$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa File: aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa (raw, json) Hash identifier: x0kmX8dbb7F0w0W38OlSeuradXmJ2OeEmuJ7GCZIets= Subject key identifier: 81:9B:B9:A1:B6:C5:D8:98:12:4A:63:40:66:95:A0:D5:FB:60:00:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D89860857D032D65D3780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.85.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:89:86:08:57:d0:32:d6:5d:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4009363a-1f14-4e17-bb92-bb9170d6a3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:c9:b1:fb:ec:ae:d7:7e:f6:81:eb:3e:df: d1:62:0f:69:58:ef:71:33:0c:ad:70:32:0b:a3:ae: d8:26:23:07:2c:72:50:32:19:44:46:83:35:82:53: a0:9a:5c:d9:57:47:21:67:a4:85:3f:cb:e2:4f:b3: d2:fc:c0:9b:a2:fb:a6:ee:6f:fd:54:78:5b:1b:b9: af:ec:fe:d2:eb:30:96:af:7d:17:c6:fe:bc:70:c3: 0a:86:14:a4:d9:96:76:7e:49:c3:e7:6e:cd:41:ad: 55:df:7a:71:7a:47:c7:c9:d1:b5:ac:19:8e:b2:18: d3:66:fd:74:8c:42:81:16:95:53:22:73:44:1c:c9: 0d:bd:71:5c:5a:46:b1:28:84:ae:90:3a:82:af:cb: fa:ac:69:0a:7f:2d:3a:3c:04:70:3c:35:4d:2c:bc: d1:b9:23:94:aa:4a:06:67:64:94:9f:fd:07:57:66: a0:82:e8:df:a1:cd:da:61:b6:3e:bf:82:c9:3e:f7: 65:52:be:6f:83:0a:ff:60:b6:30:1a:ea:17:d6:69: 07:7d:73:68:2d:e3:a0:c3:fd:ef:7f:2d:5b:3b:d3: 5a:5a:3a:20:1e:51:a1:39:58:71:69:be:92:28:f3: 76:e0:d0:f4:e5:15:5b:83:62:a6:f0:3a:7b:42:0d: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9B:B9:A1:B6:C5:D8:98:12:4A:63:40:66:95:A0:D5:FB:60:00:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aabf953e-34cb-365f-bcc7-06a3c6183f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4f:55:28:46:7c:28:8b:39:85:0c:5f:7c:a3:0c:3c:5f:2f: f1:0b:a2:a1:5e:29:c0:65:0f:c4:14:db:e5:99:89:36:52:6a: 89:d1:f7:da:25:fc:1f:7d:3f:17:b7:ef:d4:28:08:98:bb:72: 8d:6e:9d:9e:09:3d:90:1a:5b:3b:de:d2:81:a0:ab:50:f1:cf: 05:83:51:26:96:e2:a6:c2:f1:ea:00:aa:a8:0a:9a:c1:d8:29: c1:64:79:a7:78:c1:a6:a9:fc:90:9b:41:12:c4:36:f4:15:08: 9a:9a:9b:f3:c6:6f:65:56:49:0d:9a:ac:eb:d5:de:7b:f1:54: 9c:79:29:e6:0c:ec:47:f2:98:eb:c6:3d:4a:4d:e5:27:03:61: 26:e7:03:cd:2e:e7:e6:a9:0c:02:ae:eb:85:3f:c6:5a:5f:3c: a2:ce:76:78:26:5e:4d:60:b4:d3:74:10:9c:38:b6:2b:ea:60: 19:2c:21:78:a3:e3:9f:78:ca:a4:ee:35:03:42:92:a8:f7:3d: 74:0b:3d:65:de:bc:c7:0c:54:1f:e0:e4:d4:0e:07:ea:ca:75: 63:6e:84:5d:01:46:75:07:21:32:2f:b9:a2:56:bc:38:42:3f: 25:ae:12:19:a7:78:90:78:c5:72:6d:5d:45:ee:e5:25:64:5e: d3:1f:91:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYmGCFfQMtZdN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDAwOTM2M2EtMWYxNC00ZTE3LWJiOTItYmI5MTcwZDZhM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo/Jsfvsrtd+9oHrPt/RYg9pWO9xMwytcDIL o67YJiMHLHJQMhlERoM1glOgmlzZV0chZ6SFP8viT7PS/MCbovum7m/9VHhbG7mv 7P7S6zCWr30Xxv68cMMKhhSk2ZZ2fknD527NQa1V33pxekfHydG1rBmOshjTZv10 jEKBFpVTInNEHMkNvXFcWkaxKISukDqCr8v6rGkKfy06PARwPDVNLLzRuSOUqkoG Z2SUn/0HV2aggujfoc3aYbY+v4LJPvdlUr5vgwr/YLYwGuoX1mkHfXNoLeOgw/3v fy1bO9NaWjogHlGhOVhxab6SKPN24ND05RVbg2Km8Dp7Qg3yyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGbuaG2xdiYEkpjQGaVoNX7YADIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWFiZjk1M2UtMzRjYi0z NjVmLWJjYzctMDZhM2M2MTgzZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5PVShGfCiLOYUMX3yjDDxfL/ELoqFeKcBlD8QU2+WZiTZSaonR99ol /B99Pxe379QoCJi7co1unZ4JPZAaWzve0oGgq1DxzwWDUSaW4qbC8eoAqqgKmsHY KcFkead4waap/JCbQRLENvQVCJqam/PGb2VWSQ2arOvV3nvxVJx5KeYM7EfymOvG PUpN5ScDYSbnA80u5+apDAKu64U/xlpfPKLOdngmXk1gtNN0EJw4tivqYBksIXij 4594yqTuNQNCkqj3PXQLPWXevMcMVB/g5NQOB+rKdWNuhF0BRnUHITIvuaJWvDhC PyWuEhmneJB4xXJtXUXu5SVkXtMfkTQ= -----END CERTIFICATE-----Generated at Sun Sep 27 01:17:21 2026 by rpki-client