$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ade459ba-e8e2-3a7e-8529-ea504403dd86.roa File: ade459ba-e8e2-3a7e-8529-ea504403dd86.roa (raw, json) Hash identifier: 9pF91FmdkUMHMG5NoUe/QaIPcz3/VuJC4qylSKyuc40= Subject key identifier: 2A:D3:EC:C8:55:74:F1:B3:59:CB:C5:90:0A:51:D7:84:98:04:C3:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD64F2B9B4DA85B702540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ade459ba-e8e2-3a7e-8529-ea504403dd86.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.133.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d6:4f:2b:9b:4d:a8:5b:70:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=9b6cc4e8-a990-45a7-93c3-cfd99fbefeb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:a1:7e:82:3a:4b:c5:18:a6:78:c9:ee:3c: 92:3f:d1:80:ef:44:0a:af:3a:be:ed:e4:68:21:ae: e3:0e:c1:ee:0a:e1:0c:7e:6b:37:e1:dc:1e:d7:7f: 28:8a:48:35:67:87:91:e1:7a:f2:11:d0:f8:10:c7: b4:6c:0d:c2:3b:75:ec:44:97:0d:db:57:8c:32:db: 07:5d:93:ae:6b:e5:15:86:5e:c7:75:78:9f:d7:32: ec:0f:d0:09:82:9a:3e:1a:cb:f6:0b:cc:16:1a:9d: e7:0d:11:45:0f:68:f9:e9:f4:23:a4:68:fb:6d:5b: d2:f7:d8:be:e2:b8:67:ec:6d:f8:d4:5d:63:86:6d: 54:fa:d9:e1:64:af:c0:8f:bc:6f:2a:c3:fe:a7:45: a1:4b:6d:39:11:99:f2:57:cd:94:6e:16:b5:87:cb: 08:aa:41:5b:6f:a5:79:32:b3:24:38:66:36:80:45: 7d:b9:22:47:59:39:03:79:59:88:cd:7a:17:9c:78: 0c:90:e9:9d:d8:94:8a:bf:d0:07:65:b9:3e:2f:4b: 9e:99:b7:5f:2b:f9:84:dd:b1:d7:15:5d:3e:d1:04: 4c:af:a3:32:37:4c:f8:9b:e3:2e:b9:66:ef:e8:55: f1:ca:d0:c3:fe:78:53:65:85:cb:ed:5d:8c:09:d2: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D3:EC:C8:55:74:F1:B3:59:CB:C5:90:0A:51:D7:84:98:04:C3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ade459ba-e8e2-3a7e-8529-ea504403dd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fc:aa:c2:d4:89:d1:90:a2:1a:50:ac:3d:47:ed:ea:31:77: 70:f4:61:d5:ca:d8:a9:f5:c1:e6:03:d5:2a:0b:95:6c:44:64: 06:aa:0b:25:32:20:5b:fd:a8:ec:71:a5:91:63:be:2a:9a:49: 85:1d:84:03:6c:c1:2d:6a:18:1b:b5:43:b6:13:4b:40:c4:da: d5:da:3a:9c:11:fc:b3:3c:ba:19:30:4c:79:a1:d9:5a:dc:d3: 37:3b:43:16:47:36:dd:7f:b4:b1:12:63:2f:7b:e1:2a:3e:93: e2:40:a7:10:be:54:a3:2a:ca:70:8d:03:07:0c:0d:4e:29:09: d5:f1:9d:31:57:c6:3e:05:e4:4f:62:94:26:bc:e6:3d:9b:2a: 25:72:2a:e9:d0:61:ba:2f:60:f4:f6:b4:b8:d7:8f:3c:16:ab: 1a:f0:50:b1:31:0c:3b:06:a6:cb:15:9d:23:68:37:9f:6e:6d: 9d:93:ee:9e:2b:5c:5a:e0:9e:05:23:05:6e:1b:02:12:94:83: 57:ed:8f:cc:70:da:83:18:1e:a4:30:09:52:8b:0c:b3:74:da: a2:b9:46:a1:0c:5d:53:3d:8d:1b:29:6b:28:5c:28:d2:a7:f9: 95:0d:43:f9:27:21:72:a1:80:a9:1c:8d:cc:07:eb:06:11:6a: 85:0d:ce:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdZPK5tNqFtwJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OWI2Y2M0ZTgtYTk5MC00NWE3LTkzYzMtY2ZkOTlmYmVmZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j6hfoI6S8UYpnjJ7jySP9GA70QKrzq+7eRo Ia7jDsHuCuEMfms34dwe138oikg1Z4eR4XryEdD4EMe0bA3CO3XsRJcN21eMMtsH XZOua+UVhl7HdXif1zLsD9AJgpo+Gsv2C8wWGp3nDRFFD2j56fQjpGj7bVvS99i+ 4rhn7G341F1jhm1U+tnhZK/Aj7xvKsP+p0WhS205EZnyV82Ubha1h8sIqkFbb6V5 MrMkOGY2gEV9uSJHWTkDeVmIzXoXnHgMkOmd2JSKv9AHZbk+L0uembdfK/mE3bHX FV0+0QRMr6MyN0z4m+MuuWbv6FXxytDD/nhTZYXL7V2MCdIbGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrT7MhVdPGzWcvFkApR14SYBMMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWRlNDU5YmEtZThlMi0z YTdlLTg1MjktZWE1MDQ0MDNkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH8qsLUidGQohpQrD1H7eoxd3D0YdXK2Kn1weYD1SoLlWxEZAaqCyUy IFv9qOxxpZFjviqaSYUdhANswS1qGBu1Q7YTS0DE2tXaOpwR/LM8uhkwTHmh2Vrc 0zc7QxZHNt1/tLESYy974So+k+JApxC+VKMqynCNAwcMDU4pCdXxnTFXxj4F5E9i lCa85j2bKiVyKunQYbovYPT2tLjXjzwWqxrwULExDDsGpssVnSNoN59ubZ2T7p4r XFrgngUjBW4bAhKUg1ftj8xw2oMYHqQwCVKLDLN02qK5RqEMXVM9jRspayhcKNKn +ZUNQ/knIXKhgKkcjcwH6wYRaoUNzuk= -----END CERTIFICATE-----Generated at Sat Sep 26 15:45:21 2026 by rpki-client