:e2:eb:98:8f:2b:33:08:1a:58:fe:49:83:64: d0:b4:50:9e:2f:ac:50:32:45:97:8a:10:d1:6f:d6:b3:e0:c2: 08:81:e0:cc:c7:54:95:76:99:b7:9a:de:c4:31:37:7a:09:f5: 5e:4d:aa:d2:91:eb:1a:fb:f6:20:07:0d:6a:fe:de:c7:75:52: 04:50:12:e0:68:a6:3e:f3:3f:aa:c6:b5:e3:77:1a:6c:0a:69: de:7d:03:9d:a9:be:57:0e:51:e8:cc:04:08:65:84:d8:81:09: 12:8d:15:b0:39:ab:34:e3:87:99:49:14:cd:fa:ca:e8:35:59: bc:98:c9:3d:49:7c:77:fc:64:ca:da:a8:72:8f:c5:8f:8d:8f: 47:0a:6c:35:52:94:fe:4b:62:c8:29:ce:93:76:d0:b5:23:06: 71:eb:ab:9c:36:ac:3b:69:67:f4:e1:52:ed:25:b9:b8:85:11: 25:11:67:63:d2:3c:98:c5:29:99:82:ad:0d:a0:13:2b:ca:34: 8f:e1:fc:34:d1:24:af:11:60:7d:ba:d4:16:27:ef:02:9d:12: 59:0c:6c:43:cf:11:f8:dc:dc:ee:04:10:98:1c:f8:bd:f3:32: 11:cf:e6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYqyV5XcsYFCe7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGJmYjM4ODMtZjgxMS00MmI0LTg4MzgtMzY4NjVlYWE4NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiORY5hjnxo0y/ZsUcp0UqhKhOF6M3jVTua/5 H8IWORqWgPCPuoM1HYDpcbi1dSmzKz/2+2hKWDvPmts2j1EPp3M7af2PapLpTD8l D3pY04jRPW0pPe0hRa+etYvBTxpbUFWIHv+J/cXZiPurV7aY5KyTYeslA4IlxIYp wcV3RrpVxwnsEO4E508+B3vU9zBkzQ6snRRIeyUMA/7xmb0vsljkVXuYGq43uQQS ordZLbI1y8JPOD4T0q7s5kwR0pyLj02VSI/65NAtVbftJwCMPGM93fjmiBJmRimk o0SMN5MqukoY4BhDDB4wP0RJQt3kYLivzO+gkIR0J4csw0C/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi9qxxU2YlZdvuYnBAujh/J397XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjIyOTVmOTAtNGZiZi0z ZDRkLWI0NTQtNjk5MjgzMGEyNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBrSTwwiaIz6ejmFgLDVYe4eKYTwsgp4uuYjyszCBpY/kmDZNC0UJ4v rFAyRZeKENFv1rPgwgiB4MzHVJV2mbea3sQxN3oJ9V5NqtKR6xr79iAHDWr+3sd1 UgRQEuBopj7zP6rGteN3GmwKad59A52pvlcOUejMBAhlhNiBCRKNFbA5qzTjh5lJ FM36yug1WbyYyT1JfHf8ZMraqHKPxY+Nj0cKbDVSlP5LYsgpzpN20LUjBnHrq5w2 rDtpZ/ThUu0lubiFESURZ2PSPJjFKZmCrQ2gEyvKNI/h/DTRJK8RYH261BYn7wKd ElkMbEPPEfjc3O4EEJgc+L3zMhHP5is= -----END CERTIFICATE-----Generated at Mon Sep 28 19:06:39 2026 by rpki-client