$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: nZoF6O3wOGXjMMBskOZYRC9Cq0AHeRqbGl4Wf+v7B7s= Subject key identifier: F8:F2:D6:44:EE:21:62:80:84:D3:A1:0F:86:10:02:C2:D2:02:25:CB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA7516BCFE6822E83A780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a7:51:6b:cf:e6:82:2e:83:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5a0238c8-2f69-4399-9c4d-4c882451e473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:75:4a:49:80:f9:3a:53:cc:61:da:c1:36: b2:51:bb:ff:ad:2d:3f:30:5c:93:e9:82:49:f6:c7: ed:fc:52:cd:81:1e:43:f9:a2:ad:5e:e1:28:ca:3a: 80:72:fe:1a:cb:94:51:81:f2:2e:18:ad:a6:38:8c: c0:37:c0:72:bf:5b:36:14:db:0a:34:2f:0b:cb:d7: bc:4e:83:16:85:6f:f5:9c:c6:20:f4:08:3f:97:6d: 64:6b:c2:c5:7f:bb:b5:b2:81:f5:b9:f5:95:8d:45: 27:ee:89:6e:50:99:5a:79:79:24:51:64:09:8e:d3: 69:e8:09:b6:0e:04:1d:5f:79:8e:45:6c:42:21:36: ce:42:23:36:b1:80:84:a7:0a:8c:74:14:75:0b:fe: 64:80:2a:c2:92:8f:fd:1d:78:e7:62:17:50:c9:c2: 80:8d:7b:a6:ef:86:4b:c3:21:63:c8:de:5d:4b:ca: 6f:b3:49:a6:84:d0:86:b9:a2:42:89:9d:1d:3f:bf: a1:d5:4b:98:47:02:3d:12:5b:96:85:c3:90:dd:13: 01:2a:a9:9e:03:ce:5b:ce:e4:fa:ab:33:18:18:83: 09:07:62:af:22:e9:0c:d7:9c:3b:c7:2c:48:50:18: c2:96:0c:bf:e3:8d:1a:f1:0e:fb:d8:94:d9:9b:71: f1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F2:D6:44:EE:21:62:80:84:D3:A1:0F:86:10:02:C2:D2:02:25:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:31:0d:6b:d3:b0:12:54:73:51:1a:71:b9:27:47:e1:65:ef: 58:2d:1d:2c:fa:a0:32:e2:f5:19:d1:36:a3:c2:67:38:be:2a: 93:78:e2:66:f9:17:76:7f:db:7d:9e:cd:c9:4c:c6:ba:06:da: 2f:d8:eb:53:d3:ae:bf:d4:a4:8b:1b:4e:f6:a9:b9:32:c9:38: 67:79:16:7b:9a:ab:6f:8a:19:a1:a4:a2:bf:d3:f3:79:a4:47: 23:a0:9c:d2:86:ed:fc:2a:75:ed:86:6f:36:0a:af:71:82:e1: ee:10:20:d0:e1:b8:cb:21:68:cc:f9:66:d7:c0:80:39:a8:ce: 56:a2:9a:51:b5:14:6c:a5:31:53:82:4d:64:df:45:02:c2:57: 01:63:5e:d9:83:f3:be:b9:7b:93:d4:8f:46:99:92:f9:6a:89: 5e:f3:e8:34:72:0a:99:88:c9:11:dc:aa:14:83:30:32:79:1f: d1:1f:5e:50:87:ce:bc:44:2a:7b:e8:c2:81:e4:a2:bc:24:b2: 0d:42:1a:cd:24:73:71:5c:4a:ba:67:72:7e:05:29:79:b3:a1: 6f:05:b3:64:b6:cb:39:22:2c:e6:20:52:79:77:a2:dd:15:77: 89:78:62:9b:55:2f:ae:b2:4c:1a:99:11:55:54:0d:c2:0e:df: 19:b9:c6:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPadRa8/mgi6Dp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWEwMjM4YzgtMmY2OS00Mzk5LTljNGQtNGM4ODI0NTFlNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEV1SkmA+TpTzGHawTayUbv/rS0/MFyT6YJJ 9sft/FLNgR5D+aKtXuEoyjqAcv4ay5RRgfIuGK2mOIzAN8Byv1s2FNsKNC8Ly9e8 ToMWhW/1nMYg9Ag/l21ka8LFf7u1soH1ufWVjUUn7oluUJlaeXkkUWQJjtNp6Am2 DgQdX3mORWxCITbOQiM2sYCEpwqMdBR1C/5kgCrCko/9HXjnYhdQycKAjXum74ZL wyFjyN5dS8pvs0mmhNCGuaJCiZ0dP7+h1UuYRwI9EluWhcOQ3RMBKqmeA85bzuT6 qzMYGIMJB2KvIukM15w7xyxIUBjClgy/440a8Q772JTZm3Hx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjy1kTuIWKAhNOhD4YQAsLSAiXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMxDWvTsBJUc1EacbknR+Fl71gtHSz6oDLi9RnRNqPCZzi+KpN44mb5 F3Z/232ezclMxroG2i/Y61PTrr/UpIsbTvapuTLJOGd5Fnuaq2+KGaGkor/T83mk RyOgnNKG7fwqde2GbzYKr3GC4e4QINDhuMshaMz5ZtfAgDmozlaimlG1FGylMVOC TWTfRQLCVwFjXtmD8765e5PUj0aZkvlqiV7z6DRyCpmIyRHcqhSDMDJ5H9EfXlCH zrxEKnvowoHkorwksg1CGs0kc3FcSrpncn4FKXmzoW8Fs2S2yzkiLOYgUnl3ot0V d4l4YptVL66yTBqZEVVUDcIO3xm5xpI= -----END CERTIFICATE-----Generated at Sat Sep 26 07:00:57 2026 by rpki-client