$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb5839b3-8331-3bb2-81ae-db0e5b849ee7.roa File: eb5839b3-8331-3bb2-81ae-db0e5b849ee7.roa (raw, json) Hash identifier: f8OOUbUe9ylB4LdBfe7bkOhANVaedTwpX1GaA4CNaQ8= Subject key identifier: 03:12:39:3E:93:2E:54:0E:A4:81:01:5B:38:CB:41:0F:8E:39:56:75 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC612DE2D82161CA9B580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb5839b3-8331-3bb2-81ae-db0e5b849ee7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.65.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c6:12:de:2d:82:16:1c:a9:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0e9bd995-58a8-4e2f-9600-f0d409e24660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:94:a8:53:45:3d:5e:e1:47:78:94:60:62: f6:65:a0:85:23:8a:52:06:86:14:99:e9:3e:3d:3b: 72:a1:21:f7:9b:13:1b:a9:61:c8:45:aa:4f:73:5d: 3f:0f:31:7c:0b:ad:ac:50:57:e0:f4:6e:8f:be:ed: 3f:ae:dd:47:ef:75:46:fc:44:37:b7:91:6d:16:04: d7:7b:64:14:cb:40:67:ca:1e:54:a1:6f:b7:33:55: 72:20:4c:11:75:a5:6e:c9:7c:fb:36:b7:11:1f:f3: 35:a6:d4:10:4f:39:18:40:fe:2a:1c:3f:0f:71:6c: ff:a9:2d:0a:b4:a0:fc:b4:09:ca:5b:8c:cd:05:36: 80:ff:7a:4e:24:cf:f3:05:16:08:fc:1e:6e:9d:4c: 5d:84:03:86:62:a0:a8:07:bb:dd:43:58:f9:64:7e: 20:ff:9f:b7:2a:55:52:79:1e:9c:dd:18:ad:da:a1: 57:6b:04:d5:08:66:a2:52:25:eb:2b:90:fa:85:5e: e1:ca:8a:87:92:27:12:60:ca:18:e3:5f:33:25:c7: 53:e2:84:65:7d:55:df:a7:40:fa:bb:53:67:4e:fc: 91:1d:9b:dc:e5:74:6e:25:ab:71:3d:5e:85:06:4b: 41:da:56:0d:ff:13:09:43:aa:2f:cd:a0:28:2a:db: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:12:39:3E:93:2E:54:0E:A4:81:01:5B:38:CB:41:0F:8E:39:56:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eb5839b3-8331-3bb2-81ae-db0e5b849ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:0f:ea:a5:e9:ac:c6:4a:01:10:8b:fe:f9:e5:b9:d3:d1:bd: 40:9a:c1:37:e3:4e:03:b3:41:f8:f1:b6:c8:9f:f5:f4:c7:fc: 8e:f0:c7:a9:a1:4d:c4:f1:19:f4:75:ed:3b:d0:69:15:47:5a: e1:06:42:2f:8c:3d:da:60:39:8f:2a:84:50:17:49:bb:2a:33: 03:76:7b:bf:32:59:f7:99:17:9a:fc:b4:53:df:c2:6c:81:4b: 68:f8:e6:c3:55:e8:3e:f8:0a:90:76:bb:37:3e:29:57:f7:7e: 16:ca:72:f6:ca:22:74:c5:a8:c1:dc:7f:81:0a:e6:aa:d2:c4: 7c:d4:41:fc:3b:4e:d4:9e:15:0a:52:14:64:e7:e3:5d:07:0a: 1d:cc:3b:10:67:a7:56:28:f0:7c:1a:db:d4:37:e7:46:15:a6: 4f:ea:85:bd:f9:d3:aa:8d:89:6f:f0:55:14:91:83:4f:e2:a1: dd:d1:1e:51:49:f7:22:ea:2c:77:bd:37:1b:4a:dd:b1:be:b7: f0:0a:5d:5f:47:b3:4f:3e:1e:3b:9c:8f:aa:ca:96:9e:df:9f: ca:90:67:18:8c:82:3a:a6:dc:a9:b0:2f:6a:a0:f1:4f:2b:8a: bf:5a:44:02:a9:e8:dc:17:b1:9e:0d:0f:5a:03:e7:c2:d8:21: 3d:a6:33:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcYS3i2CFhyptYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGU5YmQ5OTUtNThhOC00ZTJmLTk2MDAtZjBkNDA5ZTI0NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotSUqFNFPV7hR3iUYGL2ZaCFI4pSBoYUmek+ PTtyoSH3mxMbqWHIRapPc10/DzF8C62sUFfg9G6Pvu0/rt1H73VG/EQ3t5FtFgTX e2QUy0Bnyh5UoW+3M1VyIEwRdaVuyXz7NrcRH/M1ptQQTzkYQP4qHD8PcWz/qS0K tKD8tAnKW4zNBTaA/3pOJM/zBRYI/B5unUxdhAOGYqCoB7vdQ1j5ZH4g/5+3KlVS eR6c3Rit2qFXawTVCGaiUiXrK5D6hV7hyoqHkicSYMoY418zJcdT4oRlfVXfp0D6 u1NnTvyRHZvc5XRuJatxPV6FBktB2lYN/xMJQ6ovzaAoKtsMKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMSOT6TLlQOpIEBWzjLQQ+OOVZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWI1ODM5YjMtODMzMS0z YmIyLTgxYWUtZGIwZTViODQ5ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8P6qXprMZKARCL/vnludPRvUCawTfjTgOzQfjxtsif9fTH/I7wx6mh TcTxGfR17TvQaRVHWuEGQi+MPdpgOY8qhFAXSbsqMwN2e78yWfeZF5r8tFPfwmyB S2j45sNV6D74CpB2uzc+KVf3fhbKcvbKInTFqMHcf4EK5qrSxHzUQfw7TtSeFQpS FGTn410HCh3MOxBnp1Yo8Hwa29Q350YVpk/qhb3506qNiW/wVRSRg0/iod3RHlFJ 9yLqLHe9NxtK3bG+t/AKXV9Hs08+Hjucj6rKlp7fn8qQZxiMgjqm3KmwL2qg8U8r ir9aRAKp6NwXsZ4ND1oD58LYIT2mM3E= -----END CERTIFICATE-----Generated at Sat Sep 26 07:41:45 2026 by rpki-client