$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa File: 890641f9-0aae-3a09-b375-d5faed4942f2.roa (raw, json) Hash identifier: 2OPLPiPTJ1drb4YMY1OyTic4tjzQyaMDkPuQc7kUNWo= Subject key identifier: C3:A7:43:1B:52:54:85:0B:C1:49:D4:F6:81:7E:F5:C9:66:3A:3A:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8280F38F64CC12247B08 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.64.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:82:80:f3:8f:64:cc:12:24:7b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0049e3fd-b31b-479e-8803-651c8752e6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:ab:57:62:fb:e4:76:3c:d5:e8:3a:23:de: 1f:1c:02:7e:22:36:1d:8a:60:78:89:ad:70:82:4d: 5c:42:14:13:d9:25:92:48:e9:4e:08:1a:da:fd:90: a5:fa:68:aa:fc:e1:db:0a:b9:73:1d:af:65:34:2b: ef:49:67:18:0a:d5:b1:70:d7:96:c1:b1:e5:be:a8: f4:a1:f4:b2:66:b7:d8:ff:1e:ca:77:1d:00:7c:ca: a0:90:b6:28:9c:88:95:de:a8:5b:67:fe:c8:b5:dc: 35:52:1f:a5:0d:39:9e:16:7c:73:b4:79:cf:6d:67: 66:16:a2:7d:db:6f:13:f9:46:86:6c:5a:89:dc:ca: 73:bb:7e:4a:a6:5d:f5:62:4d:1a:87:c0:d5:9d:85: c6:0c:57:71:e5:11:5e:10:63:f1:93:94:7a:21:66: fb:57:25:73:90:ed:c9:65:19:21:7f:bf:c8:0a:1a: 7a:86:4e:47:f5:3c:e9:6b:f7:75:05:8c:35:5b:5a: f5:60:c4:28:89:c3:fb:b6:b8:29:6e:35:0e:ec:94: 7d:3e:45:0f:cd:30:dd:cd:96:d1:38:e8:59:c3:d1: b6:2e:0a:3e:86:a6:6b:37:ad:ff:a7:1f:cf:85:d4: b5:bc:99:22:ba:a2:1e:f0:f3:76:67:27:b5:85:fa: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A7:43:1B:52:54:85:0B:C1:49:D4:F6:81:7E:F5:C9:66:3A:3A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:13:41:6c:14:d3:b1:1e:ec:d7:dd:d2:61:f0:ba:7b:9f:a7: 0f:59:70:d8:91:ad:38:c6:bd:a7:91:76:e1:3b:bc:a0:fc:77: 2d:05:6b:87:37:c1:7a:07:27:c5:37:d0:ab:d0:a0:81:b8:78: 30:c5:49:1f:5f:2c:51:e3:58:31:03:ed:91:0b:d1:5e:0a:64: d6:99:fa:6b:eb:20:6a:c5:e7:d0:25:8c:7f:50:24:a9:03:f6: 48:04:4d:3b:af:ac:29:b6:f2:9a:96:08:c5:6a:e6:ba:c7:5d: 73:8e:8a:34:c8:21:33:fd:78:41:ed:d7:fa:6c:a5:18:62:ae: 1d:da:44:44:b0:f8:82:65:3c:19:d4:d2:1c:bd:ac:9c:b0:0b: aa:a1:fe:79:85:f2:81:4b:fc:42:85:ab:9d:11:d3:d9:4a:55: 2d:e8:db:9a:f0:00:8d:16:3a:5c:02:8e:e7:1f:34:bf:ff:6f: 36:e7:a0:54:b3:93:41:28:af:46:29:4b:98:3b:88:62:62:e3: 20:cd:36:8f:0c:17:c2:f8:80:f1:3e:49:4f:eb:cc:4c:a9:30: c7:c8:dc:0c:4f:aa:5e:b4:d4:61:fe:0d:14:38:7e:95:79:96: 40:b7:3e:a9:63:02:0c:3a:ce:97:1d:4b:88:0c:18:b0:6c:72: 3d:32:32:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYKA849kzBIkewgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDA0OWUzZmQtYjMxYi00NzllLTg4MDMtNjUxYzg3NTJlNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/erV2L75HY81eg6I94fHAJ+IjYdimB4ia1w gk1cQhQT2SWSSOlOCBra/ZCl+miq/OHbCrlzHa9lNCvvSWcYCtWxcNeWwbHlvqj0 ofSyZrfY/x7Kdx0AfMqgkLYonIiV3qhbZ/7Itdw1Uh+lDTmeFnxztHnPbWdmFqJ9 228T+UaGbFqJ3Mpzu35Kpl31Yk0ah8DVnYXGDFdx5RFeEGPxk5R6IWb7VyVzkO3J ZRkhf7/IChp6hk5H9Tzpa/d1BYw1W1r1YMQoicP7trgpbjUO7JR9PkUPzTDdzZbR OOhZw9G2Lgo+hqZrN63/px/PhdS1vJkiuqIe8PN2Zye1hfpw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOnQxtSVIULwUnU9oF+9clmOjojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODkwNjQxZjktMGFhZS0z YTA5LWIzNzUtZDVmYWVkNDk0MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEATQWwU07Ee7Nfd0mHwunufpw9ZcNiRrTjGvaeRduE7vKD8dy0Fa4c3 wXoHJ8U30KvQoIG4eDDFSR9fLFHjWDED7ZEL0V4KZNaZ+mvrIGrF59AljH9QJKkD 9kgETTuvrCm28pqWCMVq5rrHXXOOijTIITP9eEHt1/pspRhirh3aRESw+IJlPBnU 0hy9rJywC6qh/nmF8oFL/EKFq50R09lKVS3o25rwAI0WOlwCjucfNL//bzbnoFSz k0Eor0YpS5g7iGJi4yDNNo8MF8L4gPE+SU/rzEypMMfI3AxPql601GH+DRQ4fpV5 lkC3PqljAgw6zpcdS4gMGLBscj0yMlM= -----END CERTIFICATE-----Generated at Sat Sep 26 15:49:13 2026 by rpki-client