$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa File: 1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa (raw, json) Hash identifier: gZBJem4oxrgxbjrZ1bN2hAhU/L+T/qx2v5r6jDPTje8= Subject key identifier: 12:70:45:CA:EF:D6:DE:AD:1C:22:18:02:C0:5E:26:87:4D:A9:45:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD80F755CB926F1A72E9C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.88.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d8:0f:75:5c:b9:26:f1:a7:2e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=aa84fb24-cc14-4a46-b0de-1c30ced79ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:b0:05:a7:a9:4a:b6:f3:2a:9d:e7:89:c2: 8f:e8:80:2a:2d:6c:c3:57:60:33:81:3d:41:45:8b: 4d:a9:6d:08:c1:e3:34:71:fd:d4:8b:7f:6a:fb:16: 8e:ce:de:61:d1:4d:54:02:46:66:43:82:9f:29:fb: 48:21:78:a2:45:2b:3b:e1:67:84:7d:3f:09:59:da: f3:61:05:5c:04:8d:1c:82:ea:20:67:48:55:b7:5d: c1:25:73:b0:82:5a:93:3a:7a:21:50:3e:3c:be:7f: be:1d:59:f6:0b:36:54:4e:03:ea:f8:28:f9:3b:f9: 6e:ca:d7:b6:99:06:7c:07:8f:99:30:70:7a:9b:2e: e8:af:b8:ef:40:af:c1:6c:2f:be:78:11:1e:0f:16: 23:6f:b7:fd:3d:7c:d6:83:0e:b6:17:4a:b1:b5:41: f4:57:66:4e:db:30:e2:61:ec:16:22:6e:75:4a:c8: 5e:2e:64:87:f0:36:f5:e2:76:67:a2:7b:d2:6e:8f: e4:21:af:b1:5a:4a:be:5b:5d:32:57:88:ec:c6:ee: 71:b6:b7:f6:60:49:7c:b7:e6:a7:0a:2a:d0:6d:bd: 69:e9:87:3d:79:e2:cf:84:d9:58:ca:42:28:df:e4: 45:6b:ff:1c:85:50:6d:39:43:db:1b:a0:da:d0:3b: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:70:45:CA:EF:D6:DE:AD:1C:22:18:02:C0:5E:26:87:4D:A9:45:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:83:54:4b:6f:51:20:66:79:63:09:36:db:bd:be:d0:c8:c6: e5:cf:95:cd:81:0a:4e:96:49:9d:43:30:9c:d9:6a:8c:23:40: 9a:45:f9:51:9e:5f:e5:0f:2f:e8:14:51:f7:84:93:97:46:29: 5c:8f:45:26:d4:a8:1f:81:e2:01:e4:4f:62:78:fe:27:d6:10: 8e:cd:0c:13:91:d7:37:e0:39:2a:58:13:93:c2:bf:bb:07:96: bb:51:b8:b0:cb:73:af:2e:50:54:53:06:33:3e:c6:48:f2:bc: 72:c0:cc:7e:24:37:ef:6e:2a:a7:a6:1b:5f:e2:35:89:d7:ab: 68:4c:45:c0:66:88:93:73:77:f8:a4:1e:bc:00:5e:c8:de:8d: 76:8d:25:15:04:0c:46:43:a8:3f:7e:8d:50:2f:c8:21:b4:4d: 07:70:32:dc:50:45:f6:b0:e7:e9:50:f0:ce:f9:7a:59:4c:7d: 43:22:b3:9f:18:4f:4a:56:18:15:69:09:ba:59:9b:a4:02:ae: 57:40:e0:5e:60:73:85:be:82:4a:79:ff:da:86:e4:82:c8:4e: 64:0f:1d:ff:4b:a4:e6:b9:b9:03:e9:bf:94:0c:10:22:21:32: f7:ee:51:17:0b:b9:e8:50:a0:53:b5:26:18:21:be:1b:66:d7: 46:ca:0c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdgPdVy5JvGnLpwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWE4NGZiMjQtY2MxNC00YTQ2LWIwZGUtMWMzMGNlZDc5Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNqwBaepSrbzKp3nicKP6IAqLWzDV2AzgT1B RYtNqW0IweM0cf3Ui39q+xaOzt5h0U1UAkZmQ4KfKftIIXiiRSs74WeEfT8JWdrz YQVcBI0cguogZ0hVt13BJXOwglqTOnohUD48vn++HVn2CzZUTgPq+Cj5O/luyte2 mQZ8B4+ZMHB6my7or7jvQK/BbC++eBEeDxYjb7f9PXzWgw62F0qxtUH0V2ZO2zDi YewWIm51SsheLmSH8Db14nZnonvSbo/kIa+xWkq+W10yV4jsxu5xtrf2YEl8t+an CirQbb1p6Yc9eeLPhNlYykIo3+RFa/8chVBtOUPbG6Da0DtMtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJwRcrv1t6tHCIYAsBeJodNqUUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWY2ZTQ3ODItYWZmNC0z NWE4LWJhYzQtODk3MmJjZDE3ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIliAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiDVEtvUSBmeWMJNtu9vtDIxuXPlc2BCk6WSZ1DMJzZaowjQJpF+VGe X+UPL+gUUfeEk5dGKVyPRSbUqB+B4gHkT2J4/ifWEI7NDBOR1zfgOSpYE5PCv7sH lrtRuLDLc68uUFRTBjM+xkjyvHLAzH4kN+9uKqemG1/iNYnXq2hMRcBmiJNzd/ik HrwAXsjejXaNJRUEDEZDqD9+jVAvyCG0TQdwMtxQRfaw5+lQ8M75ellMfUMis58Y T0pWGBVpCbpZm6QCrldA4F5gc4W+gkp5/9qG5ILITmQPHf9LpOa5uQPpv5QMECIh MvfuURcLuehQoFO1Jhghvhtm10bKDC8= -----END CERTIFICATE-----Generated at Mon Sep 28 20:43:35 2026 by rpki-client