$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa File: 5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa (raw, json) Hash identifier: 9YHHlS3f5I/ubgMDaUKzz80EPmj5lgppwrFl0o8aNRg= Subject key identifier: 1C:5C:1A:8B:07:B3:6A:20:B7:24:E7:C4:63:81:8F:54:6A:B5:74:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA61CF0018B0E12638A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.68.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a6:1c:f0:01:8b:0e:12:63:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b44b6ced-a168-41b8-badc-6cb29dfe622e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:f3:7b:0d:9a:f3:dd:f2:77:9c:65:d6:5a: 5b:70:d6:84:7b:75:d1:63:71:a8:65:54:66:69:bf: 4e:83:e9:3d:aa:c1:67:de:87:f0:f0:54:ee:53:77: a5:4d:14:ac:55:83:3b:19:c3:88:2a:65:20:99:50: fc:39:39:c0:70:48:1e:23:3c:01:ba:5f:f9:51:03: 13:0c:a1:30:03:a0:c5:9c:aa:0d:8c:70:cb:44:39: 38:48:db:07:cf:f7:fb:5e:9d:84:5f:b0:3f:3c:1d: c3:6e:7c:b2:bb:dd:54:59:56:e0:cb:52:58:d4:b2: 25:85:d9:95:18:4f:3a:5f:e2:43:1a:67:f5:00:76: 46:1e:5c:21:70:d8:e4:5e:48:a5:3e:53:40:0c:a3: 7f:dd:36:56:c4:a0:90:46:4c:1e:fc:d0:34:b0:cc: 6d:d7:95:6d:3c:46:ba:e3:92:23:e1:25:c3:fc:a8: a9:6f:3c:57:1a:0c:4a:e6:90:b4:a1:24:cb:75:fa: e9:a1:6c:2f:66:12:35:32:60:b8:53:d3:59:ba:96: 12:6d:13:1d:03:82:c7:95:f1:96:30:89:c7:16:1e: ab:21:f1:8c:5a:b5:ca:20:f1:de:a5:07:8f:f2:92: 1a:21:0d:39:75:77:44:54:0b:36:12:57:98:13:60: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5C:1A:8B:07:B3:6A:20:B7:24:E7:C4:63:81:8F:54:6A:B5:74:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:30:1b:97:8c:94:c7:88:86:69:6e:06:a5:bf:e1:d3:81:0f: 6c:f3:a1:bb:2c:35:18:7a:40:30:89:eb:cb:57:33:7a:bf:ab: 78:61:e3:ae:3d:a8:e7:46:7e:7e:f5:48:a5:c7:46:34:29:49: 38:90:8c:36:91:aa:00:62:67:73:04:21:eb:ec:86:b2:f3:5d: 38:df:36:e8:19:b0:50:0f:14:34:2a:5b:42:11:b2:28:58:91: c9:9a:a9:b3:48:17:33:48:48:7e:dc:5e:1f:dd:80:75:fc:bf: a2:e9:0e:2d:ef:30:4f:cb:53:a3:53:d2:02:30:96:06:ef:3e: 62:d3:84:20:e3:0c:e2:ac:67:1b:e6:05:b4:86:91:62:5a:87: 5b:14:3f:25:bc:00:55:be:b7:43:7f:c4:b2:c4:83:27:69:7a: b7:69:ea:46:b8:13:59:55:8f:32:05:bf:70:84:fb:9a:cf:f7: b7:87:e8:b3:43:a3:1d:85:26:f2:85:49:0a:13:dd:21:c7:15: e7:cd:49:dd:1d:db:1b:00:da:fb:c7:bd:62:35:46:ca:eb:b2: 5b:75:ab:de:80:91:be:67:3c:2f:71:a1:ed:b5:fb:f6:32:3c: df:ca:cd:f1:d7:55:ca:61:31:6f:e0:94:3d:84:f1:c8:2c:f5: 61:55:12:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaYc8AGLDhJjikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjQ0YjZjZWQtYTE2OC00MWI4LWJhZGMtNmNiMjlkZmU2MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyczzew2a893yd5xl1lpbcNaEe3XRY3GoZVRm ab9Og+k9qsFn3ofw8FTuU3elTRSsVYM7GcOIKmUgmVD8OTnAcEgeIzwBul/5UQMT DKEwA6DFnKoNjHDLRDk4SNsHz/f7Xp2EX7A/PB3Dbnyyu91UWVbgy1JY1LIlhdmV GE86X+JDGmf1AHZGHlwhcNjkXkilPlNADKN/3TZWxKCQRkwe/NA0sMxt15VtPEa6 45Ij4SXD/KipbzxXGgxK5pC0oSTLdfrpoWwvZhI1MmC4U9NZupYSbRMdA4LHlfGW MInHFh6rIfGMWrXKIPHepQeP8pIaIQ05dXdEVAs2EleYE2BP4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxcGosHs2ogtyTnxGOBj1RqtXTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmYTk3MGItYTUwZS0z Yjk4LWFmMzYtN2E0ODQ1NGNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQwG5eMlMeIhmluBqW/4dOBD2zzobssNRh6QDCJ68tXM3q/q3hh4649 qOdGfn71SKXHRjQpSTiQjDaRqgBiZ3MEIevshrLzXTjfNugZsFAPFDQqW0IRsihY kcmaqbNIFzNISH7cXh/dgHX8v6LpDi3vME/LU6NT0gIwlgbvPmLThCDjDOKsZxvm BbSGkWJah1sUPyW8AFW+t0N/xLLEgydperdp6ka4E1lVjzIFv3CE+5rP97eH6LND ox2FJvKFSQoT3SHHFefNSd0d2xsA2vvHvWI1Rsrrslt1q96Akb5nPC9xoe21+/Yy PN/KzfHXVcphMW/glD2E8cgs9WFVEv4= -----END CERTIFICATE-----Generated at Tue Oct 6 15:44:35 2026 by rpki-client