$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa File: 0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa (raw, json) Hash identifier: Lo3pYSHPVJXA/vRaQOj25WTtO6NDI3+L2/TZMAz+wmI= Subject key identifier: B6:9D:B2:20:4C:04:82:8C:E7:89:C2:92:58:42:BC:48:F6:95:67:45 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC09F87EC03E8B1164680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.95.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c0:9f:87:ec:03:e8:b1:16:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d1c7615b-7638-47bf-8855-373083f09c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:28:5d:ce:2e:67:02:88:6f:c3:bd:35:4c: 91:13:65:cd:5b:4c:ac:bb:9c:f4:40:49:e1:67:5f: 66:17:f9:5a:3d:f2:84:97:26:56:58:1e:43:80:95: 2d:f3:38:e8:b1:ca:01:f5:ca:74:52:8a:9d:82:73: ae:77:12:25:39:03:a2:39:a6:2d:24:f5:66:19:18: a2:da:7e:81:54:d1:30:62:69:2d:4a:1c:f9:65:00: 34:e2:e4:0e:5c:6f:bb:62:f6:4b:09:0e:d0:07:05: 56:74:1e:07:97:37:33:13:5c:bb:38:c7:e0:9f:e3: 4e:6a:a9:2f:47:cc:cf:2a:53:c0:1d:16:73:5b:75: 3a:29:91:be:94:d3:6a:61:eb:8b:c3:b7:86:d5:d4: c8:9c:c6:f3:f7:da:ee:f2:23:fa:7d:b1:3f:a9:e6: ed:fe:f0:33:cf:18:6a:9a:99:f1:db:92:11:f7:31: 48:c8:a7:01:3b:80:de:c3:be:2f:ea:e1:b6:f4:1e: a7:de:62:98:82:4a:19:6e:cc:c7:a1:47:f9:b4:14: ad:55:0a:66:3d:07:5e:b4:35:64:63:76:78:1f:cd: f6:48:80:de:22:5a:eb:63:fc:e7:b1:c3:a8:20:5d: 37:92:9b:91:e3:dc:ca:0c:05:71:74:4e:72:38:1b: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:B2:20:4C:04:82:8C:E7:89:C2:92:58:42:BC:48:F6:95:67:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a7:e6:83:b5:04:a7:40:8b:70:ed:85:7a:8c:1d:6a:a0:e2: 28:e5:75:41:fc:f5:a7:f4:bd:56:fa:a0:8a:64:04:02:26:1d: d1:fc:ea:61:4a:1d:25:c3:e8:e9:a9:ec:95:74:a0:6d:31:e0: 53:69:a4:94:a7:62:54:54:c1:06:7f:1e:28:37:1e:cf:28:26: c3:bc:31:62:35:47:58:a4:52:a5:90:bd:a9:14:19:6e:25:2f: 89:71:38:9f:af:14:fb:c5:9b:de:9f:f6:22:d6:85:7e:2e:38: eb:be:38:81:1d:3e:60:ad:e4:82:fc:dc:58:6b:78:79:f9:15: 8b:19:98:37:79:33:b8:c4:0d:f6:ca:e8:bb:55:14:92:41:78: d1:84:62:67:73:69:8c:1e:12:8f:19:8c:74:b9:49:ec:5a:6d: 2c:bc:e9:e6:d3:54:c7:9b:cf:f0:33:24:b2:94:1e:d6:ee:91: 4a:aa:5c:5c:94:d8:e9:02:0c:44:24:08:02:67:be:ee:c7:5e: 0f:3b:fd:b5:6d:be:26:71:43:15:45:8e:5a:46:92:ad:e4:d5: 83:63:57:57:9c:ec:8b:39:d6:8b:a7:3c:4b:e8:40:aa:00:1d: 46:75:4f:96:cb:44:3d:f1:e1:74:96:b0:9e:5b:93:71:8b:8f: da:65:18:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcCfh+wD6LEWRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDFjNzYxNWItNzYzOC00N2JmLTg4NTUtMzczMDgzZjA5YzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/YoXc4uZwKIb8O9NUyRE2XNW0ysu5z0QEnh Z19mF/laPfKElyZWWB5DgJUt8zjoscoB9cp0UoqdgnOudxIlOQOiOaYtJPVmGRii 2n6BVNEwYmktShz5ZQA04uQOXG+7YvZLCQ7QBwVWdB4HlzczE1y7OMfgn+NOaqkv R8zPKlPAHRZzW3U6KZG+lNNqYeuLw7eG1dTInMbz99ru8iP6fbE/qebt/vAzzxhq mpnx25IR9zFIyKcBO4Dew74v6uG29B6n3mKYgkoZbszHoUf5tBStVQpmPQdetDVk Y3Z4H832SIDeIlrrY/znscOoIF03kpuR49zKDAVxdE5yOBteywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLadsiBMBIKM54nCklhCvEj2lWdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGFmZjIxYTItODBhOC0z MzViLWFkNjctNGI3ZDkzMWNhMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIl9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWn5oO1BKdAi3DthXqMHWqg4ijldUH89af0vVb6oIpkBAImHdH86mFK HSXD6Omp7JV0oG0x4FNppJSnYlRUwQZ/Hig3Hs8oJsO8MWI1R1ikUqWQvakUGW4l L4lxOJ+vFPvFm96f9iLWhX4uOOu+OIEdPmCt5IL83FhreHn5FYsZmDd5M7jEDfbK 6LtVFJJBeNGEYmdzaYweEo8ZjHS5SexabSy86ebTVMebz/AzJLKUHtbukUqqXFyU 2OkCDEQkCAJnvu7HXg87/bVtviZxQxVFjlpGkq3k1YNjV1ec7Is51ounPEvoQKoA HUZ1T5bLRD3x4XSWsJ5bk3GLj9plGC8= -----END CERTIFICATE-----Generated at Mon Sep 28 10:12:39 2026 by rpki-client