$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99fcd00a-7986-3341-ba48-aa2a20fa7fbd.roa File: 99fcd00a-7986-3341-ba48-aa2a20fa7fbd.roa (raw, json) Hash identifier: 0AJaHramANdvsozrpAawWrdiUSsWqDzVZllhXdp8w/0= Subject key identifier: 45:01:51:50:9C:36:F1:3D:0D:4C:1E:2C:D5:CC:9A:21:6E:EB:B4:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4974A7E10B0FD678EDFBBA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99fcd00a-7986-3341-ba48-aa2a20fa7fbd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.190.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a7:e1:0b:0f:d6:78:ed:fb:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8177f2af-e795-4faf-bd60-492054610b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:da:e3:88:dd:cf:ee:5f:d3:80:85:8a:e8: 89:27:8a:fc:32:27:69:ba:50:39:bd:38:7f:1e:06: 5b:eb:40:70:3f:b2:41:fc:96:0a:7e:51:0c:d1:b9: 8b:86:26:13:b2:8a:04:63:13:21:de:fc:53:02:59: c2:61:ec:32:96:c6:5b:f6:95:b2:d4:3e:b0:d2:01: 82:08:71:5b:80:d0:aa:a2:cf:45:69:73:4d:f5:6e: 57:82:5b:6c:cc:6c:51:f8:f2:38:3e:81:f8:d2:ea: e3:61:f7:f3:86:5e:78:1f:de:da:9f:7b:4d:78:84: fd:24:3f:7d:1e:bd:49:ed:9a:d5:a3:5a:1f:e4:f3: 3c:3c:49:f6:55:81:c8:e9:1d:8f:c6:a7:5b:3e:8d: 22:1f:a8:3c:3c:ab:85:9f:a9:88:cd:2b:26:10:81: 46:5c:36:bf:f6:2b:b9:7b:cb:e5:3d:a2:98:1c:df: 5d:40:c9:a5:9f:b2:75:b7:8b:93:78:10:9e:63:17: a3:e7:12:8b:0e:7d:e4:2d:f5:bc:9f:e5:a3:0e:f5: fb:59:1d:7c:61:1d:bb:2e:ac:69:1b:80:a8:20:51: 96:d4:f3:40:76:49:60:ac:62:a5:0b:96:35:ba:31: 7b:e5:84:bf:44:03:e2:23:60:bb:88:ea:48:fb:c8: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:01:51:50:9C:36:F1:3D:0D:4C:1E:2C:D5:CC:9A:21:6E:EB:B4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99fcd00a-7986-3341-ba48-aa2a20fa7fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d4:36:61:17:66:4d:12:23:52:4d:6a:55:0a:ab:61:31:f4: 76:4c:07:3e:c6:e6:65:51:fc:5e:2b:43:d5:92:a8:28:ac:fb: 30:b4:d0:bb:11:9e:1a:d8:0f:7b:8b:c9:6c:a4:3f:2a:ab:f6: c2:70:14:16:64:5d:1d:06:06:f7:39:2f:df:ad:ce:8e:64:fc: 1f:65:68:71:3d:af:35:9c:f6:d5:cd:fa:67:92:f7:15:d9:51: 1a:d6:62:c8:78:c8:01:95:68:46:eb:7d:6a:d2:77:65:d0:b1: 1b:bf:a8:d2:0b:6b:e4:79:50:5d:e9:6b:56:aa:34:c4:50:c2: 02:2e:a7:0e:8d:3a:66:45:04:19:f0:9c:7e:d8:c5:6e:9e:c0: ab:35:77:31:5e:4f:40:60:f1:a0:ea:0b:d6:dd:e7:84:47:e4: eb:ee:db:f0:a6:fa:63:d2:9c:6f:c3:35:a0:4d:52:6a:5d:dd: 96:6d:d9:4d:c0:8b:24:05:41:33:42:d1:5d:54:5c:65:dd:a5: a6:c3:61:7e:e7:51:af:72:33:63:9c:52:36:b6:2b:c1:26:a4: ac:1d:8d:bb:af:8c:ae:db:4e:71:e8:d6:38:38:f4:1d:ad:8e: 7e:b5:17:68:72:1a:cb:e4:ce:ad:47:27:82:fd:82:cb:c8:02: db:40:fd:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKfhCw/WeO37uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODE3N2YyYWYtZTc5NS00ZmFmLWJkNjAtNDkyMDU0NjEwYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaja44jdz+5f04CFiuiJJ4r8MidpulA5vTh/ HgZb60BwP7JB/JYKflEM0bmLhiYTsooEYxMh3vxTAlnCYewylsZb9pWy1D6w0gGC CHFbgNCqos9FaXNN9W5XgltszGxR+PI4PoH40urjYffzhl54H97an3tNeIT9JD99 Hr1J7ZrVo1of5PM8PEn2VYHI6R2PxqdbPo0iH6g8PKuFn6mIzSsmEIFGXDa/9iu5 e8vlPaKYHN9dQMmln7J1t4uTeBCeYxej5xKLDn3kLfW8n+WjDvX7WR18YR27Lqxp G4CoIFGW1PNAdklgrGKlC5Y1ujF75YS/RAPiI2C7iOpI+8gFvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUBUVCcNvE9DUweLNXMmiFu67TJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTlmY2QwMGEtNzk4Ni0z MzQxLWJhNDgtYWEyYTIwZmE3ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjUNmEXZk0SI1JNalUKq2Ex9HZMBz7G5mVR/F4rQ9WSqCis+zC00LsR nhrYD3uLyWykPyqr9sJwFBZkXR0GBvc5L9+tzo5k/B9laHE9rzWc9tXN+meS9xXZ URrWYsh4yAGVaEbrfWrSd2XQsRu/qNILa+R5UF3pa1aqNMRQwgIupw6NOmZFBBnw nH7YxW6ewKs1dzFeT0Bg8aDqC9bd54RH5Ovu2/Cm+mPSnG/DNaBNUmpd3ZZt2U3A iyQFQTNC0V1UXGXdpabDYX7nUa9yM2OcUja2K8EmpKwdjbuvjK7bTnHo1jg49B2t jn61F2hyGsvkzq1HJ4L9gsvIAttA/QE= -----END CERTIFICATE-----Generated at Fri Sep 25 17:02:26 2026 by rpki-client