$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af8bcce-5bfa-315f-8763-a8a6102f7667.roa File: 1af8bcce-5bfa-315f-8763-a8a6102f7667.roa (raw, json) Hash identifier: o/GuCkW81It+uI7WaGzoWAm/BqQAa/fPvxXaTdz3erA= Subject key identifier: B3:C8:F6:34:89:C1:C4:2A:83:DD:5A:B9:66:29:74:0E:91:20:66:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F5767F3ECDAFE8AFF0951DDC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af8bcce-5bfa-315f-8763-a8a6102f7667.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.164.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:f3:ec:da:fe:8a:ff:09:51:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=d00b8e07-0280-4eae-999e-d7d63ec4476d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:a9:46:d3:47:11:19:4f:5c:f4:c8:5c:eb: 71:36:ba:ef:f4:44:86:09:2e:03:16:b6:e4:24:82: 33:d9:d1:b9:10:69:01:80:f4:2d:86:21:02:85:86: 20:1c:e9:2a:d9:34:87:d0:40:1d:a9:84:87:34:3a: aa:b0:43:14:45:ee:62:f9:18:60:21:b7:d6:ae:4c: 58:05:b8:56:fa:e0:a5:22:5e:d4:05:69:60:21:14: 23:ac:e4:37:4e:47:75:0b:01:28:6d:24:a8:13:67: f5:b2:13:ca:6f:7d:14:79:34:2a:ad:7e:a9:02:8c: e6:b3:b4:02:ce:92:7f:84:89:e1:94:88:95:e8:4c: 5e:b5:a7:a6:58:cd:fb:5a:2f:6c:24:df:5e:1d:8e: 43:b5:ff:ba:cc:96:e0:e2:18:9f:d2:3e:71:ee:c5: cb:77:dc:8a:77:97:13:61:2f:81:94:93:95:d5:33: 53:8b:bf:d8:ab:0d:15:08:01:1e:f5:99:8e:0a:c7: ac:8c:a7:aa:46:49:4c:d1:d6:10:4c:bc:be:6f:de: 9f:a9:6c:6c:18:74:72:fa:2b:58:e4:15:23:f2:7b: 8e:9a:9e:ce:48:6f:6e:07:8e:fd:92:2b:8a:ca:9a: b6:37:8f:28:9a:20:45:93:36:7e:31:14:7e:31:ab: 45:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:F6:34:89:C1:C4:2A:83:DD:5A:B9:66:29:74:0E:91:20:66:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af8bcce-5bfa-315f-8763-a8a6102f7667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.164.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4b:cf:58:89:75:a9:a8:eb:ff:4e:51:32:ad:bf:61:24:65: ab:b4:c2:b1:95:5b:ac:23:2b:ac:f6:fe:be:40:94:79:35:9a: e9:20:00:df:cf:43:e0:9a:86:a9:18:70:5e:3f:3a:3f:be:eb: d1:67:08:ae:24:35:63:b9:cf:15:98:91:09:ea:7d:bb:77:28: ba:5b:8f:ba:8e:e4:04:86:78:12:aa:83:7c:a6:20:66:40:5c: 16:40:9d:7c:bd:dd:77:c9:66:6e:77:48:ae:00:93:ba:5b:85: e2:7c:2d:06:90:2d:fb:72:77:09:c8:17:e8:67:05:2b:02:f8: 11:44:2d:a5:dd:e1:75:8e:3a:08:46:c1:f3:4b:66:6c:f4:4a: dc:ce:45:e1:3e:fe:56:65:16:80:64:f2:4c:a8:dd:ad:9e:ee: 78:92:46:67:02:ad:a5:09:2f:27:35:b2:87:82:73:3a:37:42: 48:3f:5c:f7:a4:f1:8c:ff:72:b2:29:30:7c:69:ea:aa:13:e8: 2f:3e:6a:f0:97:d5:17:4d:8f:69:8b:6d:ee:26:c2:de:db:58: eb:1b:98:d8:b0:ea:46:b6:c5:39:2d:da:be:d1:f6:65:40:f6: 19:05:bc:a2:2f:b7:f8:a3:2e:76:c8:18:33:f9:d2:46:9f:26: 9d:6f:09:cc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9XZ/Ps2v6K/wlR3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZDAwYjhlMDctMDI4MC00ZWFlLTk5OWUtZDdkNjNlYzQ0NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA2pRtNHERlPXPTIXOtxNrrv9ESGCS4DFrbk JIIz2dG5EGkBgPQthiEChYYgHOkq2TSH0EAdqYSHNDqqsEMURe5i+RhgIbfWrkxY BbhW+uClIl7UBWlgIRQjrOQ3Tkd1CwEobSSoE2f1shPKb30UeTQqrX6pAozms7QC zpJ/hInhlIiV6ExetaemWM37Wi9sJN9eHY5Dtf+6zJbg4hif0j5x7sXLd9yKd5cT YS+BlJOV1TNTi7/Yqw0VCAEe9ZmOCsesjKeqRklM0dYQTLy+b96fqWxsGHRy+itY 5BUj8nuOmp7OSG9uB479kiuKypq2N48omiBFkzZ+MRR+MatFgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLPI9jSJwcQqg91auWYpdA6RIGbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWFmOGJjY2UtNWJmYS0z MTVmLTg3NjMtYThhNjEwMmY3NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHkvPWIl1qajr/05RMq2/YSRlq7TCsZVbrCMrrPb+vkCUeTWa6SAA389D 4JqGqRhwXj86P77r0WcIriQ1Y7nPFZiRCep9u3couluPuo7kBIZ4EqqDfKYgZkBc FkCdfL3dd8lmbndIrgCTuluF4nwtBpAt+3J3CcgX6GcFKwL4EUQtpd3hdY46CEbB 80tmbPRK3M5F4T7+VmUWgGTyTKjdrZ7ueJJGZwKtpQkvJzWyh4JzOjdCSD9c96Tx jP9ysikwfGnqqhPoLz5q8JfVF02PaYtt7ibC3ttY6xuY2LDqRrbFOS3avtH2ZUD2 GQW8oi+3+KMudsgYM/nSRp8mnW8JzA== -----END CERTIFICATE-----Generated at Sat Oct 10 16:54:59 2026 by rpki-client