$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ed0a36-660d-3cef-a30d-8e8ffca4c71d.roa File: 19ed0a36-660d-3cef-a30d-8e8ffca4c71d.roa (raw, json) Hash identifier: hInvqbRpwrn+VIpuPkOQ1GuLCmXhy15q154x7zmeC4I= Subject key identifier: 09:C0:DC:9D:37:4F:49:A5:9B:CB:9B:F3:3B:77:42:EF:4D:76:7D:7E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA78ADAC9BA9ACB07A780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ed0a36-660d-3cef-a30d-8e8ffca4c71d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.148.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a7:8a:da:c9:ba:9a:cb:07:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=20e5968b-a931-46f1-b280-40b8d0875d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:b6:50:9b:01:41:66:f5:97:7e:da:87:01: 68:ba:ea:f1:5f:5e:31:83:09:25:c8:a7:b3:58:43: 7d:25:39:ae:35:13:c7:52:ab:72:6e:75:87:90:b4: 12:ba:8e:3a:76:65:6a:6f:2f:c9:99:a6:2f:42:e0: 28:99:ec:a7:c6:c4:e4:27:b5:27:9b:fc:72:21:bd: 0f:d7:eb:a7:f5:9b:26:7a:50:f8:e5:f0:e9:4f:87: ac:b2:c9:ce:f2:12:57:46:e9:ff:04:9f:cf:48:43: a3:0f:d0:32:11:2b:c3:d1:b8:c2:5b:7a:5c:f1:95: 69:f6:ed:47:30:8e:b1:fd:c6:96:9f:66:37:af:7e: 26:60:09:f6:38:c8:a5:8a:cb:b5:91:d3:9f:42:6f: 74:39:1d:b6:5b:34:ab:b7:50:4f:91:50:72:df:29: 32:b0:6c:7d:86:3a:e2:2c:eb:5d:2b:6d:e7:96:ef: e9:f8:6f:6b:ce:8a:da:26:7e:5e:67:1d:bd:0c:ad: 70:53:ed:0f:f5:a1:c7:3b:dd:e2:91:23:97:85:58: d5:5a:85:a2:ec:71:1b:21:ed:86:23:8b:67:e7:2e: 98:43:39:fc:ec:f7:65:b5:c4:34:81:e6:70:db:de: 44:2b:90:9f:1f:42:da:21:d7:56:06:90:2f:ac:7a: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:DC:9D:37:4F:49:A5:9B:CB:9B:F3:3B:77:42:EF:4D:76:7D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ed0a36-660d-3cef-a30d-8e8ffca4c71d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:76:96:ef:24:45:26:08:96:5d:77:ea:4b:72:4e:56:a1:a6: 6d:1c:2b:12:df:ba:fd:86:03:e8:e4:42:e6:21:25:5e:40:27: 02:e3:20:c4:21:db:fc:02:94:37:b7:92:be:7f:c2:a3:7f:68: 00:f6:34:81:7f:88:c2:49:b1:30:5c:24:40:06:2c:1e:fd:c1: cd:d9:ce:bb:53:97:27:41:68:ce:b3:47:0e:44:eb:7a:a9:c2: 4b:fd:86:cf:37:26:30:77:b0:d4:b7:d9:8f:a0:00:43:92:fc: 2c:9f:e9:ed:53:52:5f:81:51:fc:4b:ed:13:b1:f3:c8:3e:98: 71:2b:79:36:a6:13:80:00:6f:c8:70:36:b2:49:76:62:14:56: 17:32:d0:ef:90:a1:45:63:82:1a:1c:3e:5d:bd:56:53:9c:57: 2d:ff:55:8d:66:59:52:ef:bf:e8:7c:ae:aa:52:7b:b6:dd:3a: e0:ba:94:f7:a6:c8:6e:7c:6f:36:61:a6:a7:2a:11:43:c2:e2: 2b:59:9b:69:aa:a4:34:da:ce:db:12:57:98:4a:be:79:cd:ee: f6:cd:ff:70:94:9f:3e:57:59:8c:be:22:9f:54:c5:d9:99:04: 63:ac:0b:d4:8e:9e:90:b4:52:75:c3:56:19:a3:78:13:d4:e8: 44:38:3d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaeK2sm6mssHp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjBlNTk2OGItYTkzMS00NmYxLWIyODAtNDBiOGQwODc1ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8q2UJsBQWb1l37ahwFouurxX14xgwklyKez WEN9JTmuNRPHUqtybnWHkLQSuo46dmVqby/JmaYvQuAomeynxsTkJ7Unm/xyIb0P 1+un9ZsmelD45fDpT4esssnO8hJXRun/BJ/PSEOjD9AyESvD0bjCW3pc8ZVp9u1H MI6x/caWn2Y3r34mYAn2OMilisu1kdOfQm90OR22WzSrt1BPkVBy3ykysGx9hjri LOtdK23nlu/p+G9rzoraJn5eZx29DK1wU+0P9aHHO93ikSOXhVjVWoWi7HEbIe2G I4tn5y6YQzn87PdltcQ0geZw295EK5CfH0LaIddWBpAvrHrszwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnA3J03T0mlm8ub8zt3Qu9Ndn1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTllZDBhMzYtNjYwZC0z Y2VmLWEzMGQtOGU4ZmZjYTRjNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN2lu8kRSYIll136ktyTlahpm0cKxLfuv2GA+jkQuYhJV5AJwLjIMQh 2/wClDe3kr5/wqN/aAD2NIF/iMJJsTBcJEAGLB79wc3ZzrtTlydBaM6zRw5E63qp wkv9hs83JjB3sNS32Y+gAEOS/Cyf6e1TUl+BUfxL7ROx88g+mHEreTamE4AAb8hw NrJJdmIUVhcy0O+QoUVjghocPl29VlOcVy3/VY1mWVLvv+h8rqpSe7bdOuC6lPem yG58bzZhpqcqEUPC4itZm2mqpDTaztsSV5hKvnnN7vbN/3CUnz5XWYy+Ip9UxdmZ BGOsC9SOnpC0UnXDVhmjeBPU6EQ4Pc0= -----END CERTIFICATE-----Generated at Sat Sep 26 15:27:07 2026 by rpki-client