$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa File: 2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa (raw, json) Hash identifier: RGnHCymObd7ou9jhkdHmynIkzU5E7QtUAD25qH0Eeh8= Subject key identifier: 53:4A:11:F2:39:04:88:AC:8B:B2:97:D0:9D:C0:17:52:D5:86:CE:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9F2D05DD0F88BDF558C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9f:2d:05:dd:0f:88:bd:f5:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b8110b44-4ce2-4785-a7ea-918c3ef16015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:1e:45:32:0b:8e:64:12:aa:e6:7b:0f:6f: 18:bf:1f:62:c6:54:62:12:d6:a4:4e:eb:65:02:99: d6:45:98:1e:3b:b9:f2:72:ca:ab:4c:6a:c4:2e:87: 1b:d5:50:f9:35:40:82:10:e8:6d:0a:ce:3b:37:a6: c1:f3:fc:50:a1:db:71:b4:27:2f:47:63:55:f4:ce: a3:fb:9c:3b:d8:15:5e:73:05:46:b8:5c:a7:75:f0: ed:e6:e8:3e:46:42:a8:40:78:09:ec:79:ae:93:66: 1d:8e:24:0d:42:b9:28:7f:f6:40:0b:73:d3:65:03: 1c:66:d8:7a:c5:29:c6:db:d8:4c:b5:c5:60:59:8d: 52:13:47:ca:c5:0a:30:b3:61:67:19:b0:c9:1d:b1: b5:51:bb:ae:c1:07:ba:0b:6f:f1:71:0c:c2:04:ef: 92:29:03:8d:32:9b:79:61:e8:ba:1a:76:da:4d:47: 7d:b1:05:37:4f:1e:b4:0f:f2:17:d0:3c:b5:2b:72: b3:3f:87:2f:88:6f:84:52:f0:7a:fd:58:64:db:0f: e3:76:b2:fb:af:9f:8b:c3:8b:ef:ea:44:4d:70:10: c5:83:46:24:92:3d:fe:ee:e0:47:f0:85:46:3f:26: c2:95:4d:e1:8e:fc:aa:77:48:73:eb:67:15:28:79: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:11:F2:39:04:88:AC:8B:B2:97:D0:9D:C0:17:52:D5:86:CE:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c4:04:f3:d3:c8:90:f8:eb:6e:d6:33:31:0d:0f:76:27:21: b5:b9:49:98:30:19:e5:71:b9:54:49:6e:9e:ae:d1:8a:8e:29: 30:d2:b6:13:b7:1c:e3:a5:54:c0:ca:5c:5c:82:2c:14:01:c6: fa:de:41:a5:46:e0:53:45:d1:f9:93:4d:ce:eb:3e:5c:21:6f: cc:d0:17:4f:3a:40:ce:6b:65:2b:62:86:d1:43:dc:b8:a9:9f: 52:cf:df:b2:c9:1d:6b:2f:15:aa:5e:00:b5:82:46:ad:cd:66: f3:03:a2:4a:c0:1f:80:49:e4:79:bb:38:47:e9:62:05:43:44: 4a:d0:14:57:e9:6b:8e:81:28:45:28:05:34:7a:b3:48:5a:e4: 71:21:e3:4b:c8:32:0a:ec:d6:1e:9f:96:ff:57:63:f5:fa:54: a9:c0:cb:22:17:ed:1d:cb:b8:cf:b9:8e:86:60:a3:74:0e:38: f0:05:6c:d2:51:ba:b4:ca:60:32:fc:23:54:b7:2e:42:98:b2: 44:53:37:ec:00:67:34:84:1b:11:97:af:42:e2:97:1d:7f:29: 1b:23:ca:14:8c:75:3a:fd:f6:37:b8:a8:37:bf:7c:12:f1:1f: 84:34:87:5b:83:d2:56:68:2d:7b:db:a2:a7:e4:0f:1b:78:03: 56:5e:f0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ8tBd0PiL31WMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjgxMTBiNDQtNGNlMi00Nzg1LWE3ZWEtOTE4YzNlZjE2MDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwroeRTILjmQSquZ7D28Yvx9ixlRiEtakTutl ApnWRZgeO7nycsqrTGrELocb1VD5NUCCEOhtCs47N6bB8/xQodtxtCcvR2NV9M6j +5w72BVecwVGuFyndfDt5ug+RkKoQHgJ7Hmuk2YdjiQNQrkof/ZAC3PTZQMcZth6 xSnG29hMtcVgWY1SE0fKxQows2FnGbDJHbG1UbuuwQe6C2/xcQzCBO+SKQONMpt5 Yei6GnbaTUd9sQU3Tx60D/IX0Dy1K3KzP4cviG+EUvB6/Vhk2w/jdrL7r5+Lw4vv 6kRNcBDFg0Ykkj3+7uBH8IVGPybClU3hjvyqd0hz62cVKHnS5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNKEfI5BIisi7KX0J3AF1LVhs7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZiMzI4MjQtMmRlMi0z OWMwLWEwZWYtMGUwNDE4Y2ZjMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbEBPPTyJD4627WMzEND3YnIbW5SZgwGeVxuVRJbp6u0YqOKTDSthO3 HOOlVMDKXFyCLBQBxvreQaVG4FNF0fmTTc7rPlwhb8zQF086QM5rZStihtFD3Lip n1LP37LJHWsvFapeALWCRq3NZvMDokrAH4BJ5Hm7OEfpYgVDRErQFFfpa46BKEUo BTR6s0ha5HEh40vIMgrs1h6flv9XY/X6VKnAyyIX7R3LuM+5joZgo3QOOPAFbNJR urTKYDL8I1S3LkKYskRTN+wAZzSEGxGXr0Lilx1/KRsjyhSMdTr99je4qDe/fBLx H4Q0h1uD0lZoLXvboqfkDxt4A1Ze8I8= -----END CERTIFICATE-----Generated at Sat Oct 3 14:11:43 2026 by rpki-client