$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17a23594-e83c-32db-a8c9-9515538c67f6.roa File: 17a23594-e83c-32db-a8c9-9515538c67f6.roa (raw, json) Hash identifier: IwFSqQVBrC3fDxSe+CVrXD4RyPvGX/9krWxJGIc+mpM= Subject key identifier: 43:36:82:EC:9B:D1:C2:02:D9:C7:C8:4D:0D:36:92:5A:A8:52:81:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8C075948A843C6DE2680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17a23594-e83c-32db-a8c9-9515538c67f6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.88.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8c:07:59:48:a8:43:c6:de:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=525e3a97-05a3-4412-80d1-3b5529c78542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:79:73:ff:8e:7e:ef:f2:f9:4e:81:70:53: 74:f0:14:44:3c:3f:83:50:64:f0:f6:6a:e5:d6:dd: 61:b3:08:f5:56:68:c5:b0:fe:b7:df:bf:b4:24:9d: b8:78:00:05:f1:92:30:3d:d2:97:b8:17:da:a1:13: ee:af:ae:9a:18:e4:f7:45:3b:d3:f1:15:e1:79:ef: 5f:44:20:64:87:ff:f3:2e:12:e3:59:23:46:b4:2c: 83:cd:78:0e:a9:a8:24:e1:7e:d9:d5:db:07:0b:98: f5:be:ed:50:6c:c3:4c:89:ff:0e:0d:c5:08:4f:41: 6b:10:70:2c:2a:3d:da:cf:89:ee:b0:4f:30:f7:18: 9f:cd:d4:ee:4b:4c:96:64:09:10:68:f4:3d:e6:23: 8b:ee:a8:de:50:bf:df:c2:92:a4:0f:a3:e9:a6:71: ad:8e:6d:08:3a:19:17:8c:c9:42:f9:84:21:53:a0: 1f:72:23:2d:77:c2:c4:86:c3:8c:54:43:8a:0f:31: 37:9c:25:a3:91:dc:2e:a1:57:54:aa:ae:6a:4d:0c: ab:fa:10:3b:50:bb:70:4f:b9:33:42:97:15:af:3e: cb:53:f9:a0:51:49:b1:3a:ea:79:59:fa:83:9b:2f: ef:27:bf:9c:d0:8c:50:dd:e8:58:8d:0c:12:55:8e: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:82:EC:9B:D1:C2:02:D9:C7:C8:4D:0D:36:92:5A:A8:52:81:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17a23594-e83c-32db-a8c9-9515538c67f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:40:0b:42:39:c5:74:14:99:9b:61:fe:2e:bc:12:fb:1b:bd: b1:ec:59:ca:41:9e:63:96:b5:b5:37:85:80:c9:ba:80:f2:cb: aa:4d:65:f2:32:c2:4d:37:67:e3:b9:3c:45:14:21:f3:57:bf: 7a:48:6d:fe:3b:94:ca:5b:4c:05:93:43:77:6c:45:0e:d8:fb: 91:7e:d4:22:5a:e8:a2:58:fc:82:63:4d:32:c3:e3:bd:4a:ed: 13:83:9d:64:81:5d:b3:dc:e4:3c:2a:8f:6b:d9:0c:ff:2b:3d: 23:ff:9c:9d:71:58:5b:8d:81:e9:92:73:a7:c9:5c:a7:95:3e: d5:d9:97:e4:36:8c:99:e1:37:35:a2:f3:b1:c0:a1:ad:ba:f6: 97:2f:b3:68:5c:47:45:ae:2c:ed:57:06:a6:67:c9:d4:d5:f8: 9b:74:bf:48:4d:d2:d7:db:29:bf:a8:ff:bb:e9:e5:23:ac:59: 24:18:02:6c:d4:96:b4:00:80:7e:ef:63:35:5b:99:7d:75:66: b2:0d:d8:e0:31:75:86:d5:0b:d6:e8:f0:4f:c7:83:87:22:6a: 2b:fd:d1:ab:ea:c4:d1:20:af:e6:29:a5:fa:4f:84:bb:df:77: 8f:9c:75:0f:0b:7a:92:13:4d:55:8b:c1:ae:94:99:a1:f6:53: 37:80:b1:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYwHWUioQ8beJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTI1ZTNhOTctMDVhMy00NDEyLTgwZDEtM2I1NTI5Yzc4NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh295c/+Ofu/y+U6BcFN08BREPD+DUGTw9mrl 1t1hswj1VmjFsP6337+0JJ24eAAF8ZIwPdKXuBfaoRPur66aGOT3RTvT8RXhee9f RCBkh//zLhLjWSNGtCyDzXgOqagk4X7Z1dsHC5j1vu1QbMNMif8ODcUIT0FrEHAs Kj3az4nusE8w9xifzdTuS0yWZAkQaPQ95iOL7qjeUL/fwpKkD6PppnGtjm0IOhkX jMlC+YQhU6AfciMtd8LEhsOMVEOKDzE3nCWjkdwuoVdUqq5qTQyr+hA7ULtwT7kz QpcVrz7LU/mgUUmxOup5WfqDmy/vJ7+c0IxQ3ehYjQwSVY5pKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM2guyb0cIC2cfITQ02klqoUoGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTdhMjM1OTQtZTgzYy0z MmRiLWE4YzktOTUxNTUzOGM2N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdAC0I5xXQUmZth/i68EvsbvbHsWcpBnmOWtbU3hYDJuoDyy6pNZfIy wk03Z+O5PEUUIfNXv3pIbf47lMpbTAWTQ3dsRQ7Y+5F+1CJa6KJY/IJjTTLD471K 7RODnWSBXbPc5Dwqj2vZDP8rPSP/nJ1xWFuNgemSc6fJXKeVPtXZl+Q2jJnhNzWi 87HAoa269pcvs2hcR0WuLO1XBqZnydTV+Jt0v0hN0tfbKb+o/7vp5SOsWSQYAmzU lrQAgH7vYzVbmX11ZrIN2OAxdYbVC9bo8E/Hg4ciaiv90avqxNEgr+YppfpPhLvf d4+cdQ8LepITTVWLwa6UmaH2UzeAsRo= -----END CERTIFICATE-----Generated at Mon Sep 28 20:17:07 2026 by rpki-client