$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb85719-2ef4-3289-aa50-3faceec2bede.roa File: 8eb85719-2ef4-3289-aa50-3faceec2bede.roa (raw, json) Hash identifier: 9DOahMcC3TALxprzNVMov+wW/eV51Gx72CESSPQXW1U= Subject key identifier: FE:83:1C:47:F0:FB:3D:51:B4:9B:25:64:50:28:5C:6C:BE:3D:89:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBB2150C83190EE3EE580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb85719-2ef4-3289-aa50-3faceec2bede.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.86.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bb:21:50:c8:31:90:ee:3e:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3674277f-fbc8-4500-8d7c-fa8c6b2d26c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:28:4f:0f:cc:09:c1:60:78:b3:5a:81:56: 3f:7c:c2:d4:f5:81:a3:90:34:4e:4d:2f:1d:40:06: 18:52:42:17:4d:15:80:75:74:c2:20:77:e8:80:21: dd:31:5f:ab:35:16:23:2b:cb:54:33:34:5b:f9:53: 4f:f5:e3:b3:9e:68:9e:93:6b:c4:6a:7a:4e:fd:43: de:1d:8c:38:95:ec:64:1a:64:76:74:23:b6:0b:52: 8b:d4:1c:2b:8c:57:98:be:a8:b8:dd:cd:17:18:08: 88:40:53:87:52:a7:1a:8b:ac:b6:9f:dc:d5:77:da: e3:c6:3d:b9:29:07:a2:75:72:0b:a2:df:4a:e6:cf: cd:1c:2c:09:6f:2b:c4:c7:b1:9a:e8:7d:e4:15:4d: 77:e4:c5:27:89:a3:34:83:54:39:1b:7a:0c:7e:7a: a3:81:3c:76:b9:6b:6b:86:1d:02:99:28:cb:75:98: 55:bc:d4:be:09:12:4d:05:6e:70:17:f9:c4:01:83: bc:76:90:f2:4f:21:a7:0a:cd:bf:33:f0:e4:0a:e0: d9:e8:d5:2b:f5:1a:52:94:d8:65:b3:6a:9c:b2:d6: c4:62:e1:d0:24:d4:cc:3f:bc:3a:6c:1d:ae:90:aa: dd:c3:bb:a7:6b:50:59:be:07:5a:e6:1b:90:47:df: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:1C:47:F0:FB:3D:51:B4:9B:25:64:50:28:5C:6C:BE:3D:89:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb85719-2ef4-3289-aa50-3faceec2bede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d6:9e:4c:76:7e:f9:a1:ca:2c:a0:6e:73:cc:a0:ab:fe:c5: dc:8f:1c:09:fa:c3:cd:09:f8:a1:f8:07:e6:63:9f:19:9c:c8: de:8b:42:ac:e6:12:ca:d8:2d:7b:93:12:66:36:f5:0a:3a:e7: d1:09:6f:a0:3c:92:22:f1:fc:28:68:3c:25:ce:e2:7a:73:58: c5:1d:22:cc:8d:66:6a:b4:8e:0e:1b:3d:1e:5d:d4:26:d5:3d: 8b:9b:7f:fa:0b:1d:ed:83:c0:f6:b3:d7:a7:e0:ec:63:d0:06: a2:92:32:0e:c3:61:f0:f4:72:0d:8d:0a:20:39:35:ad:e0:6b: a0:51:c0:40:bd:a5:8a:59:70:8f:46:5e:aa:5d:5f:d9:0e:c7: 37:44:cc:1f:7d:84:e3:c9:ba:40:f0:30:ef:fe:8a:ea:a4:2e: 10:4c:5b:8f:53:5b:e0:6a:2a:9b:c0:f6:d6:e3:a5:b3:dd:66: 6d:8f:9d:6b:0b:73:eb:d9:85:8d:e1:60:a6:de:6e:83:2f:28: bf:3c:b5:c5:98:20:c6:c4:ac:60:a2:ac:c6:3b:f2:94:90:c3: 7e:38:58:17:05:7e:8d:c5:86:94:84:4b:27:59:cc:c0:8a:79: ea:4b:3e:0c:9f:ba:18:9c:eb:8b:48:07:f0:f4:90:53:2f:4f: 16:83:bb:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbshUMgxkO4+5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzY3NDI3N2YtZmJjOC00NTAwLThkN2MtZmE4YzZiMmQyNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigUoTw/MCcFgeLNagVY/fMLU9YGjkDROTS8d QAYYUkIXTRWAdXTCIHfogCHdMV+rNRYjK8tUMzRb+VNP9eOznmiek2vEanpO/UPe HYw4lexkGmR2dCO2C1KL1BwrjFeYvqi43c0XGAiIQFOHUqcai6y2n9zVd9rjxj25 KQeidXILot9K5s/NHCwJbyvEx7Ga6H3kFU135MUniaM0g1Q5G3oMfnqjgTx2uWtr hh0CmSjLdZhVvNS+CRJNBW5wF/nEAYO8dpDyTyGnCs2/M/DkCuDZ6NUr9RpSlNhl s2qcstbEYuHQJNTMP7w6bB2ukKrdw7una1BZvgda5huQR9/byQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6DHEfw+z1RtJslZFAoXGy+PYk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGViODU3MTktMmVmNC0z Mjg5LWFhNTAtM2ZhY2VlYzJiZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDWnkx2fvmhyiygbnPMoKv+xdyPHAn6w80J+KH4B+ZjnxmcyN6LQqzm EsrYLXuTEmY29Qo659EJb6A8kiLx/ChoPCXO4npzWMUdIsyNZmq0jg4bPR5d1CbV PYubf/oLHe2DwPaz16fg7GPQBqKSMg7DYfD0cg2NCiA5Na3ga6BRwEC9pYpZcI9G XqpdX9kOxzdEzB99hOPJukDwMO/+iuqkLhBMW49TW+BqKpvA9tbjpbPdZm2PnWsL c+vZhY3hYKbeboMvKL88tcWYIMbErGCirMY78pSQw344WBcFfo3FhpSESydZzMCK eepLPgyfuhic64tIB/D0kFMvTxaDu3c= -----END CERTIFICATE-----Generated at Sun Oct 4 13:31:26 2026 by rpki-client