$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa File: 5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa (raw, json) Hash identifier: tHQvG5OPFMUNOOy05yNHzLdeuSQ4RyeXdxPHeUkWG68= Subject key identifier: 24:13:E0:AF:B2:5D:CC:64:0B:E8:C3:83:57:F9:9E:D7:D6:88:50:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA14757440AEAD3218B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.84.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a1:47:57:44:0a:ea:d3:21:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1e416e56-43e3-4d7b-91f2-bd093952f3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:23:d2:3b:93:87:f9:7e:94:fa:21:4e:13:66: 8e:b2:14:1f:41:23:e7:e3:56:9e:81:4a:2b:7a:69: 32:f7:c8:90:ef:26:d4:c7:92:22:e0:d9:37:09:0f: 4f:f1:b3:31:c7:dc:39:2e:a7:e4:52:b4:11:62:42: 1b:8b:d6:06:59:a7:08:b6:70:ae:db:89:e7:9b:5c: 94:23:97:f1:54:97:37:02:31:66:97:ed:f8:8e:6c: 05:0a:bf:04:44:a6:10:b3:4d:95:86:2c:8c:bf:c3: b4:8c:80:80:3d:7a:4d:a6:5a:d2:da:a3:fb:22:e4: 1d:d7:8f:61:f8:b3:3f:d6:f3:9a:62:c9:36:4d:b9: ae:54:24:51:c1:8c:bf:29:af:91:ef:e2:99:8a:46: 8b:26:0b:ca:8c:01:ef:c7:c0:2d:66:55:7a:78:52: db:f5:7c:54:97:db:62:fa:f9:07:b3:59:e9:7e:5a: e6:8b:0c:26:15:76:21:d9:a0:c1:fd:e6:c8:cb:57: 1b:54:b5:1d:ec:ae:91:29:45:fb:e8:6d:71:43:3c: 24:a5:a0:44:65:a3:bc:5a:57:53:79:1f:99:ac:f6: 71:4d:7e:f4:83:44:84:86:f9:fe:62:8f:33:73:7f: 51:7c:1c:00:dd:b1:26:ca:42:45:3b:51:ce:f8:d6: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:13:E0:AF:B2:5D:CC:64:0B:E8:C3:83:57:F9:9E:D7:D6:88:50:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fff4cb6-5851-357d-ba9d-d80a38f4b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ce:58:e0:96:5c:f4:72:7f:eb:9f:00:62:ad:ff:3c:6e:1d: be:75:99:a3:d2:f4:dd:ac:1b:51:a9:a1:4d:18:38:db:ef:d5: d5:a1:d2:d6:60:0d:06:a8:3b:56:bd:0c:c5:f1:88:94:69:ad: 0b:7d:d6:bd:a2:e0:d0:e8:88:67:aa:6b:e0:59:1a:59:35:5c: fb:e8:e2:39:b1:0a:73:a8:4d:8e:b8:be:d4:a1:1f:b7:d5:a8: 6e:00:15:5f:a6:68:db:aa:05:9a:28:7a:72:f6:0a:09:34:bf: af:99:a7:8a:17:bb:c2:d2:19:06:15:66:10:1d:5d:61:99:0f: 3d:87:be:6c:9b:1a:29:24:66:50:98:43:48:51:84:ba:b2:ad: 16:3d:71:12:e1:72:64:bf:ee:62:5d:38:f8:3a:74:01:b4:92: 17:76:22:90:2e:6f:e3:99:fe:99:37:3a:f7:0b:11:dd:27:01: f7:c1:1c:15:44:16:83:04:74:11:df:54:45:b5:ef:09:c3:f7: 54:9e:5d:27:1a:fd:28:92:bd:e4:b8:33:9e:12:ea:1d:78:67: 50:30:ef:b7:6b:64:df:83:3b:ea:61:72:23:a9:04:fc:a7:9f: 3c:9b:b6:38:94:cc:29:e5:20:f7:91:42:12:0c:36:69:2b:87: ce:60:25:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaFHV0QK6tMhi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWU0MTZlNTYtNDNlMy00ZDdiLTkxZjItYmQwOTM5NTJmM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iPSO5OH+X6U+iFOE2aOshQfQSPn41aegUor emky98iQ7ybUx5Ii4Nk3CQ9P8bMxx9w5LqfkUrQRYkIbi9YGWacItnCu24nnm1yU I5fxVJc3AjFml+34jmwFCr8ERKYQs02VhiyMv8O0jICAPXpNplrS2qP7IuQd149h +LM/1vOaYsk2TbmuVCRRwYy/Ka+R7+KZikaLJgvKjAHvx8AtZlV6eFLb9XxUl9ti +vkHs1npflrmiwwmFXYh2aDB/ebIy1cbVLUd7K6RKUX76G1xQzwkpaBEZaO8WldT eR+ZrPZxTX70g0SEhvn+Yo8zc39RfBwA3bEmykJFO1HO+NawUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQT4K+yXcxkC+jDg1f5ntfWiFDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZmZjRjYjYtNTg1MS0z NTdkLWJhOWQtZDgwYTM4ZjRiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADOWOCWXPRyf+ufAGKt/zxuHb51maPS9N2sG1GpoU0YONvv1dWh0tZg DQaoO1a9DMXxiJRprQt91r2i4NDoiGeqa+BZGlk1XPvo4jmxCnOoTY64vtShH7fV qG4AFV+maNuqBZooenL2Cgk0v6+Zp4oXu8LSGQYVZhAdXWGZDz2HvmybGikkZlCY Q0hRhLqyrRY9cRLhcmS/7mJdOPg6dAG0khd2IpAub+OZ/pk3OvcLEd0nAffBHBVE FoMEdBHfVEW17wnD91SeXSca/SiSveS4M54S6h14Z1Aw77drZN+DO+phciOpBPyn nzybtjiUzCnlIPeRQhIMNmkrh85gJek= -----END CERTIFICATE-----Generated at Mon Sep 28 21:40:55 2026 by rpki-client