$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa File: 33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa (raw, json) Hash identifier: HjcILa7QkpppMWTSpOl/B5fwdQ4TM3Mn9fOZZwCtiYk= Subject key identifier: 37:22:E1:F4:82:EB:8F:0B:43:A2:AB:11:6C:AB:83:9B:DD:55:AF:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D94A2732283849120F580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.69.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:94:a2:73:22:83:84:91:20:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=dfe20b17-db78-4edb-8c52-7a99ba36c5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:78:39:3d:e5:58:a2:40:b2:7f:63:e5:84: 71:26:15:8c:08:01:db:a5:df:ef:a4:5b:3c:b4:55: b7:da:8c:fc:68:8e:97:88:f3:b0:09:4e:3b:3e:ff: 08:3a:aa:cd:88:28:ab:56:89:dc:5e:c8:5b:e7:5e: eb:c7:db:14:6c:8a:3c:ea:36:34:e9:81:50:e3:c6: ab:17:37:08:6e:12:bf:b6:7f:9c:26:6a:eb:92:e0: 6c:c9:47:bf:29:bd:ac:20:8d:0c:25:4b:e8:80:fb: 45:ed:8e:a5:a9:03:6d:fd:cd:9f:60:a3:ca:f4:4d: ac:0a:80:26:c7:50:4d:04:c6:4a:8b:f5:5d:66:50: e1:8a:25:d3:0a:c8:ff:00:d4:2d:4e:5e:f3:3a:a4: c4:e8:f7:f2:0d:78:46:61:bc:0d:7c:86:d3:5d:08: c6:21:57:7e:e5:3f:95:ad:09:ae:91:f2:98:de:9d: be:78:53:67:2f:85:45:33:a8:b1:4d:4a:f7:ea:24: 41:28:e9:17:48:f6:81:92:4e:60:12:39:c8:73:4f: fe:cd:b5:65:e6:a4:7b:ed:f6:d0:0c:16:fb:7d:f2: b4:1d:61:8e:79:01:38:31:d4:da:84:14:28:cd:9c: fb:61:dd:6e:b1:fe:87:ff:06:04:75:5b:85:d1:8a: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:22:E1:F4:82:EB:8F:0B:43:A2:AB:11:6C:AB:83:9B:DD:55:AF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d4:82:de:35:dc:b9:0a:69:2a:cc:48:1a:7b:33:4a:2c:a0: b6:75:3f:39:d4:2b:94:f1:3b:7d:96:43:48:fb:9f:dc:67:e5: 03:70:51:56:8c:e0:c5:52:f6:11:3b:44:92:3e:af:24:90:65: 65:1c:08:a0:1a:f4:2c:8c:6b:0e:39:b9:e4:1a:e3:fb:c2:11: a9:17:d9:bf:bc:d6:aa:09:58:c8:de:49:d3:8a:40:72:44:a4: 9b:6d:1e:de:ac:a3:c9:c7:8b:b8:1a:f3:14:6c:c6:9e:1c:6c: 42:93:8a:bc:e6:a6:62:6f:78:1f:2e:6a:4c:a1:4d:36:d1:05: 51:11:36:47:fd:ae:74:39:d2:6c:83:34:bc:ee:93:67:bb:a9: 7a:00:73:8f:43:60:73:ae:a7:09:e9:99:c2:6c:0b:e2:be:59: 64:54:c2:b1:80:4d:8f:8f:7c:ff:3f:03:78:ba:bf:6e:2e:ed: 2d:e6:d1:fa:9d:bd:96:1c:a5:57:45:f4:21:89:ad:8c:2d:66: 86:76:ff:ec:da:3b:5d:19:f6:76:ef:e4:cd:c7:0f:fb:aa:c4: 74:02:0f:cc:d1:6b:19:07:25:5b:7d:89:a3:04:43:2b:33:bd: 1e:9c:38:91:ac:57:3d:db:85:69:fc:5f:d4:56:6f:39:77:29: 3d:46:1c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZSicyKDhJEg9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGZlMjBiMTctZGI3OC00ZWRiLThjNTItN2E5OWJhMzZjNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Z4OT3lWKJAsn9j5YRxJhWMCAHbpd/vpFs8 tFW32oz8aI6XiPOwCU47Pv8IOqrNiCirVoncXshb517rx9sUbIo86jY06YFQ48ar FzcIbhK/tn+cJmrrkuBsyUe/Kb2sII0MJUvogPtF7Y6lqQNt/c2fYKPK9E2sCoAm x1BNBMZKi/VdZlDhiiXTCsj/ANQtTl7zOqTE6PfyDXhGYbwNfIbTXQjGIVd+5T+V rQmukfKY3p2+eFNnL4VFM6ixTUr36iRBKOkXSPaBkk5gEjnIc0/+zbVl5qR77fbQ DBb7ffK0HWGOeQE4MdTahBQozZz7Yd1usf6H/wYEdVuF0Yo+kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDci4fSC648LQ6KrEWyrg5vdVa+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNmYTMzNjgtMzJiYi0z ZWUyLTk2NmUtMmE4Y2U3NjU5OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzUgt413LkKaSrMSBp7M0osoLZ1PznUK5TxO32WQ0j7n9xn5QNwUVaM 4MVS9hE7RJI+rySQZWUcCKAa9CyMaw45ueQa4/vCEakX2b+81qoJWMjeSdOKQHJE pJttHt6so8nHi7ga8xRsxp4cbEKTirzmpmJveB8uakyhTTbRBVERNkf9rnQ50myD NLzuk2e7qXoAc49DYHOupwnpmcJsC+K+WWRUwrGATY+PfP8/A3i6v24u7S3m0fqd vZYcpVdF9CGJrYwtZoZ2/+zaO10Z9nbv5M3HD/uqxHQCD8zRaxkHJVt9iaMEQysz vR6cOJGsVz3bhWn8X9RWbzl3KT1GHD4= -----END CERTIFICATE-----Generated at Tue Sep 29 11:55:04 2026 by rpki-client