$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b26896a9-451a-3681-84a5-078e952fc131.roa File: b26896a9-451a-3681-84a5-078e952fc131.roa (raw, json) Hash identifier: jnlCykgJLjpuYQ0wxa7jwdFYTldDpXAdG5RD5a8VHgA= Subject key identifier: 16:52:9D:57:81:71:F7:B4:3A:04:EC:83:3D:FC:0B:54:B5:4D:91:9D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC9E558AB6217C5D75A98 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b26896a9-451a-3681-84a5-078e952fc131.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.133.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c9:e5:58:ab:62:17:c5:d7:5a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5d0b0877-44e1-4c47-a2dc-bf063ab0e2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:ce:4f:84:83:0c:c5:57:cc:ed:9c:d3:65: 61:d6:fa:1d:13:05:22:39:bf:7b:5d:ff:e4:b2:77: 2c:c2:58:d3:15:34:9c:b6:fc:32:c5:99:4b:bb:d4: 3d:fb:62:85:90:2c:f3:ad:0b:21:f5:b3:42:20:92: 31:7c:2c:a6:d4:cd:03:8f:14:79:e7:41:a3:29:72: 55:53:51:30:15:01:a8:74:97:70:1c:b6:ce:2c:d1: 8f:12:a3:29:7e:8c:c7:ba:be:87:6e:52:13:44:c8: d9:7b:19:01:93:ac:13:43:82:19:2b:f4:26:de:2d: 1c:00:4b:3c:fa:29:9c:44:eb:67:38:51:88:fe:f0: 5e:2a:67:90:af:09:4a:78:a8:f9:cb:93:77:19:76: 35:81:9c:23:38:9b:7c:27:74:90:ea:12:47:eb:f7: 91:67:ea:f8:05:3f:9c:f4:b0:c5:3d:ec:11:40:14: 4f:7a:d6:ef:51:7b:e4:92:67:de:a3:8c:8f:f0:ff: 95:5e:c4:97:7e:93:6d:4c:4e:9f:a1:6f:ce:e1:e0: 1c:9a:61:7d:a5:c5:3f:46:c9:b7:02:a8:c2:37:b2: b8:03:fa:1c:05:ac:eb:1f:99:38:88:eb:1f:bb:d4: f1:ae:9e:41:20:51:95:fc:12:d7:7e:5a:5c:ff:f2: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:52:9D:57:81:71:F7:B4:3A:04:EC:83:3D:FC:0B:54:B5:4D:91:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b26896a9-451a-3681-84a5-078e952fc131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e7:67:24:af:d0:d0:01:4c:95:e1:0f:b8:f4:e0:52:05:8d: d7:3f:3f:7f:c0:12:1a:dc:f6:90:7c:dd:ac:cc:c1:b3:9f:d3: 07:76:44:8e:6a:e4:7f:cc:a3:b4:6f:30:b0:46:d1:71:a3:b0: fd:83:cf:41:5c:73:ce:07:c8:5a:25:c9:75:ce:54:d2:79:d1: ac:dc:e7:37:a2:1c:6e:f7:67:c9:3b:64:7b:a6:77:70:0f:1b: 9e:83:b2:15:eb:20:b6:63:5a:67:8a:d5:8d:10:04:8e:7d:af: 31:a6:c7:60:d3:54:b4:e1:5a:a3:52:a1:16:a0:93:01:5d:ba: 96:3b:a8:c9:03:52:84:2d:57:ae:a2:23:78:f5:4d:a4:62:fe: d2:d6:50:5c:50:04:9c:56:3b:1b:5a:8e:61:34:94:7f:d9:0d: 2c:c9:95:29:b8:7c:aa:cf:a9:e8:b9:7d:12:dc:8c:a4:95:85: 29:77:98:48:0f:2e:42:cd:f0:e4:9a:0e:0a:ba:53:52:a4:15: 2c:c7:72:b7:93:a5:df:16:0d:e1:cc:05:63:79:64:55:9b:2d: 84:c3:5c:99:06:9d:80:be:f1:e1:27:a5:da:b6:6e:bb:d4:54: 97:27:b1:7d:79:43:3a:6f:0d:4f:6a:de:4d:e3:51:73:e2:25: 5f:0c:e2:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcnlWKtiF8XXWpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWQwYjA4NzctNDRlMS00YzQ3LWEyZGMtYmYwNjNhYjBlMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkrOT4SDDMVXzO2c02Vh1vodEwUiOb97Xf/k sncswljTFTSctvwyxZlLu9Q9+2KFkCzzrQsh9bNCIJIxfCym1M0DjxR550GjKXJV U1EwFQGodJdwHLbOLNGPEqMpfozHur6HblITRMjZexkBk6wTQ4IZK/Qm3i0cAEs8 +imcROtnOFGI/vBeKmeQrwlKeKj5y5N3GXY1gZwjOJt8J3SQ6hJH6/eRZ+r4BT+c 9LDFPewRQBRPetbvUXvkkmfeo4yP8P+VXsSXfpNtTE6foW/O4eAcmmF9pcU/Rsm3 AqjCN7K4A/ocBazrH5k4iOsfu9Txrp5BIFGV/BLXflpc//JLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZSnVeBcfe0OgTsgz38C1S1TZGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjI2ODk2YTktNDUxYS0z NjgxLTg0YTUtMDc4ZTk1MmZjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHnZySv0NABTJXhD7j04FIFjdc/P3/AEhrc9pB83azMwbOf0wd2RI5q 5H/Mo7RvMLBG0XGjsP2Dz0Fcc84HyFolyXXOVNJ50azc5zeiHG73Z8k7ZHumd3AP G56DshXrILZjWmeK1Y0QBI59rzGmx2DTVLThWqNSoRagkwFdupY7qMkDUoQtV66i I3j1TaRi/tLWUFxQBJxWOxtajmE0lH/ZDSzJlSm4fKrPqei5fRLcjKSVhSl3mEgP LkLN8OSaDgq6U1KkFSzHcreTpd8WDeHMBWN5ZFWbLYTDXJkGnYC+8eEnpdq2brvU VJcnsX15QzpvDU9q3k3jUXPiJV8M4gk= -----END CERTIFICATE-----Generated at Mon Sep 28 05:56:51 2026 by rpki-client