$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa File: 1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa (raw, json) Hash identifier: DI3s5Bna6iIDrgG65aDO9JvVrVlgNp6jSS0YRKO0zFs= Subject key identifier: BB:1D:9F:3F:48:2C:21:46:29:25:83:3B:AC:F1:6A:9C:FF:E9:E2:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9A2959F894BDD2D00D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.145.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9a:29:59:f8:94:bd:d2:d0:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=61e66b78-c6ee-401e-a922-e05740d5e019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:6e:66:89:bf:8c:13:34:97:14:91:65:82: 76:98:a5:86:e6:0c:0e:c0:96:6b:94:73:d3:b1:22: 23:85:b6:83:f7:d2:e7:b6:60:13:7e:3a:d6:2a:b9: 32:67:78:a5:69:00:54:5c:d9:49:7e:9c:92:15:25: 7b:e4:34:77:74:16:f2:da:7e:2d:b4:97:cc:24:43: eb:56:27:20:14:fc:97:cd:3e:de:80:af:77:2a:9d: be:5c:b6:d5:ea:13:7c:08:96:0f:c7:4f:f3:b8:fa: a0:5e:24:65:b3:0e:c7:ec:d2:ed:93:14:78:b5:2e: eb:21:27:38:7a:e5:2e:3d:b5:ac:66:5f:5d:32:e8: 31:e2:0e:33:43:49:49:ad:20:cc:fc:d4:f5:62:c0: 61:28:b7:8c:ff:11:6f:e8:0e:c7:0d:cd:de:d2:ae: 09:be:af:52:05:e1:e6:0b:06:98:08:ce:a6:b6:4c: dc:30:f7:64:04:0c:a7:8f:b0:55:dc:b9:d1:db:de: a9:9b:65:6a:29:eb:65:0f:0e:43:1f:58:79:96:f2: 2b:e2:f9:d6:27:be:3c:50:fc:85:02:81:f6:3f:9b: ac:de:5c:a2:b1:f1:42:f5:84:d8:31:b5:41:be:f4: 76:c6:90:da:58:fd:cc:08:c5:b0:fc:2c:02:50:c3: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:9F:3F:48:2C:21:46:29:25:83:3B:AC:F1:6A:9C:FF:E9:E2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:75:d2:81:3e:90:ef:42:1d:66:54:ce:06:13:10:d2:fe:ec: 18:6e:6b:89:d8:1e:c9:f9:a6:59:25:79:e3:12:b4:f7:9b:4b: 5b:8e:39:14:b3:95:49:cd:e3:a5:f9:ec:55:e9:b3:56:e2:d6: cd:ba:c2:f6:87:f5:ea:7a:8f:09:d3:92:fd:98:0c:3a:44:4f: 2a:f1:f7:24:6a:e0:0c:5d:11:ef:f4:64:8d:d5:59:ef:10:99: 38:db:88:6e:99:45:50:59:62:c1:6d:f6:93:9d:55:32:e4:25: cd:65:95:dd:2a:c6:ef:d8:75:3e:27:02:00:3a:d8:fe:93:46: 83:06:81:47:76:4f:5c:37:c9:1b:cd:14:d9:30:37:d0:0c:de: d1:a7:f7:6f:05:46:53:3d:61:8d:b6:28:e8:cf:c6:70:a5:dc: 83:1e:7e:1b:86:dd:0b:53:65:bc:2f:d3:f7:85:a9:bc:f3:37: 55:22:4e:07:d0:ee:bd:2b:28:a6:e5:8c:34:7a:0f:fc:77:9e: 4f:76:c1:f7:1a:0f:77:f1:e9:54:95:4a:f5:fe:1a:86:fc:5a: 07:64:19:fc:dc:16:4e:b1:8a:7d:4c:57:de:6f:d0:6e:eb:91: de:59:64:4c:5d:3c:05:ee:ea:e7:27:fd:13:09:42:b2:e6:e2: 3e:0c:8d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZopWfiUvdLQDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjFlNjZiNzgtYzZlZS00MDFlLWE5MjItZTA1NzQwZDVlMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouZuZom/jBM0lxSRZYJ2mKWG5gwOwJZrlHPT sSIjhbaD99LntmATfjrWKrkyZ3ilaQBUXNlJfpySFSV75DR3dBby2n4ttJfMJEPr VicgFPyXzT7egK93Kp2+XLbV6hN8CJYPx0/zuPqgXiRlsw7H7NLtkxR4tS7rISc4 euUuPbWsZl9dMugx4g4zQ0lJrSDM/NT1YsBhKLeM/xFv6A7HDc3e0q4Jvq9SBeHm CwaYCM6mtkzcMPdkBAynj7BV3LnR296pm2VqKetlDw5DH1h5lvIr4vnWJ748UPyF AoH2P5us3lyisfFC9YTYMbVBvvR2xpDaWP3MCMWw/CwCUMPgDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsdnz9ILCFGKSWDO6zxapz/6eIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWFmNWE4YWEtYjBiYi0z M2RlLWE4MmYtY2I3Y2RmOWMyOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKl10oE+kO9CHWZUzgYTENL+7Bhua4nYHsn5plkleeMStPebS1uOORSz lUnN46X57FXps1bi1s26wvaH9ep6jwnTkv2YDDpETyrx9yRq4AxdEe/0ZI3VWe8Q mTjbiG6ZRVBZYsFt9pOdVTLkJc1lld0qxu/YdT4nAgA62P6TRoMGgUd2T1w3yRvN FNkwN9AM3tGn928FRlM9YY22KOjPxnCl3IMefhuG3QtTZbwv0/eFqbzzN1UiTgfQ 7r0rKKbljDR6D/x3nk92wfcaD3fx6VSVSvX+Gob8WgdkGfzcFk6xin1MV95v0G7r kd5ZZExdPAXu6ucn/RMJQrLm4j4MjQw= -----END CERTIFICATE-----Generated at Tue Sep 29 05:05:51 2026 by rpki-client