$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d7c1aa-7fdc-3ca0-bd77-2a46dba49e22.roa File: 36d7c1aa-7fdc-3ca0-bd77-2a46dba49e22.roa (raw, json) Hash identifier: 0djjf7ok1KEx3AIpg28er8abTAQkvB/nRGtgRp2MwfM= Subject key identifier: B2:CC:F5:5B:55:19:FB:BF:55:05:0D:8E:12:88:28:70:2E:E4:28:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DACF72B6BF6601B3EB1C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d7c1aa-7fdc-3ca0-bd77-2a46dba49e22.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.66.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ac:f7:2b:6b:f6:60:1b:3e:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c496bd07-da32-4908-b7be-760a102be4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:00:a6:6f:7b:ca:5f:d0:fa:9e:9d:00:29: 83:7c:61:7a:11:22:26:d4:42:78:02:78:9a:8c:69: ee:98:ea:c4:41:58:b0:b2:63:59:ba:cd:d8:73:61: fe:26:46:be:82:31:9f:4c:3d:4d:ec:0a:0a:8e:f9: f9:fd:a9:9d:ab:b4:31:eb:4e:e4:00:69:68:2f:f4: fa:cb:d7:96:7f:43:7a:3b:0b:43:8f:5f:21:04:3c: 32:a3:c7:8f:f8:3b:b4:11:68:46:f4:5a:6b:52:38: a4:da:c1:55:dd:81:b6:9c:89:0e:3f:86:e7:81:e5: 72:a3:08:96:b7:11:ef:d9:f6:6c:28:09:31:bc:6d: 25:bd:e3:d1:31:32:a1:58:b7:86:5a:9a:db:81:dc: d8:f8:5e:81:14:6e:b5:65:de:5a:2c:ac:6d:6b:3e: 4b:f1:33:df:ce:c2:29:95:bb:39:0c:30:05:ed:72: ea:70:0b:6b:c3:de:b2:df:b4:6b:e8:a3:5a:70:d8: d1:6a:9b:95:c0:f7:78:61:52:33:c1:51:73:86:cc: 39:a3:58:0c:6e:34:67:f2:44:ac:53:49:83:da:75: 5a:54:9a:89:c5:c1:85:54:d0:84:2a:af:5c:19:38: 82:52:e8:c9:c9:be:a2:4c:7c:cb:3c:50:52:c4:38: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:F5:5B:55:19:FB:BF:55:05:0D:8E:12:88:28:70:2E:E4:28:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d7c1aa-7fdc-3ca0-bd77-2a46dba49e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:12:9c:11:38:2d:7f:4c:0e:93:c7:3e:26:34:53:0c:70:61: 3d:4e:72:22:30:22:68:a1:88:54:6e:6f:c6:64:f8:cf:e7:2d: 5e:17:cf:f1:41:8e:33:ba:0f:38:ab:a6:a2:e7:c6:69:57:30: df:e5:2a:68:e6:19:69:b3:f4:03:16:e1:b6:43:83:dd:40:f5: 7a:7d:95:3c:b8:f7:75:26:a4:00:40:25:ca:6b:9a:74:f3:12: 22:35:53:62:6e:0f:30:d6:e5:7e:58:02:8c:fb:2b:47:c4:43: 57:91:97:5f:b8:9a:c7:22:b7:1b:e9:f3:5b:38:ab:79:05:4a: ba:89:b5:b8:a9:4b:0a:b3:d3:22:ad:4f:bd:6c:c8:20:57:b2: 7f:af:14:5b:c2:fd:aa:be:0f:2b:fd:67:de:ea:74:ed:d0:20: 91:d8:e8:15:8c:7d:00:54:23:9d:0e:d4:f0:ed:7d:bc:78:b5: 25:98:71:3c:8e:35:38:52:69:25:8b:ac:d7:26:eb:d8:38:6e: 84:3e:ff:d1:31:0a:5a:6c:03:8d:32:d2:5c:4c:39:8a:b8:c4: 01:78:3c:47:a9:1a:95:3e:d5:26:e9:6f:18:16:1c:dd:14:a8: da:aa:ea:a0:fb:d0:22:d6:32:8e:53:5b:75:df:59:f5:07:1f: ca:fb:49:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaz3K2v2YBs+scAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzQ5NmJkMDctZGEzMi00OTA4LWI3YmUtNzYwYTEwMmJlNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQoApm97yl/Q+p6dACmDfGF6ESIm1EJ4Ania jGnumOrEQViwsmNZus3Yc2H+Jka+gjGfTD1N7AoKjvn5/amdq7Qx607kAGloL/T6 y9eWf0N6OwtDj18hBDwyo8eP+Du0EWhG9FprUjik2sFV3YG2nIkOP4bngeVyowiW txHv2fZsKAkxvG0lvePRMTKhWLeGWprbgdzY+F6BFG61Zd5aLKxtaz5L8TPfzsIp lbs5DDAF7XLqcAtrw96y37Rr6KNacNjRapuVwPd4YVIzwVFzhsw5o1gMbjRn8kSs U0mD2nVaVJqJxcGFVNCEKq9cGTiCUujJyb6iTHzLPFBSxDj/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLM9VtVGfu/VQUNjhKIKHAu5CjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzZkN2MxYWEtN2ZkYy0z Y2EwLWJkNzctMmE0NmRiYTQ5ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJISnBE4LX9MDpPHPiY0UwxwYT1OciIwImihiFRub8Zk+M/nLV4Xz/FB jjO6DzirpqLnxmlXMN/lKmjmGWmz9AMW4bZDg91A9Xp9lTy493UmpABAJcprmnTz EiI1U2JuDzDW5X5YAoz7K0fEQ1eRl1+4mscitxvp81s4q3kFSrqJtbipSwqz0yKt T71syCBXsn+vFFvC/aq+Dyv9Z97qdO3QIJHY6BWMfQBUI50O1PDtfbx4tSWYcTyO NThSaSWLrNcm69g4boQ+/9ExClpsA40y0lxMOYq4xAF4PEepGpU+1SbpbxgWHN0U qNqq6qD70CLWMo5TW3XfWfUHH8r7SQE= -----END CERTIFICATE-----Generated at Tue Sep 29 14:04:34 2026 by rpki-client