$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58689ecf-b76c-3838-a357-ce037f3b4a37.roa File: 58689ecf-b76c-3838-a357-ce037f3b4a37.roa (raw, json) Hash identifier: 42ztlz9kZmeU0Fh8MrDYtnxTTTQzzC2UoMN4dvRU24c= Subject key identifier: 0A:83:16:72:BF:17:E0:15:4E:18:56:1A:48:D4:56:6F:A3:3E:6E:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD4451D2EFC821CC2B800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58689ecf-b76c-3838-a357-ce037f3b4a37.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.126.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d4:45:1d:2e:fc:82:1c:c2:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2b1f0152-6138-4e64-aa7c-ab966e080056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:88:0d:71:de:4b:cb:ee:42:fe:76:c3:41: 52:87:bd:b8:e6:8d:cb:3b:d7:6e:9e:4e:03:12:90: 1a:c1:f4:b2:ce:96:bf:f6:9e:52:99:c8:1b:1c:a2: bc:cb:8d:7a:94:c3:5f:7c:38:f3:7d:cb:b7:22:08: 18:63:1a:a5:20:3d:03:2f:a4:ca:35:55:5c:40:6e: 14:ad:83:40:5b:11:f2:60:db:0d:ff:b2:86:70:94: de:c9:12:66:6c:58:2b:d7:64:af:09:a0:70:0c:b1: ef:73:ad:2b:db:e7:f7:94:a7:94:4a:fa:1d:07:8d: 5a:40:9f:d4:b2:33:77:b6:98:de:4e:4e:ac:1d:69: 17:cc:b1:d6:a6:41:f3:f0:70:7f:b4:a4:f5:0b:3a: d9:43:78:b2:b1:d0:f5:af:57:c3:89:36:b8:f0:2b: 75:bd:23:f8:e7:80:f0:aa:8e:44:56:02:dd:c1:d7: 5b:49:47:27:49:8e:c1:d5:a8:26:3a:30:d3:d1:e8: 91:15:61:62:0e:f5:f0:f7:96:dd:36:12:99:2a:af: ae:31:37:33:8b:b9:26:b3:ef:86:81:ef:6d:f1:be: e8:22:93:ef:bb:62:08:9a:bf:c5:70:de:2a:94:3e: a6:10:43:ce:a9:de:69:7a:e6:04:fd:9b:04:c1:f3: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:16:72:BF:17:E0:15:4E:18:56:1A:48:D4:56:6F:A3:3E:6E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58689ecf-b76c-3838-a357-ce037f3b4a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.126.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e3:c5:a6:52:42:bd:2b:ef:38:94:c7:57:b1:7e:62:54:df: ec:b3:01:35:ff:1b:c5:a8:e2:93:74:e5:00:7e:f0:b1:a0:f1: a4:4e:bf:b9:06:49:f6:68:aa:b6:fb:68:cb:c8:f7:6b:2b:10: 95:a9:37:1a:2b:ce:b0:2d:10:9d:d1:86:da:14:82:4e:e4:86: 43:36:6d:2f:6b:59:83:54:60:31:2a:b3:6a:32:84:de:12:d0: 15:a9:53:7b:0b:c9:b7:8f:fb:cc:d7:7e:1e:4d:c0:fa:59:0c: 8e:20:12:fa:66:16:e0:2a:9e:1f:2a:8b:04:42:ab:7d:d2:5b: a4:ef:5e:3f:3e:13:40:fa:05:16:ca:4c:24:ae:c0:47:9a:99: 28:f8:3f:ff:dc:09:d5:28:da:57:26:4b:fe:4d:61:26:1f:d3: 74:a2:ff:bb:90:e5:74:79:2d:3e:95:6b:fc:8a:9d:8f:4e:dd: 1b:89:da:6d:a1:6c:aa:8d:31:d9:76:e1:13:08:bc:6d:50:bf: 42:60:b0:88:30:d0:6f:c0:cb:27:71:db:14:e5:be:90:12:57: a1:ac:b8:23:e7:35:34:19:2b:7d:86:75:5c:6d:37:75:93:e3: ad:61:cd:a5:28:e3:6d:6c:a4:55:bf:95:0d:e0:f1:b3:00:c8: 4a:20:46:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdRFHS78ghzCuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmIxZjAxNTItNjEzOC00ZTY0LWFhN2MtYWI5NjZlMDgwMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYaIDXHeS8vuQv52w0FSh7245o3LO9dunk4D EpAawfSyzpa/9p5SmcgbHKK8y416lMNffDjzfcu3IggYYxqlID0DL6TKNVVcQG4U rYNAWxHyYNsN/7KGcJTeyRJmbFgr12SvCaBwDLHvc60r2+f3lKeUSvodB41aQJ/U sjN3tpjeTk6sHWkXzLHWpkHz8HB/tKT1CzrZQ3iysdD1r1fDiTa48Ct1vSP454Dw qo5EVgLdwddbSUcnSY7B1agmOjDT0eiRFWFiDvXw95bdNhKZKq+uMTczi7kms++G ge9t8b7oIpPvu2IImr/FcN4qlD6mEEPOqd5peuYE/ZsEwfPqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqDFnK/F+AVThhWGkjUVm+jPm4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg2ODllY2YtYjc2Yy0z ODM4LWEzNTctY2UwMzdmM2I0YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/jxaZSQr0r7ziUx1exfmJU3+yzATX/G8Wo4pN05QB+8LGg8aROv7kG SfZoqrb7aMvI92srEJWpNxorzrAtEJ3RhtoUgk7khkM2bS9rWYNUYDEqs2oyhN4S 0BWpU3sLybeP+8zXfh5NwPpZDI4gEvpmFuAqnh8qiwRCq33SW6TvXj8+E0D6BRbK TCSuwEeamSj4P//cCdUo2lcmS/5NYSYf03Si/7uQ5XR5LT6Va/yKnY9O3RuJ2m2h bKqNMdl24RMIvG1Qv0JgsIgw0G/Ayydx2xTlvpASV6GsuCPnNTQZK32GdVxtN3WT 461hzaUo421spFW/lQ3g8bMAyEogRsk= -----END CERTIFICATE-----Generated at Tue Sep 29 02:48:03 2026 by rpki-client