$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa File: d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa (raw, json) Hash identifier: 5Q5Tzk1re7b0ptyDyH4SW+kUvYu67GVlFVFmqGjSH/c= Subject key identifier: 14:8A:31:56:DC:23:37:53:DD:9E:40:7E:6C:C9:37:2A:54:19:44:5A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAEF54D399650548C2080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.134.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ae:f5:4d:39:96:50:54:8c:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e5fad89e-c05b-4303-bda8-69bf38f7500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:50:46:61:c1:e8:c3:c1:9f:57:8a:66:b9: 9c:0f:4a:d0:a8:08:b8:1b:1f:b9:6f:4e:49:23:d4: 46:33:4a:10:d2:b2:ed:b8:72:8a:f2:10:37:85:8b: 0a:6e:a4:42:1c:16:73:92:85:4a:2f:37:a6:01:d4: 71:cc:0b:f3:4d:18:ab:e9:b5:e2:78:f1:7b:55:61: eb:67:39:8d:71:dd:39:c0:84:f5:ed:59:cc:a6:8d: 4c:c4:44:6f:97:1f:ee:2c:3a:42:ef:ae:f4:31:98: fd:3a:d9:f9:0a:af:c7:b6:dd:ee:dc:b7:e0:cb:d9: 77:cf:06:d4:73:e4:cc:2e:ea:b0:ed:ba:b6:15:3e: 16:7e:67:92:5c:e5:67:16:f1:c5:c9:68:f0:04:4d: 98:ce:32:d2:5c:91:22:c1:97:39:e9:16:ff:84:dd: 61:29:ca:27:43:12:22:e8:f3:50:b1:35:d0:4b:87: 2f:60:e9:45:0d:a9:11:b3:0e:03:b4:b3:2b:9f:13: 11:5b:b8:86:1c:33:6a:39:0a:6b:bb:66:9e:06:1e: 2c:f8:dc:e1:65:5b:09:6d:f8:b9:50:fa:92:36:41: e8:41:f4:35:40:78:70:93:3b:db:5f:10:b2:ef:05: 11:3f:0b:b6:4a:39:85:50:2a:5d:3e:59:3b:78:04: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8A:31:56:DC:23:37:53:DD:9E:40:7E:6C:C9:37:2A:54:19:44:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0b:74:0d:1e:94:7b:92:a6:0d:67:00:eb:72:cf:d1:52:9f: ee:47:22:27:02:ff:dc:2b:d5:ad:9a:4b:1b:9f:95:3e:98:e8: c9:f5:26:64:51:6a:6a:44:ae:12:3a:f7:5d:00:1a:b5:5b:57: 0f:fb:88:c6:2c:1b:a5:70:65:23:b6:fa:a4:3e:e6:0b:8c:ed: 92:7d:73:7c:bc:68:d1:e5:8c:c2:46:f7:df:6a:af:ea:c8:0b: ef:82:f1:38:86:80:21:89:79:ed:68:44:fc:5c:32:b3:c9:13: 4f:4d:d7:4c:27:90:bb:47:5e:4e:ca:00:3f:25:86:2a:4a:e8: 31:8b:64:15:d2:a2:eb:bb:4e:52:8e:57:b6:1d:f7:85:bd:da: 6a:38:09:1e:e8:2c:d9:c7:e9:fa:88:a9:d5:f9:f0:1d:84:b9: 06:11:e9:67:e8:f2:93:37:8f:ef:f8:80:18:e3:62:a3:d0:f3: 6c:63:9e:04:60:c2:1a:e4:84:40:dc:b7:c2:f7:2e:1d:77:b9: 0f:0b:af:37:03:e0:5b:26:f7:31:41:35:1c:90:66:c5:5e:d0: a6:14:25:24:83:ba:d4:01:5a:35:85:5f:cb:79:7d:ef:dc:95: cb:6c:14:ec:88:d2:d2:ba:59:a4:fb:25:1c:fd:11:bb:00:5b: c7:24:b1:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPa71TTmWUFSMIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTVmYWQ4OWUtYzA1Yi00MzAzLWJkYTgtNjliZjM4Zjc1MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy9QRmHB6MPBn1eKZrmcD0rQqAi4Gx+5b05J I9RGM0oQ0rLtuHKK8hA3hYsKbqRCHBZzkoVKLzemAdRxzAvzTRir6bXiePF7VWHr ZzmNcd05wIT17VnMpo1MxERvlx/uLDpC7670MZj9Otn5Cq/Htt3u3Lfgy9l3zwbU c+TMLuqw7bq2FT4WfmeSXOVnFvHFyWjwBE2YzjLSXJEiwZc56Rb/hN1hKconQxIi 6PNQsTXQS4cvYOlFDakRsw4DtLMrnxMRW7iGHDNqOQpru2aeBh4s+NzhZVsJbfi5 UPqSNkHoQfQ1QHhwkzvbXxCy7wURPwu2SjmFUCpdPlk7eARcDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSKMVbcIzdT3Z5AfmzJNypUGURaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJkMmRiOWEtODkyZS0z M2NjLTgwYTUtZTViYWJiM2Q1MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoLdA0elHuSpg1nAOtyz9FSn+5HIicC/9wr1a2aSxuflT6Y6Mn1JmRR ampErhI6910AGrVbVw/7iMYsG6VwZSO2+qQ+5guM7ZJ9c3y8aNHljMJG999qr+rI C++C8TiGgCGJee1oRPxcMrPJE09N10wnkLtHXk7KAD8lhipK6DGLZBXSouu7TlKO V7Yd94W92mo4CR7oLNnH6fqIqdX58B2EuQYR6Wfo8pM3j+/4gBjjYqPQ82xjngRg whrkhEDct8L3Lh13uQ8LrzcD4Fsm9zFBNRyQZsVe0KYUJSSDutQBWjWFX8t5fe/c lctsFOyI0tK6WaT7JRz9EbsAW8cksfg= -----END CERTIFICATE-----Generated at Thu Oct 1 12:35:47 2026 by rpki-client