$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cfadbc4-f3f4-370d-8792-51ca40359e97.roa File: 8cfadbc4-f3f4-370d-8792-51ca40359e97.roa (raw, json) Hash identifier: +IXxmO1sVdcxFUvpKsFsVkI0HKM38N0SQKz7/I01S04= Subject key identifier: 17:A7:73:E9:E5:EE:14:CF:E3:7E:3B:F7:18:AF:44:FD:9C:94:A7:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8059ADDED0392B929380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cfadbc4-f3f4-370d-8792-51ca40359e97.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.123.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:80:59:ad:de:d0:39:2b:92:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c69b9394-9d74-44f3-a340-f789d55d4596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1f:3a:8c:f4:2c:54:ae:53:c9:cf:43:0a:d0: f4:1e:e9:ba:1b:b9:8b:fd:17:81:5d:f9:a2:ec:f6: 05:3d:2f:a9:89:60:2d:a9:d1:8a:1b:f2:1d:59:fb: 36:52:17:7b:cb:c6:d3:c0:85:81:65:d8:6b:6c:22: 9a:7d:a1:77:a9:04:a9:2a:85:3f:1e:3a:22:74:29: 09:1e:bb:48:ad:1c:44:38:c2:f5:00:ce:bd:a9:4c: 97:f4:38:76:98:a3:86:93:8b:c9:05:ad:c8:2d:53: af:d1:66:13:9a:73:44:f4:ff:dc:22:f9:56:f7:ed: 17:36:68:1f:6c:3d:78:c0:03:d7:95:23:50:81:65: b0:e6:98:49:a7:ac:7b:da:7e:9b:9e:06:8c:74:7f: a3:91:7d:1f:57:68:c2:41:ca:57:8d:0e:96:33:23: 63:fa:88:66:a4:dc:8f:6d:45:c6:8e:30:b1:ed:5d: 41:ad:eb:c3:0a:2f:c7:25:d8:47:34:5f:b8:66:9c: be:6e:13:85:f2:3f:cf:6d:fc:a3:f9:7f:7b:f9:22: 42:b8:8b:4f:cd:8e:40:fc:c2:4e:05:12:b2:a0:14: 84:f9:b6:6e:4b:45:fa:62:77:27:d2:79:4c:db:40: 3d:5f:bb:55:04:4a:a6:0b:da:85:ee:9b:78:15:f1: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:73:E9:E5:EE:14:CF:E3:7E:3B:F7:18:AF:44:FD:9C:94:A7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cfadbc4-f3f4-370d-8792-51ca40359e97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:99:1d:3d:d7:d7:4e:59:b7:fc:03:ff:12:5e:87:5d:b0:46: 0d:90:8c:9a:57:6b:5a:33:36:c5:65:b6:f7:94:4a:77:c7:f6: 7a:9a:7f:d0:c6:9f:9d:e4:6f:f4:10:9f:99:65:6b:a0:c0:bc: 8f:34:c0:ce:d5:88:dc:c8:66:12:40:fd:3a:b7:59:f3:3d:77: f4:77:08:c8:a7:2a:e3:00:0a:89:84:c6:8d:14:2b:37:5f:4b: 09:a4:8a:5a:9d:0e:40:bf:e0:8b:23:31:06:c7:b1:c1:a8:ad: ef:e3:20:26:49:82:70:40:93:2a:dc:43:9b:1e:ed:42:80:2c: fa:17:a9:7d:84:76:d9:0c:d8:a7:b6:17:45:70:36:c4:ca:88: ee:21:2e:06:ad:e2:03:ca:5d:96:7d:69:d8:b8:c3:2b:dc:dc: ac:0d:e3:cb:a5:1c:28:3a:05:fc:45:c4:ca:06:73:e9:d3:f2: 45:31:23:58:ce:d2:03:bf:63:0d:e6:b6:e9:ca:da:65:40:5d: bc:53:a3:b4:0f:ab:93:ba:0c:30:58:68:37:55:b3:7c:d0:32: cb:e2:0c:ae:8b:61:20:a5:dc:0c:af:35:28:ae:33:80:e8:0c: 88:6b:18:e0:54:34:6a:0f:c5:55:ea:ea:ce:db:e4:28:8b:55: 14:1a:cf:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYBZrd7QOSuSk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzY5YjkzOTQtOWQ3NC00NGYzLWEzNDAtZjc4OWQ1NWQ0NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB86jPQsVK5Tyc9DCtD0Hum6G7mL/ReBXfmi 7PYFPS+piWAtqdGKG/IdWfs2Uhd7y8bTwIWBZdhrbCKafaF3qQSpKoU/HjoidCkJ HrtIrRxEOML1AM69qUyX9Dh2mKOGk4vJBa3ILVOv0WYTmnNE9P/cIvlW9+0XNmgf bD14wAPXlSNQgWWw5phJp6x72n6bngaMdH+jkX0fV2jCQcpXjQ6WMyNj+ohmpNyP bUXGjjCx7V1BrevDCi/HJdhHNF+4Zpy+bhOF8j/Pbfyj+X97+SJCuItPzY5A/MJO BRKyoBSE+bZuS0X6Yncn0nlM20A9X7tVBEqmC9qF7pt4FfHuewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBenc+nl7hTP43479xivRP2clKeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGNmYWRiYzQtZjNmNC0z NzBkLTg3OTItNTFjYTQwMzU5ZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiZHT3X105Zt/wD/xJeh12wRg2QjJpXa1ozNsVltveUSnfH9nqaf9DG n53kb/QQn5lla6DAvI80wM7ViNzIZhJA/Tq3WfM9d/R3CMinKuMAComExo0UKzdf SwmkilqdDkC/4IsjMQbHscGore/jICZJgnBAkyrcQ5se7UKALPoXqX2EdtkM2Ke2 F0VwNsTKiO4hLgat4gPKXZZ9adi4wyvc3KwN48ulHCg6BfxFxMoGc+nT8kUxI1jO 0gO/Yw3mtunK2mVAXbxTo7QPq5O6DDBYaDdVs3zQMsviDK6LYSCl3AyvNSiuM4Do DIhrGOBUNGoPxVXq6s7b5CiLVRQaz9s= -----END CERTIFICATE-----Generated at Mon Sep 28 10:33:30 2026 by rpki-client