$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa File: 3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa (raw, json) Hash identifier: exsjjlx7ygSQP9w3VGZyC0mbTXwX0rgpz53j81/x1ZE= Subject key identifier: 6F:0D:6C:55:86:AD:80:79:29:4F:6E:58:F6:D7:70:50:31:01:B2:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD9A0A2DB4C1F8BFD5B40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.87.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d9:a0:a2:db:4c:1f:8b:fd:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=427b6926-38bd-4e0a-8f40-2b70585f6780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:3f:9b:cf:db:ba:e6:a2:38:ee:49:38:2a: 06:b3:9a:68:f1:9c:2a:61:45:ca:ca:71:59:4f:b1: f6:04:b7:7f:2f:88:71:d1:30:53:f4:9d:e7:38:ef: 3e:2b:97:cb:9c:3b:39:ce:1d:a7:94:9f:bf:10:78: 62:a8:c2:c7:0d:64:fe:26:e8:b6:47:b4:96:9b:08: 6b:f0:f1:10:19:10:80:8b:85:58:cd:19:e5:be:b1: 6d:89:01:df:3d:38:21:0e:d9:07:67:63:24:b1:3a: 5c:68:0d:b6:f8:ec:a1:9b:a0:45:4c:7d:0e:7d:1e: f6:3d:6e:77:c7:ed:a1:60:1d:0e:b3:a5:5a:df:d7: 67:19:e6:8a:94:65:ee:17:be:5b:cc:c5:42:8d:64: 0d:03:0c:c4:84:75:00:f6:67:6c:f3:8c:35:17:19: 23:55:9c:fb:ba:79:65:2d:1b:d1:a7:fc:f7:d8:f2: 47:d5:f1:89:f7:ca:1a:15:bc:8d:bb:da:39:75:36: bc:3b:c8:be:2f:b5:a8:ad:21:a0:dc:a1:7d:87:07: 8e:7e:e5:87:62:76:6b:01:a9:27:e7:47:2f:a9:74: 4f:76:d5:12:3c:f9:e3:9d:dd:8b:ef:f7:8c:f0:81: 5b:9c:32:6c:ba:e0:c7:f2:c9:11:cd:8e:df:14:95: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0D:6C:55:86:AD:80:79:29:4F:6E:58:F6:D7:70:50:31:01:B2:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:63:23:a0:2f:0f:46:9d:a0:e4:cd:47:82:e6:e8:a3:1b:0a: 11:99:5b:3a:5f:5c:b4:66:1b:80:59:58:5c:8e:65:b8:dd:59: 10:58:b3:18:2f:f9:53:53:f0:a3:37:2a:95:fe:f7:d2:21:83: 53:98:a9:84:6a:56:d5:95:94:d6:3d:f3:14:0b:cf:8f:bc:c1: 36:50:17:47:67:94:90:0f:a6:6c:03:78:7f:67:7b:a6:ab:12: 1b:d5:b8:d5:70:29:bf:df:7e:e0:09:61:0c:c6:c6:c8:c7:26: 9b:b6:c8:15:ed:18:58:d2:18:68:94:00:eb:23:2e:36:e4:c6: 29:39:62:37:12:22:16:d5:b4:ca:67:d3:e7:fc:d3:d6:77:00: fa:c7:c6:4d:52:79:d8:a7:df:b3:68:0b:fc:96:1c:67:47:ef: 3a:6a:24:29:69:a3:8d:83:62:91:49:86:c1:7e:64:f8:62:b5: a2:44:07:93:e9:70:30:7b:2f:24:80:c7:b1:c5:85:b4:ce:61: e2:cb:34:c1:3e:82:d1:ed:5e:b7:9a:87:6f:dc:04:f5:42:02: ee:27:69:69:37:04:31:93:70:c6:13:99:3b:d2:2b:26:67:5d: f9:68:ef:40:31:a3:e4:30:2e:8f:1c:e2:5f:92:5a:27:71:89: d6:08:c9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdmgottMH4v9W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDI3YjY5MjYtMzhiZC00ZTBhLThmNDAtMmI3MDU4NWY2NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+A/m8/buuaiOO5JOCoGs5po8ZwqYUXKynFZ T7H2BLd/L4hx0TBT9J3nOO8+K5fLnDs5zh2nlJ+/EHhiqMLHDWT+Jui2R7SWmwhr 8PEQGRCAi4VYzRnlvrFtiQHfPTghDtkHZ2MksTpcaA22+Oyhm6BFTH0OfR72PW53 x+2hYB0Os6Va39dnGeaKlGXuF75bzMVCjWQNAwzEhHUA9mds84w1FxkjVZz7unll LRvRp/z32PJH1fGJ98oaFbyNu9o5dTa8O8i+L7WorSGg3KF9hweOfuWHYnZrAakn 50cvqXRPdtUSPPnjnd2L7/eM8IFbnDJsuuDH8skRzY7fFJWWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8NbFWGrYB5KU9uWPbXcFAxAbKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JhOWVjOTYtMGUyNC0z NTMyLWJiZjAtOTg2YzhlZjIwMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFjI6AvD0adoOTNR4Lm6KMbChGZWzpfXLRmG4BZWFyOZbjdWRBYsxgv +VNT8KM3KpX+99Ihg1OYqYRqVtWVlNY98xQLz4+8wTZQF0dnlJAPpmwDeH9ne6ar EhvVuNVwKb/ffuAJYQzGxsjHJpu2yBXtGFjSGGiUAOsjLjbkxik5YjcSIhbVtMpn 0+f809Z3APrHxk1Sedin37NoC/yWHGdH7zpqJClpo42DYpFJhsF+ZPhitaJEB5Pp cDB7LySAx7HFhbTOYeLLNME+gtHtXreah2/cBPVCAu4naWk3BDGTcMYTmTvSKyZn Xflo70Axo+QwLo8c4l+SWidxidYIyVA= -----END CERTIFICATE-----Generated at Sun Sep 27 01:38:18 2026 by rpki-client