$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa File: ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa (raw, json) Hash identifier: yvbpQlbhA9PLoCBUDn5FkET1Dk6SMZ5PbvsgkX7/3RE= Subject key identifier: 4A:17:40:B9:D1:B3:36:F3:18:B5:78:50:BE:DC:0E:8F:F6:72:94:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD10C0EC0BCAC97F69B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.141.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d1:0c:0e:c0:bc:ac:97:f6:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=37da0d3e-451b-40e3-a228-5ef6397f35a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:13:79:a8:a2:60:07:0d:11:81:f5:b7:14: 4f:17:b0:c1:c9:11:1d:7d:ef:c4:2b:4c:a5:17:bb: bf:d1:2b:c1:c9:f8:84:b0:ea:29:fe:f9:87:41:26: 88:d7:ff:b2:8e:4d:9b:83:93:21:f4:97:7e:37:12: 0e:8c:50:1b:ed:93:3b:d1:37:91:28:4e:f1:8d:54: 5d:34:ce:f6:c6:d8:e8:30:be:62:70:80:f2:ec:32: 31:9a:19:89:1f:28:e1:9d:22:9b:16:e4:6d:e6:dc: 64:fb:a7:4f:dc:5d:05:c7:c5:3c:d8:26:13:d9:be: 2d:ca:94:9f:71:bb:e1:e2:0d:5f:4d:ed:6f:8a:11: 66:93:e8:cb:2a:22:e2:a9:58:50:f7:71:47:70:b9: 36:c4:3e:37:51:85:00:2b:d1:14:81:c6:c8:41:4b: cd:d2:58:a0:5d:f7:dc:06:f9:81:c0:0a:f2:45:81: 65:75:76:49:5a:3b:33:e5:f4:b1:dc:3d:08:b8:ee: 46:ee:72:06:7c:a2:46:60:08:b0:e5:d1:de:a7:f3: 6e:e4:8b:69:8b:6c:b1:5c:a7:f5:00:bb:c6:bf:0f: f1:43:5f:82:79:23:b0:32:e2:75:a0:45:93:8b:54: ef:b8:39:3b:21:0e:0d:20:b9:a7:af:40:e5:16:c4: 6e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:40:B9:D1:B3:36:F3:18:B5:78:50:BE:DC:0E:8F:F6:72:94:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3c:58:46:c6:35:1e:28:6c:bc:35:a8:73:25:f0:b8:f3:94: c4:50:ab:df:65:b7:64:c5:3a:6e:63:53:f1:40:15:72:e7:47: 1d:f3:28:45:41:46:0f:7e:21:06:37:4b:0d:36:b3:7a:a0:d3: f9:76:93:b4:ee:60:4f:91:d1:17:f4:03:74:a6:ad:5d:d4:58: d4:a4:0d:e0:66:c5:44:6a:7a:8c:e0:50:7e:e4:8d:3d:e1:3c: 35:ca:11:f3:79:68:fc:dd:05:0a:a4:cd:46:d6:d0:03:c3:44: 05:6e:da:5a:81:3b:a6:4b:0d:c1:af:ee:67:64:0a:5b:48:f9: b8:87:62:45:de:4c:90:6f:dc:45:27:8e:fc:65:6e:80:c2:a7: 7f:95:98:c4:2d:7f:db:9e:18:07:7f:29:d0:15:b0:7e:3f:81: b9:e5:5f:91:d2:a6:40:13:a1:da:7e:77:8d:7b:5a:cd:d5:ec: ac:a3:55:4e:6a:ec:28:c3:e9:65:56:3f:ce:a8:66:5a:ca:b4: 51:b9:79:10:71:16:23:05:53:f4:98:05:e8:7b:bd:61:fa:9a: 06:78:68:90:06:c6:d3:af:9c:f5:2a:77:d3:be:c6:db:1b:7d: 24:14:15:8e:41:ff:5c:3d:5c:31:77:a7:52:65:ac:9a:90:93: 1d:a7:5b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdEMDsC8rJf2mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzdkYTBkM2UtNDUxYi00MGUzLWEyMjgtNWVmNjM5N2YzNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo0TeaiiYAcNEYH1txRPF7DByREdfe/EK0yl F7u/0SvByfiEsOop/vmHQSaI1/+yjk2bg5Mh9Jd+NxIOjFAb7ZM70TeRKE7xjVRd NM72xtjoML5icIDy7DIxmhmJHyjhnSKbFuRt5txk+6dP3F0Fx8U82CYT2b4typSf cbvh4g1fTe1vihFmk+jLKiLiqVhQ93FHcLk2xD43UYUAK9EUgcbIQUvN0ligXffc BvmBwAryRYFldXZJWjsz5fSx3D0IuO5G7nIGfKJGYAiw5dHep/Nu5Itpi2yxXKf1 ALvGvw/xQ1+CeSOwMuJ1oEWTi1TvuDk7IQ4NILmnr0DlFsRu7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoXQLnRszbzGLV4UL7cDo/2cpRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmY2M2E3YzAtNjI3MC0z YTAyLTkyZTYtOGE2YTllYjc4YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI8WEbGNR4obLw1qHMl8LjzlMRQq99lt2TFOm5jU/FAFXLnRx3zKEVB Rg9+IQY3Sw02s3qg0/l2k7TuYE+R0Rf0A3SmrV3UWNSkDeBmxURqeozgUH7kjT3h PDXKEfN5aPzdBQqkzUbW0APDRAVu2lqBO6ZLDcGv7mdkCltI+biHYkXeTJBv3EUn jvxlboDCp3+VmMQtf9ueGAd/KdAVsH4/gbnlX5HSpkATodp+d417Ws3V7KyjVU5q 7CjD6WVWP86oZlrKtFG5eRBxFiMFU/SYBeh7vWH6mgZ4aJAGxtOvnPUqd9O+xtsb fSQUFY5B/1w9XDF3p1JlrJqQkx2nW3M= -----END CERTIFICATE-----Generated at Sun Oct 4 08:37:58 2026 by rpki-client