$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa File: 60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa (raw, json) Hash identifier: BE4niuEIJkjjaLHXAFFp+Id53LUoWeFniB8jFeV8wVM= Subject key identifier: F4:B8:C7:4C:69:2A:F9:C1:5A:A2:B6:6E:BA:3A:BB:73:B3:B0:C3:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497480C011F94FCF5AE78800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:80:c0:11:f9:4f:cf:5a:e7:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f5c12a9-1e5a-4c59-ba56-19c770e40267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:77:8f:65:fe:a7:8e:ff:49:95:a8:d5:82: 1a:41:11:96:af:0d:d8:ca:1f:10:96:78:9c:88:ae: bf:e9:ad:da:7c:07:56:2d:07:9d:bf:90:23:aa:bb: 3b:fc:6f:0e:c4:92:a4:4f:d2:80:4f:76:60:52:87: 76:7a:90:0e:45:8c:15:61:58:dd:c9:da:33:20:03: fa:79:54:1d:1b:b0:e4:8a:73:ab:b7:3b:7c:f4:9d: 8b:e9:02:d3:85:1c:5d:16:c8:15:98:6b:dc:ae:52: ce:34:92:0a:f0:ca:23:0c:4c:77:b4:a1:2f:9b:c4: 6b:ed:2c:05:b2:80:d7:39:50:ab:6b:d4:b3:6a:f7: cd:3e:e4:11:c0:a8:60:ca:1b:76:2e:03:0e:d4:54: 0b:9c:50:76:ad:81:f1:61:ac:7a:90:f4:24:c7:77: 30:4d:27:13:2e:bc:93:95:63:46:20:a2:10:3b:31: 3e:03:05:ad:a4:08:ec:00:8d:b2:cd:8f:0b:ad:ae: 66:cc:55:32:ac:f1:04:c4:a9:ab:ab:78:96:85:54: 74:89:e8:b6:2d:d6:97:2a:99:54:7d:bb:1a:c3:16: 6a:30:97:b9:67:64:90:d2:0a:1f:da:a2:9a:db:3e: be:f4:6a:ad:88:d8:e7:8b:69:51:82:9a:87:ef:05: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B8:C7:4C:69:2A:F9:C1:5A:A2:B6:6E:BA:3A:BB:73:B3:B0:C3:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3d:04:4b:53:8c:98:f8:f1:8f:1e:99:2d:1e:fa:5f:8c:3e: 6d:7b:01:27:05:3e:d4:34:88:ba:37:48:9d:4c:23:00:2a:ee: bd:64:dd:13:23:a9:d6:a7:78:50:75:3c:8a:db:00:a2:b6:c6: 29:0f:3a:1b:c5:b9:d6:65:9f:b4:e0:64:21:1a:b7:f6:fc:83: 04:be:ff:d0:1a:3f:02:b2:88:c3:a0:a1:34:45:7d:15:06:85: 11:2d:66:a2:bd:2c:8c:aa:49:dd:51:1b:58:5d:e1:0e:ff:66: 82:30:80:64:f5:dc:d3:98:ae:b0:5d:59:1c:13:44:e0:97:4d: 14:4c:ee:b2:07:f0:f9:20:7b:8d:c0:6e:d5:56:06:a9:f1:ac: b7:a1:c2:9d:d6:97:17:35:02:0b:fd:65:a9:11:d2:8c:46:44: 11:27:8e:3d:49:02:3c:42:8c:f0:36:6f:2e:af:f9:a3:92:47: b9:cc:58:ba:10:de:da:63:7d:6f:f4:65:be:a5:af:57:0b:6f: 23:bf:da:c0:84:0b:26:9a:4e:8f:b6:3e:3f:be:ff:09:f1:d9: 92:38:9b:d5:8e:fc:4d:95:bc:12:27:e2:c8:64:b7:ef:a2:3d: 2c:fb:43:55:08:87:be:f0:45:89:79:7f:4b:79:08:f4:8d:11: 30:fc:84:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIDAEflPz1rniAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y1YzEyYTktMWU1YS00YzU5LWJhNTYtMTljNzcwZTQwMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksl3j2X+p47/SZWo1YIaQRGWrw3Yyh8Qlnic iK6/6a3afAdWLQedv5Ajqrs7/G8OxJKkT9KAT3ZgUod2epAORYwVYVjdydozIAP6 eVQdG7DkinOrtzt89J2L6QLThRxdFsgVmGvcrlLONJIK8MojDEx3tKEvm8Rr7SwF soDXOVCra9SzavfNPuQRwKhgyht2LgMO1FQLnFB2rYHxYax6kPQkx3cwTScTLryT lWNGIKIQOzE+AwWtpAjsAI2yzY8Lra5mzFUyrPEExKmrq3iWhVR0iei2LdaXKplU fbsawxZqMJe5Z2SQ0gof2qKa2z6+9GqtiNjni2lRgpqH7wXn+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS4x0xpKvnBWqK2bro6u3OzsMNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjBkYjdhNDAtYzVjOS0z MDI0LTk2M2UtYWM1ZDY0ZWE0ZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF49BEtTjJj48Y8emS0e+l+MPm17AScFPtQ0iLo3SJ1MIwAq7r1k3RMj qdaneFB1PIrbAKK2xikPOhvFudZln7TgZCEat/b8gwS+/9AaPwKyiMOgoTRFfRUG hREtZqK9LIyqSd1RG1hd4Q7/ZoIwgGT13NOYrrBdWRwTROCXTRRM7rIH8Pkge43A btVWBqnxrLehwp3Wlxc1Agv9ZakR0oxGRBEnjj1JAjxCjPA2by6v+aOSR7nMWLoQ 3tpjfW/0Zb6lr1cLbyO/2sCECyaaTo+2Pj++/wnx2ZI4m9WO/E2VvBIn4shkt++i PSz7Q1UIh77wRYl5f0t5CPSNETD8hIo= -----END CERTIFICATE-----Generated at Sat Sep 26 04:30:44 2026 by rpki-client