$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cbffe49-432a-3a6f-a046-cc6acbbc2d3b.roa File: 0cbffe49-432a-3a6f-a046-cc6acbbc2d3b.roa (raw, json) Hash identifier: xu6hxkyKdS3gZvn+wY6O3nlIZztuAJI9F6tmBK8cGvo= Subject key identifier: 16:E0:B9:9F:86:2C:15:92:7C:EE:26:E8:93:6B:F2:EA:36:C7:4D:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD37C88197A7DEBE19FA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cbffe49-432a-3a6f-a046-cc6acbbc2d3b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.142.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d3:7c:88:19:7a:7d:eb:e1:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=98ea5cda-993f-4d77-9806-265f00ee8b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:80:be:c8:e9:e9:6d:ce:ed:a9:41:44:0e:b9: 8e:75:25:f8:84:9e:49:f6:c2:e1:f7:b6:70:1d:ea: b4:60:ff:c5:ed:f9:dd:da:56:9c:3c:fd:59:4e:4b: cc:c5:62:15:4e:54:43:86:f4:52:4f:cb:65:1e:9e: a6:64:9e:e4:17:32:73:ff:85:a8:fa:82:44:ee:5e: a0:90:60:86:83:35:12:24:19:12:85:2e:9e:96:0b: df:12:ba:4a:8a:e7:90:60:b1:1e:1c:d6:60:8a:48: b6:fa:8d:5a:d7:ad:ff:5d:ab:fd:bc:55:c0:82:90: 40:89:92:08:51:ed:8f:5d:d1:23:bb:a4:09:b3:75: 5e:89:2f:29:9f:ce:2f:e5:2c:89:1b:e2:3e:b4:5e: ae:a8:a5:3a:ff:b1:ef:f0:e5:05:bf:01:6b:8c:7a: e1:0f:87:96:f1:0f:4c:55:55:8f:8a:f8:03:cb:27: 2f:df:37:d0:2a:55:66:84:80:f3:6d:d8:ea:71:af: 05:b4:ff:a1:35:ec:53:85:50:fd:74:6a:02:7f:bf: f1:2c:77:23:e6:fc:43:8e:1c:f1:7c:6f:a4:bf:00: 85:5f:d7:9d:d9:85:05:2b:b8:97:0b:cc:0a:94:ff: 30:4e:01:1f:94:55:89:80:d5:2e:1f:de:a7:e7:0e: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E0:B9:9F:86:2C:15:92:7C:EE:26:E8:93:6B:F2:EA:36:C7:4D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0cbffe49-432a-3a6f-a046-cc6acbbc2d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.142.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8e:a4:13:c0:1c:a1:7c:db:b5:25:21:0d:5b:c6:a0:e4:9b: 2b:a2:57:b8:7a:1e:84:6f:61:22:c3:af:6c:1c:43:b3:c9:3c: 2c:ae:43:fd:d7:23:7b:d6:ee:28:df:f9:42:75:64:c2:8c:6a: b6:c7:dc:25:ab:8b:34:26:5a:cd:d5:b0:07:bc:61:ac:9f:72: 0c:1d:02:23:50:a6:d9:74:21:d6:6c:57:0d:dd:bb:70:e8:90: 70:1c:00:1a:12:7b:3b:d8:4b:e7:ae:60:71:0c:4c:69:e8:08: 96:ae:1f:7d:0e:00:0b:3c:52:62:dc:4c:4f:f5:38:df:ee:a1: 23:fa:13:cb:ec:24:ad:73:ee:26:2d:67:c2:7a:82:1d:08:77: be:e7:4f:fa:84:27:53:15:3f:96:6a:a8:7a:b1:2b:1b:13:af: 1f:c2:9b:68:da:96:e8:1f:3f:2d:dd:33:d7:b8:d2:2f:14:e0: f6:0e:47:fb:e1:1b:30:d4:37:44:06:d0:78:35:15:5d:22:ee: 34:66:c4:6d:e8:33:5a:11:75:5a:82:6e:bd:86:fd:82:f8:b7: 9a:95:6c:18:ea:66:68:92:a5:87:50:6f:ac:2c:5f:cc:1a:07: 2a:2d:77:7d:ee:ea:80:f4:4e:76:d7:f2:14:e6:34:55:e2:0d: 00:df:a7:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdN8iBl6fevhn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OThlYTVjZGEtOTkzZi00ZDc3LTk4MDYtMjY1ZjAwZWU4YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4C+yOnpbc7tqUFEDrmOdSX4hJ5J9sLh97Zw Heq0YP/F7fnd2lacPP1ZTkvMxWIVTlRDhvRST8tlHp6mZJ7kFzJz/4Wo+oJE7l6g kGCGgzUSJBkShS6elgvfErpKiueQYLEeHNZgiki2+o1a163/Xav9vFXAgpBAiZII Ue2PXdEju6QJs3VeiS8pn84v5SyJG+I+tF6uqKU6/7Hv8OUFvwFrjHrhD4eW8Q9M VVWPivgDyycv3zfQKlVmhIDzbdjqca8FtP+hNexThVD9dGoCf7/xLHcj5vxDjhzx fG+kvwCFX9ed2YUFK7iXC8wKlP8wTgEflFWJgNUuH96n5w4F6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbguZ+GLBWSfO4m6JNr8uo2x02VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGNiZmZlNDktNDMyYS0z YTZmLWEwNDYtY2M2YWNiYmMyZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyOpBPAHKF827UlIQ1bxqDkmyuiV7h6HoRvYSLDr2wcQ7PJPCyuQ/3X I3vW7ijf+UJ1ZMKMarbH3CWrizQmWs3VsAe8YayfcgwdAiNQptl0IdZsVw3du3Do kHAcABoSezvYS+euYHEMTGnoCJauH30OAAs8UmLcTE/1ON/uoSP6E8vsJK1z7iYt Z8J6gh0Id77nT/qEJ1MVP5ZqqHqxKxsTrx/Cm2jalugfPy3dM9e40i8U4PYOR/vh GzDUN0QG0Hg1FV0i7jRmxG3oM1oRdVqCbr2G/YL4t5qVbBjqZmiSpYdQb6wsX8wa Byotd33u6oD0TnbX8hTmNFXiDQDfp58= -----END CERTIFICATE-----Generated at Sun Sep 27 11:36:33 2026 by rpki-client