$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa File: 1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa (raw, json) Hash identifier: 0SQezWVLWvCIoYkwVtNBdwDqcscdJnrQAOc29ohQCnc= Subject key identifier: 1C:33:91:49:0B:3C:A8:63:96:15:96:60:0C:74:32:87:6A:EC:40:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EE38CAE3B6C24F9A5BBE87690 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 19527 IP address blocks: 34.2.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:ae:3b:6c:24:f9:a5:bb:e8:76:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=c7868558-5f4c-43d7-9e0e-d3409d59cf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:89:72:14:35:e1:4b:a9:55:c0:e2:05:5a: a2:30:0f:14:5e:f7:d9:7e:41:f3:ed:4a:ed:4e:91: 2d:48:03:b9:2c:e2:3a:43:b5:17:f2:fa:18:bc:28: dd:ef:26:da:4e:26:ad:6c:ab:14:4e:22:d5:07:f9: fa:4f:79:c8:20:a4:c6:90:c1:89:be:b2:b1:37:d8: b0:f5:46:c1:57:06:6e:5c:26:4e:d7:25:50:25:a6: 9a:95:75:ba:9a:9d:ca:14:29:74:7b:28:23:75:06: 40:cb:0a:c0:d3:3c:27:fb:55:69:f0:6d:06:12:75: b5:bb:52:9d:56:00:96:fc:0a:e5:d0:0f:c9:4a:dd: 86:ac:24:96:6e:53:a2:53:72:96:d4:35:73:07:80: dd:94:99:22:49:4c:0b:27:ee:b2:da:86:8f:8e:db: 8c:b2:66:01:c2:b8:cb:5e:82:71:a0:42:6e:aa:86: d2:29:c3:eb:6d:b8:6b:c6:43:ef:55:05:68:4e:a0: 45:73:e5:75:d8:85:8b:da:05:8f:99:d7:7d:24:de: c4:1a:9e:03:ed:28:ba:e9:8d:13:b4:60:19:55:a3: d9:f2:c6:46:ad:70:ef:cb:cd:2a:f0:56:c3:6d:2a: eb:f2:f4:b3:9c:df:f9:fe:b1:1c:c2:2b:1f:64:30: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:33:91:49:0B:3C:A8:63:96:15:96:60:0C:74:32:87:6A:EC:40:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0d:c8:b8:4f:ed:96:8c:2f:1f:f2:e5:53:82:85:ca:91:82: e3:8b:40:3d:7b:90:5a:18:44:f1:cc:47:59:10:8d:dd:b7:e3: f5:a3:e8:68:88:52:85:08:f4:d8:e0:e2:4c:70:fd:b1:9e:45: cd:b0:a1:26:6f:3a:7e:6d:18:b5:85:c0:66:a8:b3:73:b8:69: b3:d5:fb:1d:85:b8:f2:f0:9c:7a:d7:96:4d:6c:b8:a1:09:e1: fd:01:02:69:0f:0a:8f:53:7d:53:78:a2:5b:5d:b8:2c:11:f0: 7a:ee:25:32:1e:fc:a5:e5:9d:59:e7:ef:5f:8b:d6:f6:76:32: 91:13:fe:f0:31:a0:7c:71:6a:b8:b4:b5:a1:55:8d:d8:ee:f2: b5:2d:fd:9f:1d:e5:81:a4:c2:b2:32:bc:3f:eb:43:ab:b6:74: de:c4:49:20:a4:54:30:49:6b:c9:8e:1f:62:ec:50:08:1b:6c: 77:6a:c7:22:0b:c2:72:2d:cf:e5:01:3d:c5:a8:17:2c:ff:45: eb:b0:65:b1:8d:44:5b:c1:6e:34:09:c8:15:2a:42:e1:01:c7: 9a:40:f4:55:59:46:3d:59:58:94:c2:15:22:5d:61:88:21:96: 04:ce:d8:1d:58:ab:62:22:ad:79:64:56:52:ce:74:ff:22:fe: aa:a1:b7:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjK47bCT5pbvodpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk Yzc4Njg1NTgtNWY0Yy00M2Q3LTllMGUtZDM0MDlkNTljZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiviJchQ14UupVcDiBVqiMA8UXvfZfkHz7Urt TpEtSAO5LOI6Q7UX8voYvCjd7ybaTiatbKsUTiLVB/n6T3nIIKTGkMGJvrKxN9iw 9UbBVwZuXCZO1yVQJaaalXW6mp3KFCl0eygjdQZAywrA0zwn+1Vp8G0GEnW1u1Kd VgCW/Arl0A/JSt2GrCSWblOiU3KW1DVzB4DdlJkiSUwLJ+6y2oaPjtuMsmYBwrjL XoJxoEJuqobSKcPrbbhrxkPvVQVoTqBFc+V12IWL2gWPmdd9JN7EGp4D7Si66Y0T tGAZVaPZ8sZGrXDvy80q8FbDbSrr8vSznN/5/rEcwisfZDDhrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwzkUkLPKhjlhWWYAx0Modq7EBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWRlYWY0YTYtODhhMy0z ZWU1LWIzYjctYmUzZjFiNjRjZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKANyLhP7ZaMLx/y5VOChcqRguOLQD17kFoYRPHMR1kQjd234/Wj6GiI UoUI9Njg4kxw/bGeRc2woSZvOn5tGLWFwGaos3O4abPV+x2FuPLwnHrXlk1suKEJ 4f0BAmkPCo9TfVN4oltduCwR8HruJTIe/KXlnVnn71+L1vZ2MpET/vAxoHxxari0 taFVjdju8rUt/Z8d5YGkwrIyvD/rQ6u2dN7ESSCkVDBJa8mOH2LsUAgbbHdqxyIL wnItz+UBPcWoFyz/ReuwZbGNRFvBbjQJyBUqQuEBx5pA9FVZRj1ZWJTCFSJdYYgh lgTO2B1Yq2IirXlkVlLOdP8i/qqht64= -----END CERTIFICATE-----Generated at Sat Sep 26 04:35:20 2026 by rpki-client