$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bc26a2-06a0-3df4-979e-9f867c56155e.roa File: 28bc26a2-06a0-3df4-979e-9f867c56155e.roa (raw, json) Hash identifier: n0AYeU8uZtqTAKGJcnOQMtrpZsPQA6UnNmHTEfv8sZ8= Subject key identifier: DF:6B:1C:72:82:F8:4A:99:A3:4E:62:D1:A1:C1:9C:1A:FE:34:4C:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4986DDA30FF0B668D0417490 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bc26a2-06a0-3df4-979e-9f867c56155e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.190.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:dd:a3:0f:f0:b6:68:d0:41:74:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d9a6f74-1f17-4cda-9d17-3ba769919eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ba:6e:c8:17:42:9e:2d:dd:5f:16:2d:a9:f3: da:64:09:42:33:9f:b1:d5:01:ef:3f:35:99:b7:ef: fb:7d:71:24:64:bd:b3:ab:71:be:53:56:2a:59:ac: b7:e7:d6:88:e6:79:6b:2c:4b:36:41:73:83:84:bf: e0:e0:78:ab:09:cf:a6:49:14:5b:ff:73:0d:d8:60: dc:91:25:79:be:3d:77:cd:c1:01:6b:a5:d8:76:29: 2a:7b:50:c3:ea:e5:0b:8c:b3:4b:16:ae:cc:c8:65: 43:8f:a1:b4:60:be:1c:fb:a8:f9:47:95:22:fc:d3: ae:2e:18:51:32:15:e6:ab:19:42:a4:e3:5b:24:f0: 97:2d:34:b8:ee:77:8c:25:48:97:2a:09:5c:86:3b: ac:12:53:3c:1c:12:da:ce:5f:97:fe:7c:c0:75:30: 23:95:0a:16:b3:09:e8:67:81:e8:11:c9:5f:8b:8d: e9:be:f0:13:2b:4d:eb:b1:72:d8:63:3b:de:a4:52: d8:15:2d:2d:ff:10:b1:90:b9:12:fa:74:89:b9:73: f8:fc:7a:7f:f6:55:0d:4b:3d:b3:85:e2:71:a3:c6: b7:cd:0c:a8:3d:d4:17:ae:99:66:01:4b:24:d2:0c: e3:6f:fa:0e:5f:ea:fb:4d:dd:f7:c5:2a:d6:17:20: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6B:1C:72:82:F8:4A:99:A3:4E:62:D1:A1:C1:9C:1A:FE:34:4C:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bc26a2-06a0-3df4-979e-9f867c56155e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4a:ae:2f:07:10:9b:a4:d0:d6:c9:79:fe:e1:db:23:42:3b: 8b:5e:c2:10:87:f7:91:ef:7b:28:44:48:df:38:07:09:9a:1b: 54:45:8a:10:4d:32:fb:ae:ba:9b:4d:9b:4f:67:5e:57:5c:a5: bb:22:c6:26:ac:1b:f0:39:c2:9a:aa:3d:88:fc:6a:61:84:19: 4f:3b:c1:18:1e:c4:e6:c1:18:5d:54:50:6a:52:fd:98:dc:37: 7d:f4:83:70:35:55:31:62:f4:47:ed:e9:f5:bd:dc:b1:9c:46: c4:0c:3b:0b:a6:22:2f:1b:32:d6:6d:e0:47:5c:63:78:37:04: a4:fd:9c:4b:dd:1a:66:09:1a:24:40:e2:72:6e:07:2b:3e:ee: d7:de:38:3d:37:24:d8:9a:14:89:91:c2:0c:8a:66:3e:15:d6: a0:91:9d:1d:2a:76:9b:1d:19:0c:09:71:75:62:95:f8:ee:6b: bc:b5:40:5e:18:ac:61:c7:5c:a6:80:3b:8e:ee:da:ff:bc:8d: 38:8d:c7:50:da:ee:9a:70:51:9f:38:09:c2:6a:23:ae:9b:78: 60:16:72:39:6a:d8:70:3c:33:83:33:1e:16:8b:c0:49:dc:ca: a5:3e:db:9d:ce:06:db:02:27:37:1a:9a:42:e5:02:b4:8a:e8: bc:0d:ef:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jht2jD/C2aNBBdJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ5YTZmNzQtMWYxNy00Y2RhLTlkMTctM2JhNzY5OTE5ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57puyBdCni3dXxYtqfPaZAlCM5+x1QHvPzWZ t+/7fXEkZL2zq3G+U1YqWay359aI5nlrLEs2QXODhL/g4HirCc+mSRRb/3MN2GDc kSV5vj13zcEBa6XYdikqe1DD6uULjLNLFq7MyGVDj6G0YL4c+6j5R5Ui/NOuLhhR MhXmqxlCpONbJPCXLTS47neMJUiXKglchjusElM8HBLazl+X/nzAdTAjlQoWswno Z4HoEclfi43pvvATK03rsXLYYzvepFLYFS0t/xCxkLkS+nSJuXP4/Hp/9lUNSz2z heJxo8a3zQyoPdQXrplmAUsk0gzjb/oOX+r7Td33xSrWFyDuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9rHHKC+EqZo05i0aHBnBr+NEy+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhiYzI2YTItMDZhMC0z ZGY0LTk3OWUtOWY4NjdjNTYxNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhKri8HEJuk0NbJef7h2yNCO4tewhCH95HveyhESN84BwmaG1RFihBN MvuuuptNm09nXldcpbsixiasG/A5wpqqPYj8amGEGU87wRgexObBGF1UUGpS/Zjc N330g3A1VTFi9Eft6fW93LGcRsQMOwumIi8bMtZt4EdcY3g3BKT9nEvdGmYJGiRA 4nJuBys+7tfeOD03JNiaFImRwgyKZj4V1qCRnR0qdpsdGQwJcXVilfjua7y1QF4Y rGHHXKaAO47u2v+8jTiNx1Da7ppwUZ84CcJqI66beGAWcjlq2HA8M4MzHhaLwEnc yqU+253OBtsCJzcamkLlArSK6LwN75g= -----END CERTIFICATE-----Generated at Sat Sep 26 15:47:57 2026 by rpki-client