$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa File: 4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa (raw, json) Hash identifier: tiLAmw4nTTQ2qSrnoKo+QCCvRe9DO5rkGFA1h/zZ1bM= Subject key identifier: 49:E2:B9:0C:B3:32:26:A3:E1:4C:49:E6:09:55:21:B6:CD:4A:85:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4989930E6AD1287F46503600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.2.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:93:0e:6a:d1:28:7f:46:50:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=63e47e2a-e3a7-481c-9477-0beb8b9736fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:44:d7:df:61:bb:10:50:eb:09:64:a4:3b: 78:98:f0:ac:0f:2b:f5:50:d5:22:2a:63:c8:32:7e: 66:e2:16:d8:b2:2c:f1:6b:e3:b2:6a:1f:4d:6c:bd: 96:7a:c2:93:5d:0e:70:e3:23:0e:52:ed:84:9d:a2: 57:9e:26:18:3e:05:98:71:7e:ed:83:7f:b2:97:73: 0a:e0:48:97:bf:20:56:32:ef:cc:1e:f4:f8:3b:f9: f9:69:f8:ba:52:32:02:96:a2:04:fb:1f:c4:b4:a3: df:53:1b:da:24:55:e5:d1:b6:4a:3e:29:2b:53:18: 2a:84:14:47:79:4e:1f:21:b5:b1:7f:5d:f6:fd:d0: 11:e3:07:7c:2f:04:0e:fe:9d:f4:56:45:5d:cc:8a: 80:22:2f:0d:95:eb:d9:43:6a:c3:45:9b:9d:d6:a8: f3:e0:fc:dc:f7:73:30:a8:43:84:de:92:e4:b2:d3: b1:eb:32:c3:d7:d3:c1:f5:00:8e:cb:78:bd:c7:6a: 99:6e:33:49:e5:68:c3:0f:bb:08:91:ef:86:56:b4: 0f:e0:66:5d:8a:2d:05:e0:79:a1:4e:51:9f:e9:c0: bd:a0:31:e9:f8:8f:29:5a:de:b0:54:b5:b3:30:10: cf:8f:57:aa:56:67:63:d9:62:b0:d1:e4:81:b1:25: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E2:B9:0C:B3:32:26:A3:E1:4C:49:E6:09:55:21:B6:CD:4A:85:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1c:4f:53:28:c7:7c:35:50:de:e8:05:51:b0:9d:69:80:8e: ab:4f:7b:ff:8c:ef:f3:65:fe:f8:b8:e4:9f:8c:38:bb:20:f2: 2f:8c:fa:50:cb:33:dc:03:19:24:aa:7b:98:85:4b:4d:e7:40: a1:18:4f:11:22:b6:2a:a1:aa:eb:30:04:92:8c:3a:3f:36:23: 78:a9:cd:2d:1e:60:4b:30:f1:3d:0b:85:5e:7e:28:ce:db:66: 75:55:27:fd:c9:72:b2:c4:05:39:5b:b2:1b:b4:e0:23:b7:61: 8e:5d:96:95:99:b3:57:e1:53:6e:5c:f1:b6:25:11:4c:8f:b5: 3c:fd:c7:a9:5b:94:7c:57:50:1a:fe:6d:1d:80:84:2b:19:55: 46:bf:42:87:30:c8:80:04:3f:86:32:22:c7:74:b7:43:c6:ce: ab:3a:ed:5b:57:66:87:b7:58:fb:d5:55:de:4b:bb:8a:29:23: 9f:05:42:4e:31:95:a4:f8:f1:e3:b3:68:df:63:c8:b9:8a:0b: f8:a8:36:bb:72:89:70:e3:d2:72:4c:5a:a2:0b:48:ac:01:2c: 9c:72:c4:a3:f7:69:c3:79:51:38:f6:43:e0:b7:19:4a:fd:03: 6a:8b:31:96:6d:c2:d6:88:92:c6:1e:17:36:d0:2b:a7:57:c5: f2:3d:0a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZMOatEof0ZQNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjNlNDdlMmEtZTNhNy00ODFjLTk0NzctMGJlYjhiOTczNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR5E199huxBQ6wlkpDt4mPCsDyv1UNUiKmPI Mn5m4hbYsizxa+Oyah9NbL2WesKTXQ5w4yMOUu2EnaJXniYYPgWYcX7tg3+yl3MK 4EiXvyBWMu/MHvT4O/n5afi6UjIClqIE+x/EtKPfUxvaJFXl0bZKPikrUxgqhBRH eU4fIbWxf132/dAR4wd8LwQO/p30VkVdzIqAIi8NlevZQ2rDRZud1qjz4Pzc93Mw qEOE3pLkstOx6zLD19PB9QCOy3i9x2qZbjNJ5WjDD7sIke+GVrQP4GZdii0F4Hmh TlGf6cC9oDHp+I8pWt6wVLWzMBDPj1eqVmdj2WKw0eSBsSUuPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEniuQyzMiaj4UxJ5glVIbbNSoUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGVhY2QxZDYtMWIwYi0z YWE4LTg4OGYtYWE4MGQ1M2ZhZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIscT1Mox3w1UN7oBVGwnWmAjqtPe/+M7/Nl/vi45J+MOLsg8i+M+lDL M9wDGSSqe5iFS03nQKEYTxEitiqhquswBJKMOj82I3ipzS0eYEsw8T0LhV5+KM7b ZnVVJ/3JcrLEBTlbshu04CO3YY5dlpWZs1fhU25c8bYlEUyPtTz9x6lblHxXUBr+ bR2AhCsZVUa/QocwyIAEP4YyIsd0t0PGzqs67VtXZoe3WPvVVd5Lu4opI58FQk4x laT48eOzaN9jyLmKC/ioNrtyiXDj0nJMWqILSKwBLJxyxKP3acN5UTj2Q+C3GUr9 A2qLMZZtwtaIksYeFzbQK6dXxfI9CqE= -----END CERTIFICATE-----Generated at Sat Sep 26 18:55:36 2026 by rpki-client