$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa File: 2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa (raw, json) Hash identifier: JoHzh5gRyk1omimmqqvWWnf6ZRiROOjggRmai1I6EV0= Subject key identifier: 67:76:EC:0E:B2:97:67:DD:B9:31:48:AF:7D:B3:38:FD:5C:F9:AF:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D95E476466E3BEAF96E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:95:e4:76:46:6e:3b:ea:f9:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1e347b15-6133-467c-9f5f-ca79979a5848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:a3:9e:70:8c:08:44:c9:6b:44:34:c6:0c: 31:cf:e0:9f:a1:78:c5:58:0a:59:4b:b6:43:a3:b1: ce:26:6a:0b:b6:a7:4f:0b:b6:9f:a0:bb:a9:c9:b8: 9b:63:1a:b5:4b:b5:c6:43:29:28:c0:c6:1b:d1:2f: 5f:91:3e:45:6a:a7:90:a4:63:1a:ca:23:18:f1:3a: f5:8b:33:53:7e:49:13:89:a9:65:a9:25:3f:b5:1e: cd:ba:15:6d:a6:ef:50:ea:5e:7d:73:63:f9:f6:ea: 51:3c:3c:a3:d0:56:be:65:cc:93:0e:34:8e:3f:e8: 82:5c:0f:82:04:d9:71:22:90:8a:0e:c3:c7:7e:41: 84:4a:24:5a:43:0a:0f:2a:ac:3a:07:70:99:8d:68: 15:2a:a0:09:6d:3e:61:ad:0f:72:68:29:a4:81:be: 63:38:17:72:94:86:4d:08:82:4b:f9:b4:29:7b:96: 65:c3:9e:86:d3:05:b7:53:54:5b:9e:bb:55:c2:5f: 2d:b2:dd:f8:31:94:e9:63:99:16:6b:ea:df:61:29: b3:1f:31:8b:50:ae:e3:d9:a1:92:f5:74:04:bd:11: 4c:93:3d:d7:b5:49:1f:7b:7a:63:39:56:04:5b:b3: f6:ba:96:08:c4:4a:e5:33:db:ff:e4:4c:8e:a5:93: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:76:EC:0E:B2:97:67:DD:B9:31:48:AF:7D:B3:38:FD:5C:F9:AF:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d4:95:69:a7:87:39:de:d8:0d:cf:db:3a:a8:f0:1b:ab:1f: 82:83:9b:31:e7:66:24:bf:c6:0e:a7:e0:4d:96:4b:44:37:07: 3d:60:d9:d0:8e:0a:56:c0:ae:8d:0e:a8:97:3d:ff:06:bd:ce: 48:0d:45:2c:fa:fd:99:c2:92:bb:f4:17:48:da:a5:fc:fa:7b: ef:be:e4:89:65:a6:ce:7a:50:7c:81:9a:bd:98:f1:d1:61:3b: 5c:aa:db:6e:c9:5d:fb:98:42:e0:9f:b4:8e:d0:91:c2:b7:48: f1:b7:49:62:8c:c8:98:bc:ba:bd:aa:21:b4:2a:5c:5e:2a:90: 45:a6:e5:31:10:c0:0d:46:20:fa:81:74:d7:fd:84:54:32:69: c0:a2:ea:b4:fe:9a:2d:00:57:1e:76:19:55:71:f3:71:6c:a8: da:0f:f0:ab:4d:f7:22:03:29:a9:6d:cd:9e:61:17:65:73:ca: 27:85:49:94:fc:ed:3b:5d:23:40:75:a4:bb:0b:9e:7e:eb:6f: 77:4e:a0:dd:a2:88:2b:db:6f:0b:10:a9:e9:49:ee:ed:fd:cb: 73:02:8f:dc:6e:8c:bf:b6:3b:38:a9:5d:35:86:34:e6:80:1b: 92:d6:c6:b2:c3:ec:ea:48:77:29:9d:ad:4c:c6:21:a0:d6:c8: f0:aa:d0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZXkdkZuO+r5bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWUzNDdiMTUtNjEzMy00NjdjLTlmNWYtY2E3OTk3OWE1ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumyjnnCMCETJa0Q0xgwxz+CfoXjFWApZS7ZD o7HOJmoLtqdPC7afoLupybibYxq1S7XGQykowMYb0S9fkT5FaqeQpGMayiMY8Tr1 izNTfkkTiallqSU/tR7NuhVtpu9Q6l59c2P59upRPDyj0Fa+ZcyTDjSOP+iCXA+C BNlxIpCKDsPHfkGESiRaQwoPKqw6B3CZjWgVKqAJbT5hrQ9yaCmkgb5jOBdylIZN CIJL+bQpe5Zlw56G0wW3U1RbnrtVwl8tst34MZTpY5kWa+rfYSmzHzGLUK7j2aGS 9XQEvRFMkz3XtUkfe3pjOVYEW7P2upYIxErlM9v/5EyOpZNB/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd27A6yl2fduTFIr32zOP1c+a9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNhNzMzYjItOGM5OS0z YWIyLWE3ZjQtNzUyYWQxNmUxMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIoAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjUlWmnhzne2A3P2zqo8BurH4KDmzHnZiS/xg6n4E2WS0Q3Bz1g2dCO ClbAro0OqJc9/wa9zkgNRSz6/ZnCkrv0F0japfz6e+++5Illps56UHyBmr2Y8dFh O1yq227JXfuYQuCftI7QkcK3SPG3SWKMyJi8ur2qIbQqXF4qkEWm5TEQwA1GIPqB dNf9hFQyacCi6rT+mi0AVx52GVVx83FsqNoP8KtN9yIDKaltzZ5hF2VzyieFSZT8 7TtdI0B1pLsLnn7rb3dOoN2iiCvbbwsQqelJ7u39y3MCj9xujL+2OzipXTWGNOaA G5LWxrLD7OpIdymdrUzGIaDWyPCq0Fs= -----END CERTIFICATE-----Generated at Sat Sep 26 17:37:16 2026 by rpki-client