$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2121d867-2cf3-31c2-b58a-3a3b18de980c.roa File: 2121d867-2cf3-31c2-b58a-3a3b18de980c.roa (raw, json) Hash identifier: /I7KRsGmWqmiuqOPnHZIlxCAI6A6mHRRFxduf4wYeug= Subject key identifier: 3B:99:AD:BB:AB:03:5A:66:A9:15:89:02:5E:DE:93:AF:B5:D0:48:E0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD803920037CEBA1C5500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2121d867-2cf3-31c2-b58a-3a3b18de980c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.135.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d8:03:92:00:37:ce:ba:1c:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=33abe7bf-7bcc-4ac3-a7da-e691e0bd58bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:ce:39:f1:e1:d1:c1:d6:93:10:17:23:d5: b3:66:51:45:1b:6b:a4:f5:94:eb:19:37:ad:cd:b1: 40:65:f9:65:8d:34:80:df:f2:35:0d:1a:39:68:c7: bb:38:e8:d9:af:e3:a4:83:65:dc:ef:9c:0f:f7:bb: c8:0d:75:5a:5a:2b:50:48:77:e0:1e:8f:3d:6e:01: 3e:b3:4c:0e:2b:73:24:5b:fe:d7:7a:c8:a6:5c:da: 19:04:2b:20:df:28:e8:06:9f:b4:05:f8:6d:19:a4: 66:95:bb:ca:f7:86:77:1b:6d:c2:68:8b:a9:60:03: fa:d2:7e:a3:0a:1b:2a:a3:e2:c7:bb:d0:4e:91:6b: be:63:c2:35:f0:57:2c:41:fc:d5:d9:72:4d:e8:70: 01:9d:67:fa:c7:e4:0b:57:35:ed:1d:2c:d8:2b:7f: ed:37:48:8a:9d:9d:94:b4:01:73:0a:de:d5:39:0b: 3c:d8:48:1c:75:2a:75:b1:1c:9b:0a:95:fc:69:42: dd:93:3e:bc:8a:0a:29:28:f0:1e:08:0d:80:83:25: 3e:d3:ee:ca:1a:31:53:09:39:22:10:37:e3:ae:22: 47:bd:1e:40:9a:65:d1:71:c4:64:86:50:59:dc:d8: d6:76:84:87:cf:67:8f:9c:21:1e:7f:d9:37:b8:d2: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:99:AD:BB:AB:03:5A:66:A9:15:89:02:5E:DE:93:AF:B5:D0:48:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2121d867-2cf3-31c2-b58a-3a3b18de980c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c6:4d:1d:26:0d:2b:2c:4d:b6:4e:8c:7e:9a:9a:2c:46:71: f5:7e:f8:ef:ab:f2:8e:18:81:15:7d:92:c8:83:18:9d:ad:54: c2:89:9f:f3:0c:85:d4:e5:41:fa:77:f4:8e:70:5f:97:d8:ea: 7c:e5:19:07:48:44:d3:43:4f:28:4d:ff:bc:c6:76:ac:5b:ac: 65:d2:28:f8:87:5a:de:dc:37:f9:1f:3e:9a:7c:49:b1:e2:47: c5:c8:15:88:8c:0a:59:9c:e1:3a:3b:2e:fb:35:fe:3f:78:bf: b0:71:95:ed:9b:75:89:9a:6d:d3:97:01:a9:9b:dc:f2:3b:75: 29:39:b4:0f:f9:27:01:34:26:e2:98:26:11:6a:26:44:bc:dd: ce:79:ce:bc:df:6e:ec:f0:88:36:bc:60:2f:7e:88:13:0d:e1: c0:37:97:26:3f:d7:2d:81:79:04:8f:86:7f:01:01:44:14:27: 92:c2:4d:86:87:b8:10:c1:18:42:36:47:a7:32:a0:e1:69:d5: 61:9a:1c:53:27:1f:f3:d6:b7:05:35:dc:81:c8:3a:17:52:a8: 0c:7e:d2:cc:29:5e:7e:ae:a7:ce:ec:5b:fc:90:fb:6d:30:37: 32:00:47:4a:d1:d8:89:6c:08:1f:4e:e5:db:93:19:fd:9f:82: 69:1c:de:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdgDkgA3zrocVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzNhYmU3YmYtN2JjYy00YWMzLWE3ZGEtZTY5MWUwYmQ1OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7nOOfHh0cHWkxAXI9WzZlFFG2uk9ZTrGTet zbFAZflljTSA3/I1DRo5aMe7OOjZr+Okg2Xc75wP97vIDXVaWitQSHfgHo89bgE+ s0wOK3MkW/7XesimXNoZBCsg3yjoBp+0BfhtGaRmlbvK94Z3G23CaIupYAP60n6j Chsqo+LHu9BOkWu+Y8I18FcsQfzV2XJN6HABnWf6x+QLVzXtHSzYK3/tN0iKnZ2U tAFzCt7VOQs82EgcdSp1sRybCpX8aULdkz68igopKPAeCA2AgyU+0+7KGjFTCTki EDfjriJHvR5AmmXRccRkhlBZ3NjWdoSHz2ePnCEef9k3uNKhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuZrburA1pmqRWJAl7ek6+10EjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjEyMWQ4NjctMmNmMy0z MWMyLWI1OGEtM2EzYjE4ZGU5ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIocAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDGTR0mDSssTbZOjH6amixGcfV++O+r8o4YgRV9ksiDGJ2tVMKJn/MM hdTlQfp39I5wX5fY6nzlGQdIRNNDTyhN/7zGdqxbrGXSKPiHWt7cN/kfPpp8SbHi R8XIFYiMClmc4To7Lvs1/j94v7Bxle2bdYmabdOXAamb3PI7dSk5tA/5JwE0JuKY JhFqJkS83c55zrzfbuzwiDa8YC9+iBMN4cA3lyY/1y2BeQSPhn8BAUQUJ5LCTYaH uBDBGEI2R6cyoOFp1WGaHFMnH/PWtwU13IHIOhdSqAx+0swpXn6up87sW/yQ+20w NzIAR0rR2IlsCB9O5duTGf2fgmkc3vw= -----END CERTIFICATE-----Generated at Mon Sep 28 23:26:59 2026 by rpki-client