$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa File: cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa (raw, json) Hash identifier: H7XFkCRY5zF/TCTO9H1lTcZvXkXMAWHR6GRSyXs3/E0= Subject key identifier: 7F:4E:76:D4:32:68:2C:17:60:23:98:15:C0:CF:51:C5:2B:0F:03:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4988F28D535A0052E20CCCC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.1.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:f2:8d:53:5a:00:52:e2:0c:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2e01db72-05e5-4e0a-8093-7b11feef0237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:48:ba:c1:cf:35:35:e3:85:b1:a7:2a:17: 1e:e6:9f:73:fb:34:10:7d:d2:e1:7f:64:ab:da:a3: 1a:e3:52:c9:72:3b:87:e9:d3:1c:ec:66:0b:6c:f8: 50:a3:b6:61:02:31:0f:3a:d5:31:3c:73:5b:b6:f0: 2f:15:c2:5b:c7:bd:c4:56:a6:53:40:56:3b:0a:72: ae:65:9c:64:be:09:30:8b:09:fb:e1:6c:b6:54:20: 3f:63:c3:13:f4:4b:37:e0:48:b0:e4:d5:c7:19:ba: 21:91:c7:6d:fc:14:d5:24:0b:19:75:af:5f:15:62: 43:27:e7:c2:5c:c6:14:63:a7:75:5a:a5:c0:0e:38: d0:1a:8f:05:c8:c7:8a:45:7c:b9:d8:53:bb:90:ad: dd:c3:20:7d:a5:bc:b6:51:1f:1a:9c:71:db:ec:db: cf:3b:ad:2d:5f:89:3c:12:3c:a9:cd:5d:9e:4d:40: 71:96:ae:c0:39:c6:5a:9f:99:2d:64:11:54:41:e5: 48:1b:49:2f:60:c6:3c:80:71:6c:80:6e:a3:b5:c4: 4c:ff:de:79:b0:98:bc:02:b7:11:44:4a:03:64:d2: 15:5d:99:48:0f:8e:39:18:41:cd:11:a6:5d:95:e4: 11:b9:94:83:65:74:52:87:dc:51:ca:7a:5a:66:32: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4E:76:D4:32:68:2C:17:60:23:98:15:C0:CF:51:C5:2B:0F:03:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:99:ec:02:d6:e3:f2:d0:78:cb:95:79:5d:00:70:3e:b1:a4: 14:28:90:5c:f5:95:40:ab:88:d7:8b:07:6a:20:7d:0d:cc:7d: 81:31:98:ab:8b:4d:48:53:ed:33:44:db:10:13:ca:e6:a0:fb: 85:19:c9:c7:27:98:3e:b9:80:2d:f1:65:7a:92:5a:b8:9e:1c: 59:e8:2c:98:8c:f3:14:f8:69:6a:72:3c:44:11:d8:e7:37:68: 89:73:ff:63:e1:bc:b6:db:7a:10:b4:3f:3f:24:8f:5b:af:b4: e7:d8:66:16:98:f1:9a:58:f8:a2:c7:a7:b5:44:9c:c1:a4:2b: 98:e9:a9:8c:50:00:aa:3f:4d:6e:56:f7:62:4e:d6:d4:96:b6: 70:a2:cc:35:d7:07:d1:76:d1:59:cd:26:be:a5:e3:48:88:8e: 34:7e:57:ab:23:33:4a:0f:95:88:0e:81:cd:b1:b9:37:2b:9c: 91:a6:74:01:32:1f:02:80:d5:8c:e3:e5:da:24:ad:8f:4f:06: 8d:96:a9:3b:c8:e7:a3:7b:0f:7c:b6:37:25:d5:85:3b:33:40: cc:ce:eb:52:a4:30:8c:ff:f4:8c:bd:08:fa:9f:ca:d0:24:2b: 01:7b:22:66:08:d8:57:da:a5:01:00:23:ed:06:56:69:08:63: 4b:d0:0b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiPKNU1oAUuIMzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmUwMWRiNzItMDVlNS00ZTBhLTgwOTMtN2IxMWZlZWYwMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZVIusHPNTXjhbGnKhce5p9z+zQQfdLhf2Sr 2qMa41LJcjuH6dMc7GYLbPhQo7ZhAjEPOtUxPHNbtvAvFcJbx73EVqZTQFY7CnKu ZZxkvgkwiwn74Wy2VCA/Y8MT9Es34Eiw5NXHGbohkcdt/BTVJAsZda9fFWJDJ+fC XMYUY6d1WqXADjjQGo8FyMeKRXy52FO7kK3dwyB9pby2UR8anHHb7NvPO60tX4k8 EjypzV2eTUBxlq7AOcZan5ktZBFUQeVIG0kvYMY8gHFsgG6jtcRM/955sJi8ArcR REoDZNIVXZlID445GEHNEaZdleQRuZSDZXRSh9xRynpaZjJkYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9OdtQyaCwXYCOYFcDPUcUrDwOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2QxY2FkOWItM2RkMi0z YzU2LWJlNWMtNjE2ZTM2OTQ5ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeZ7ALW4/LQeMuVeV0AcD6xpBQokFz1lUCriNeLB2ogfQ3MfYExmKuL TUhT7TNE2xATyuag+4UZyccnmD65gC3xZXqSWrieHFnoLJiM8xT4aWpyPEQR2Oc3 aIlz/2PhvLbbehC0Pz8kj1uvtOfYZhaY8ZpY+KLHp7VEnMGkK5jpqYxQAKo/TW5W 92JO1tSWtnCizDXXB9F20VnNJr6l40iIjjR+V6sjM0oPlYgOgc2xuTcrnJGmdAEy HwKA1Yzj5dokrY9PBo2WqTvI56N7D3y2NyXVhTszQMzO61KkMIz/9Iy9CPqfytAk KwF7ImYI2FfapQEAI+0GVmkIY0vQC0s= -----END CERTIFICATE-----Generated at Tue Sep 29 04:07:15 2026 by rpki-client