$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa File: 25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa (raw, json) Hash identifier: mz/lYEQsed420tqn+t8m0UmYfXeY83+H4gPIqKF7CWg= Subject key identifier: A4:21:0A:A8:01:7C:09:CD:65:98:A2:1F:BE:06:FF:43:4B:97:A4:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49852482BF7FB20291036A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.122.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:24:82:bf:7f:b2:02:91:03:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8dc5771-b38b-4bd0-9646-97f791651780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:03:9d:8c:77:16:fd:80:f9:ad:ec:0a:32: 1b:1d:da:6d:8b:89:14:86:8b:01:eb:c7:96:b9:e1: 6b:0f:12:20:b9:f5:dd:8b:b9:71:f0:79:2f:d2:3d: d0:9d:df:28:78:2b:eb:ae:b6:35:62:a1:9f:25:be: 39:d6:9d:81:2b:be:57:56:04:e7:bc:34:70:05:37: ce:5a:ec:ff:80:5f:7b:ac:72:c5:f8:44:b0:4c:dc: 26:aa:ee:53:c8:7c:f5:b0:a2:9c:5f:46:88:39:c5: aa:40:ad:22:6d:9c:bd:2f:ad:d8:63:43:84:7f:dd: 15:7c:6c:c7:d1:cf:8b:80:ce:93:2e:41:ca:6a:28: 20:87:6b:93:28:04:c8:44:54:c4:34:31:aa:d7:5d: e6:4b:1a:33:6c:59:30:7f:91:8e:f0:1c:6f:82:1f: 40:3d:4c:52:28:9c:fe:48:07:de:d1:47:ec:ec:19: b1:27:d3:cd:ae:17:2e:e4:da:41:ed:b2:56:16:ad: 7d:4f:8d:96:59:ec:bb:f8:60:5f:86:b4:3f:f0:d4: 28:8f:ee:32:76:16:86:0b:bb:16:93:ea:c3:98:b4: 75:c6:ec:6a:5d:13:9c:e5:bf:ff:be:7a:e5:a2:1c: 2f:8b:40:20:46:7d:2e:c1:a5:0f:b5:1f:46:5f:65: 52:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:21:0A:A8:01:7C:09:CD:65:98:A2:1F:BE:06:FF:43:4B:97:A4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:cf:79:f1:10:2c:c0:b8:3c:48:fa:08:d7:12:d2:53:6b:64: c7:87:bc:4d:12:37:35:82:28:b3:e7:36:74:d4:bb:4e:59:1d: 99:0a:b9:12:c3:bd:16:f0:db:f5:af:cb:d2:ce:f5:72:8f:54: ad:21:2d:7c:b6:f4:79:24:94:a6:e1:b0:e0:21:a8:59:46:13: 41:aa:f8:25:87:3d:8a:5f:41:fc:5d:53:0c:ab:fc:80:f7:0c: 0e:15:81:07:ad:bb:c3:ca:1e:d7:9f:bc:03:99:bf:c7:11:3b: a5:24:dc:4f:f7:bc:9d:52:37:51:58:76:e3:78:1b:3b:7a:9a: c1:07:f6:de:ea:9c:a8:e7:34:e0:e2:0b:77:0a:4e:c1:29:bb: 48:de:63:7a:56:05:f7:65:e3:d7:88:f2:68:4c:a9:a6:87:13: 26:79:38:08:78:5e:74:c0:86:f0:0e:f8:55:5d:ae:97:c5:18: 9d:8e:66:8e:b5:97:a9:e2:dd:fe:ef:61:18:1b:62:0c:53:2f: 26:8d:10:67:36:25:f7:0e:f9:4c:25:30:9f:6d:5f:56:05:87: f1:1a:c0:d5:04:22:06:ec:23:0c:52:32:00:85:97:30:5b:76: 99:04:ba:e5:a1:4e:f6:b8:6d:8f:37:7e:12:01:71:54:55:7e: 99:45:36:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSSCv3+yApEDaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjhkYzU3NzEtYjM4Yi00YmQwLTk2NDYtOTdmNzkxNjUxNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihkDnYx3Fv2A+a3sCjIbHdpti4kUhosB68eW ueFrDxIgufXdi7lx8Hkv0j3Qnd8oeCvrrrY1YqGfJb451p2BK75XVgTnvDRwBTfO Wuz/gF97rHLF+ESwTNwmqu5TyHz1sKKcX0aIOcWqQK0ibZy9L63YY0OEf90VfGzH 0c+LgM6TLkHKaiggh2uTKATIRFTENDGq113mSxozbFkwf5GO8Bxvgh9APUxSKJz+ SAfe0Ufs7BmxJ9PNrhcu5NpB7bJWFq19T42WWey7+GBfhrQ/8NQoj+4ydhaGC7sW k+rDmLR1xuxqXROc5b//vnrlohwvi0AgRn0uwaUPtR9GX2VS0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQhCqgBfAnNZZiiH74G/0NLl6QHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjVlYWE3ZDEtZTNmYS0z NGFjLTkwMWQtZDk1NDk5NTdlNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/PefEQLMC4PEj6CNcS0lNrZMeHvE0SNzWCKLPnNnTUu05ZHZkKuRLD vRbw2/Wvy9LO9XKPVK0hLXy29HkklKbhsOAhqFlGE0Gq+CWHPYpfQfxdUwyr/ID3 DA4VgQetu8PKHtefvAOZv8cRO6Uk3E/3vJ1SN1FYduN4Gzt6msEH9t7qnKjnNODi C3cKTsEpu0jeY3pWBfdl49eI8mhMqaaHEyZ5OAh4XnTAhvAO+FVdrpfFGJ2OZo61 l6ni3f7vYRgbYgxTLyaNEGc2JfcO+UwlMJ9tX1YFh/EawNUEIgbsIwxSMgCFlzBb dpkEuuWhTva4bY83fhIBcVRVfplFNio= -----END CERTIFICATE-----Generated at Sun Sep 27 05:11:52 2026 by rpki-client