$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa File: 28cafba3-d523-3fda-92a2-893bf9b3ee11.roa (raw, json) Hash identifier: kNbpGgRZ9O/IoUpHw36iyHgc6dxoKdhqFbTD0SujZ1o= Subject key identifier: DB:25:15:09:73:6C:AA:FF:36:FE:E6:87:C0:B5:A5:A2:D2:42:73:0E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CE11473D4D3F4FB44D780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.100.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:e1:14:73:d4:d3:f4:fb:44:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6c15636a-316b-4744-80ee-3d0b419f5dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:c3:b7:ee:57:ec:15:d5:02:33:cc:98:45: b0:4e:41:98:fc:35:60:04:8c:e6:d4:fe:d7:33:b5: 61:66:16:1e:94:ff:92:36:7b:43:53:0d:ff:5c:24: 96:94:28:ed:0a:54:b8:82:3b:31:28:b4:c8:1d:e2: 98:d2:68:ab:20:61:08:aa:bb:7e:df:4d:d3:4f:c2: f4:63:00:07:51:e5:f9:e9:7e:93:fa:39:5a:aa:0e: d0:19:8f:ec:df:19:6e:bb:2a:96:9a:0e:8b:41:31: 08:44:94:fc:ef:23:38:ab:fe:af:23:a8:b7:de:c0: 48:44:6e:f8:47:bd:c1:e1:8f:bc:f5:16:6f:48:4d: 08:d9:29:8b:13:a1:72:79:0a:d2:f4:f9:48:fa:6d: 54:b6:4f:2c:a5:d4:85:3a:f1:6f:d1:73:b8:1a:7b: 77:33:07:fa:8b:b5:7c:62:4a:64:c1:be:dc:e9:81: f4:1e:0e:14:9d:fd:0d:39:11:3f:19:88:8a:ab:5a: b9:51:40:8f:15:72:11:d5:ea:88:6b:a4:b1:07:ce: 55:48:fc:0f:40:3d:b7:9c:84:b8:b6:ee:63:21:68: 89:93:92:5b:bb:78:ce:08:d9:5b:57:ed:2c:7b:12: d9:92:d0:7b:54:9b:f1:78:0f:65:69:e6:a5:bb:60: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:25:15:09:73:6C:AA:FF:36:FE:E6:87:C0:B5:A5:A2:D2:42:73:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f3:8b:15:06:fa:9f:56:20:87:0e:a2:2e:4f:66:30:54:64: a1:82:10:16:fc:1a:11:02:bf:03:3b:e0:17:b4:fb:7e:83:a4: 1b:a1:33:8d:7a:7c:93:54:20:73:68:f8:d0:61:a4:23:ab:2e: 58:15:f9:e2:45:c1:7f:fc:d9:95:cf:35:b3:90:0e:65:db:50: 76:c3:63:e4:13:20:28:03:4e:7c:19:67:ab:1e:81:25:73:8f: a4:12:76:31:4d:6d:d4:62:72:ed:83:0a:ea:b7:f0:67:36:84: 30:62:51:9d:51:cf:47:ed:9f:8b:41:7f:02:5a:67:47:a3:77: 85:30:4d:a4:e9:0a:63:3f:af:29:90:15:fd:37:b3:98:ef:2d: 77:88:5a:f0:d9:11:fe:59:3c:33:27:71:28:ec:07:68:a4:7a: 0d:cc:d3:ca:33:21:e3:5c:ad:5e:1a:67:fe:c5:88:f7:1e:87: c7:02:e9:9b:62:20:73:56:c7:a5:10:d7:e0:d9:80:a9:db:ad: 52:92:72:df:9a:21:73:a7:bd:b5:0c:88:9e:c4:d2:12:70:c3: 06:22:02:d0:a4:2e:f7:d7:77:10:d8:a0:3b:87:5a:72:13:c9: a6:85:39:35:84:26:ea:b3:bb:ee:6c:d7:a5:91:cc:9e:1e:01: 4b:b9:cd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfOEUc9TT9PtE14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmMxNTYzNmEtMzE2Yi00NzQ0LTgwZWUtM2QwYjQxOWY1ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFTDt+5X7BXVAjPMmEWwTkGY/DVgBIzm1P7X M7VhZhYelP+SNntDUw3/XCSWlCjtClS4gjsxKLTIHeKY0mirIGEIqrt+303TT8L0 YwAHUeX56X6T+jlaqg7QGY/s3xluuyqWmg6LQTEIRJT87yM4q/6vI6i33sBIRG74 R73B4Y+89RZvSE0I2SmLE6FyeQrS9PlI+m1Utk8spdSFOvFv0XO4Gnt3Mwf6i7V8 Ykpkwb7c6YH0Hg4Unf0NORE/GYiKq1q5UUCPFXIR1eqIa6SxB85VSPwPQD23nIS4 tu5jIWiJk5Jbu3jOCNlbV+0sexLZktB7VJvxeA9laealu2DuNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNslFQlzbKr/Nv7mh8C1paLSQnMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhjYWZiYTMtZDUyMy0z ZmRhLTkyYTItODkzYmY5YjNlZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDzixUG+p9WIIcOoi5PZjBUZKGCEBb8GhECvwM74Be0+36DpBuhM416 fJNUIHNo+NBhpCOrLlgV+eJFwX/82ZXPNbOQDmXbUHbDY+QTICgDTnwZZ6segSVz j6QSdjFNbdRicu2DCuq38Gc2hDBiUZ1Rz0ftn4tBfwJaZ0ejd4UwTaTpCmM/rymQ Ff03s5jvLXeIWvDZEf5ZPDMncSjsB2ikeg3M08ozIeNcrV4aZ/7FiPceh8cC6Zti IHNWx6UQ1+DZgKnbrVKSct+aIXOnvbUMiJ7E0hJwwwYiAtCkLvfXdxDYoDuHWnIT yaaFOTWEJuqzu+5s16WRzJ4eAUu5zbw= -----END CERTIFICATE-----Generated at Mon Sep 28 20:42:14 2026 by rpki-client