$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa File: fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa (raw, json) Hash identifier: xq8fHhQV4prf2u1KDqRPvwsfU/OZzyS4t/i0/pvq2GA= Subject key identifier: 56:F1:94:6E:53:AF:ED:CD:59:3F:11:4A:43:4B:AC:7E:4D:66:88:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC833B76F9ECDF3594880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.66.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c8:33:b7:6f:9e:cd:f3:59:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=20fdc6c9-c09b-448e-aa2f-c596df03ac06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:26:89:f6:68:ee:e7:46:22:a9:69:ff:5a: 36:bc:2e:7b:e1:3c:33:bc:64:bc:dc:8e:87:74:e4: b3:7a:c2:25:69:fd:0b:c4:05:e3:99:0c:28:f2:97: 8e:16:a6:4b:83:d7:13:39:4c:a2:4c:fc:63:93:5a: c1:a9:a0:fd:69:58:66:43:81:53:e2:cf:69:02:21: 6e:7d:5f:a4:35:8f:6d:6e:3d:65:77:8a:9c:69:ca: a8:2a:b2:26:9e:c6:fe:08:b3:1f:b5:27:b4:49:1c: b7:b9:d6:a9:d6:1a:3a:18:9f:39:e9:18:bb:69:e5: 1e:c1:8b:f8:03:ff:21:1e:75:77:86:fe:79:81:f1: 80:f6:aa:f4:09:b8:83:09:d4:47:3d:5d:d4:e6:3c: ad:48:ed:cc:ae:8b:17:ac:a0:6e:b5:c7:92:3e:b2: 5d:9a:ee:f3:4b:c9:d0:1f:03:81:9b:03:f8:1a:d6: aa:5f:51:67:63:23:32:ee:b0:4c:f6:a6:38:91:9a: 45:13:9a:2e:45:ca:b4:54:1f:36:b0:3d:19:96:d3: 8f:07:08:c0:31:81:d8:5f:8a:c2:49:48:39:8b:17: e7:0b:ac:cc:0f:d5:24:20:28:5b:c6:53:28:28:8f: ef:ba:1e:74:ac:0c:36:ac:51:a9:ab:90:28:57:6d: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:94:6E:53:AF:ED:CD:59:3F:11:4A:43:4B:AC:7E:4D:66:88:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9d:ba:f1:25:85:a9:d7:3f:3a:17:ac:e1:6c:f7:ca:bf:f5: 45:1d:50:dd:d3:05:f7:94:fb:ed:58:a6:a1:b5:bb:e7:3f:a0: ca:60:b7:1b:ca:00:64:39:11:c4:db:29:99:51:84:d8:31:1a: ed:d7:b6:0e:93:58:91:eb:28:a2:92:10:b7:4b:00:e9:c1:c7: a4:86:1c:08:59:95:dd:74:ca:1f:3e:43:40:ed:0f:0b:87:d9: 9d:11:1b:da:10:91:a9:b6:42:37:e8:bf:33:59:f5:5e:20:07: 12:f7:fe:03:cd:71:d6:11:e7:cb:c5:ac:3a:22:8d:13:c3:fd: a3:7e:42:88:2a:0d:1a:7e:4a:3d:f9:17:2f:9c:d8:44:92:64: 0a:12:1b:75:bb:ef:fa:ec:42:ec:36:f1:ca:f5:62:1c:fd:0d: cd:8d:61:49:ba:c2:73:69:72:d0:40:fe:e5:fb:53:65:2a:1c: d0:4c:b1:67:83:89:5f:cb:09:0b:ea:b7:59:d0:dc:2f:6a:a4: 3f:43:7e:9a:f7:08:00:01:a9:bb:b3:1d:6b:50:d2:82:f3:fb: a2:17:7f:07:97:0a:08:91:31:ed:84:21:06:f5:7c:43:70:e1: 03:e4:4c:3e:f2:85:94:93:5a:d9:12:7d:1a:9d:28:0b:02:d9: 77:39:7b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcgzt2+ezfNZSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjBmZGM2YzktYzA5Yi00NDhlLWFhMmYtYzU5NmRmMDNhYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzomifZo7udGIqlp/1o2vC574TwzvGS83I6H dOSzesIlaf0LxAXjmQwo8peOFqZLg9cTOUyiTPxjk1rBqaD9aVhmQ4FT4s9pAiFu fV+kNY9tbj1ld4qcacqoKrImnsb+CLMftSe0SRy3udap1ho6GJ856Ri7aeUewYv4 A/8hHnV3hv55gfGA9qr0CbiDCdRHPV3U5jytSO3MrosXrKButceSPrJdmu7zS8nQ HwOBmwP4GtaqX1FnYyMy7rBM9qY4kZpFE5ouRcq0VB82sD0ZltOPBwjAMYHYX4rC SUg5ixfnC6zMD9UkIChbxlMoKI/vuh50rAw2rFGpq5AoV20dZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbxlG5Tr+3NWT8RSkNLrH5NZoinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmM4YzFmNWEtYzRlNi0z NTFiLThlN2YtZTE0OTc2MzlhM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2duvElhanXPzoXrOFs98q/9UUdUN3TBfeU++1YpqG1u+c/oMpgtxvK AGQ5EcTbKZlRhNgxGu3Xtg6TWJHrKKKSELdLAOnBx6SGHAhZld10yh8+Q0DtDwuH 2Z0RG9oQkam2QjfovzNZ9V4gBxL3/gPNcdYR58vFrDoijRPD/aN+QogqDRp+Sj35 Fy+c2ESSZAoSG3W77/rsQuw28cr1Yhz9Dc2NYUm6wnNpctBA/uX7U2UqHNBMsWeD iV/LCQvqt1nQ3C9qpD9Dfpr3CAABqbuzHWtQ0oLz+6IXfweXCgiRMe2EIQb1fENw 4QPkTD7yhZSTWtkSfRqdKAsC2Xc5e70= -----END CERTIFICATE-----Generated at Tue Sep 29 04:09:40 2026 by rpki-client