$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa File: afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa (raw, json) Hash identifier: cSiAU0hzXYpaIJMNsS77ZqArEDq3JHspain5ozVKG3Q= Subject key identifier: 59:66:02:7D:11:92:E9:8F:9B:5D:79:AA:9E:CB:1D:DA:AD:00:DA:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA914FDCB685BB8E2DB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.136.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a9:14:fd:cb:68:5b:b8:e2:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=256adef8-b98c-41a6-931b-745bdc9056e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c5:14:75:71:c5:42:aa:71:9a:8b:08:ba:5a: 04:ab:45:f8:7f:00:1f:f1:34:c3:df:a7:1e:31:b8: 61:5f:91:9d:23:db:af:01:16:dc:58:dc:4c:d9:0b: 8a:c3:4a:da:3a:f9:4d:46:37:7b:e1:c7:55:74:49: 79:30:3a:70:10:11:a3:4e:f7:a2:19:73:c1:0d:3e: 12:80:bd:2f:35:90:57:22:37:6f:a6:d6:f7:de:34: 61:0b:c3:18:31:12:19:1e:74:b7:b5:d1:0a:ac:05: 93:31:a4:a2:08:7b:36:72:0a:ff:9a:22:3c:21:37: b2:fa:05:74:21:ea:24:2f:13:02:e5:9c:8e:08:c7: 08:fc:20:2d:5e:71:40:4e:cd:8b:71:21:b1:ea:ba: a7:e8:9b:ee:3f:43:ec:2f:c6:22:00:a1:c3:20:b7: 71:ad:9c:c2:8d:01:24:6b:8b:44:03:9a:9b:b2:08: 5e:d9:98:7b:52:0f:ec:fe:e7:a3:f7:7e:b1:f8:74: e7:34:4c:27:e7:7d:d2:2f:3d:10:40:ee:e3:a8:00: 00:9a:00:ce:21:b6:a1:97:10:6b:97:bd:33:30:a7: 2d:c7:d2:27:6b:1b:51:7e:ff:54:60:c3:36:c2:5f: ab:55:c4:e6:4a:c4:b3:4c:0e:ca:40:5f:34:9a:ad: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:66:02:7D:11:92:E9:8F:9B:5D:79:AA:9E:CB:1D:DA:AD:00:DA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:81:65:a3:69:66:50:e5:43:bf:aa:5c:57:5d:71:d0:16:ea: b7:ea:7d:9f:8c:cf:66:14:cf:84:87:e4:7b:d2:4b:bc:e9:06: 13:2a:76:bb:a3:c9:c5:be:dd:d5:80:a6:1b:d6:0e:4d:6f:de: 9d:26:cc:46:c1:59:62:46:6e:af:13:89:18:75:90:fb:8f:11: 70:c4:bd:2b:57:00:28:e9:d4:0b:64:12:f0:64:fe:a7:f2:64: 91:e0:8e:f0:7f:01:90:b4:5a:0f:84:39:41:d7:d0:6b:9f:d6: e1:77:ba:34:fc:8f:49:b9:95:5c:67:1a:71:0a:98:ec:e9:6d: 41:10:40:d8:ec:30:60:7f:bb:d8:59:f8:8b:0b:4d:45:25:dd: 10:36:ea:74:23:12:93:ad:39:37:9d:6b:6f:bb:83:b9:03:78: 07:2c:a5:b4:8a:cd:3b:83:e4:3b:e0:99:01:21:68:fc:89:6a: d2:b0:65:1c:d3:b6:9a:62:50:0e:c6:dd:65:38:73:0e:db:2e: 04:7e:3f:0d:f7:7d:8a:f0:6b:86:04:86:eb:04:de:c6:03:0a: 6e:1e:10:a7:57:c4:84:70:29:a0:c6:e4:d9:07:9c:9a:a8:f6: 7a:a6:32:b1:59:3c:ed:58:75:50:8d:81:e8:04:c2:3c:0d:b9: 6b:26:59:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPakU/ctoW7ji2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjU2YWRlZjgtYjk4Yy00MWE2LTkzMWItNzQ1YmRjOTA1NmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8UUdXHFQqpxmosIuloEq0X4fwAf8TTD36ce MbhhX5GdI9uvARbcWNxM2QuKw0raOvlNRjd74cdVdEl5MDpwEBGjTveiGXPBDT4S gL0vNZBXIjdvptb33jRhC8MYMRIZHnS3tdEKrAWTMaSiCHs2cgr/miI8ITey+gV0 IeokLxMC5ZyOCMcI/CAtXnFATs2LcSGx6rqn6JvuP0PsL8YiAKHDILdxrZzCjQEk a4tEA5qbsghe2Zh7Ug/s/uej936x+HTnNEwn533SLz0QQO7jqAAAmgDOIbahlxBr l70zMKctx9InaxtRfv9UYMM2wl+rVcTmSsSzTA7KQF80mq2mxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlmAn0RkumPm115qp7LHdqtANpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZlMmFmZWItYTcxYi0z ZWZmLTg3NWQtMzk0ZTRiMWE5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIogQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaBZaNpZlDlQ7+qXFddcdAW6rfqfZ+Mz2YUz4SH5HvSS7zpBhMqdruj ycW+3dWAphvWDk1v3p0mzEbBWWJGbq8TiRh1kPuPEXDEvStXACjp1AtkEvBk/qfy ZJHgjvB/AZC0Wg+EOUHX0Guf1uF3ujT8j0m5lVxnGnEKmOzpbUEQQNjsMGB/u9hZ +IsLTUUl3RA26nQjEpOtOTeda2+7g7kDeAcspbSKzTuD5DvgmQEhaPyJatKwZRzT tppiUA7G3WU4cw7bLgR+Pw33fYrwa4YEhusE3sYDCm4eEKdXxIRwKaDG5NkHnJqo 9nqmMrFZPO1YdVCNgegEwjwNuWsmWbo= -----END CERTIFICATE-----Generated at Mon Sep 28 10:52:24 2026 by rpki-client