$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa File: 2c91055f-20da-3c23-b862-dcdd076e260e.roa (raw, json) Hash identifier: ZByzpREbGh8apVC1cpbYFTG0VgazB6UKMMqbyn4Utk4= Subject key identifier: 3D:2A:E6:72:E7:46:DC:E2:5D:7F:1F:21:EF:69:02:5B:08:A0:7A:0E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD594B1D1AD8FB6804480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.89.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d5:94:b1:d1:ad:8f:b6:80:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8efdf548-012a-48b8-8fbc-3a3435d773df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f8:ae:ea:92:56:c0:43:b6:a4:8d:ea:0a:37: 78:05:18:c8:f6:4a:52:42:d6:df:e0:58:50:f4:84: 5e:db:d1:a8:96:19:3a:b7:44:d0:06:d1:e2:84:0a: fc:44:bb:84:46:c5:ef:33:1d:f3:15:4f:34:cc:e8: 5a:04:bf:02:b7:aa:e9:d4:54:d4:0c:06:83:53:1c: 8c:b4:28:52:63:44:5f:fc:c2:80:56:c6:9a:7d:e9: 82:cf:4a:ac:47:9e:f2:48:b2:7d:9d:04:42:b1:23: 6d:cf:70:a4:9f:a4:f0:0f:88:a2:5b:bd:49:dc:b4: 12:fa:42:47:dc:c6:e4:b0:81:5f:9e:97:b4:44:d6: c6:27:1a:22:01:c0:eb:e6:ae:34:b6:c2:e7:4f:c1: f1:60:d4:db:d0:02:95:f3:5b:80:be:2b:dc:42:d5: 1b:e1:6b:ff:2a:e9:55:54:ae:e5:79:f1:73:08:68: ff:d3:35:38:92:c3:c6:77:53:e8:b6:da:df:cb:db: 57:09:b8:98:36:e6:ed:03:f6:b3:ad:e2:e6:c2:90: d0:6c:15:fd:f5:27:a1:15:79:7c:fb:5a:63:2b:af: 4a:93:3d:c5:07:85:e8:f1:de:97:ce:f9:b1:80:ee: 88:44:64:db:53:ed:a5:73:c1:e0:fa:79:e4:71:22: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:E6:72:E7:46:DC:E2:5D:7F:1F:21:EF:69:02:5B:08:A0:7A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6b:70:a3:60:5c:ed:6e:df:c1:03:f9:01:1f:73:e1:46:23: 73:c8:f1:45:fa:b7:99:79:89:5b:b1:3c:6a:f6:72:dc:36:3c: 9e:3b:c3:c3:b1:ec:31:52:54:26:6b:b1:3e:1c:73:bf:60:4b: cd:10:15:bd:be:84:0a:32:b5:a6:7f:a5:f2:51:2e:6e:81:fe: 82:23:77:a6:a6:e1:8c:08:69:51:dd:57:6e:30:c7:60:08:cd: 89:5a:d2:e3:4c:0e:68:73:07:cf:db:3d:ff:9c:43:b3:be:d8: 4e:89:69:a7:e9:fe:8c:7e:28:1b:84:e8:db:1b:6e:df:1e:2b: 80:98:16:e6:94:52:d4:0d:7f:56:1f:5c:3b:1c:62:4f:df:d9: d5:8a:0c:d0:9f:0f:da:95:20:31:31:15:40:84:ff:d1:b0:10: b6:ae:16:0f:ba:90:59:9c:b4:f7:48:49:24:d4:7d:75:f2:66: 8c:6e:31:98:05:df:95:10:49:ca:47:78:3c:03:a2:f8:d4:c4: 80:e3:22:5c:d8:9c:ee:50:a3:4d:43:83:c9:c0:82:93:18:03: e6:8c:8b:bf:aa:7e:e8:81:c1:de:09:c7:2e:76:a3:79:af:49: f5:30:0a:73:8d:6e:53:c7:ab:e2:12:6f:7a:21:d6:c3:82:e7: f4:f1:f3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdWUsdGtj7aARIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGVmZGY1NDgtMDEyYS00OGI4LThmYmMtM2EzNDM1ZDc3M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/iu6pJWwEO2pI3qCjd4BRjI9kpSQtbf4FhQ 9IRe29Golhk6t0TQBtHihAr8RLuERsXvMx3zFU80zOhaBL8Ct6rp1FTUDAaDUxyM tChSY0Rf/MKAVsaafemCz0qsR57ySLJ9nQRCsSNtz3Ckn6TwD4iiW71J3LQS+kJH 3MbksIFfnpe0RNbGJxoiAcDr5q40tsLnT8HxYNTb0AKV81uAvivcQtUb4Wv/KulV VK7lefFzCGj/0zU4ksPGd1Pottrfy9tXCbiYNubtA/azreLmwpDQbBX99SehFXl8 +1pjK69Kkz3FB4Xo8d6XzvmxgO6IRGTbU+2lc8Hg+nnkcSIWQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0q5nLnRtziXX8fIe9pAlsIoHoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM5MTA1NWYtMjBkYS0z YzIzLWI4NjItZGNkZDA3NmUyNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5rcKNgXO1u38ED+QEfc+FGI3PI8UX6t5l5iVuxPGr2ctw2PJ47w8Ox 7DFSVCZrsT4cc79gS80QFb2+hAoytaZ/pfJRLm6B/oIjd6am4YwIaVHdV24wx2AI zYla0uNMDmhzB8/bPf+cQ7O+2E6Jaafp/ox+KBuE6Nsbbt8eK4CYFuaUUtQNf1Yf XDscYk/f2dWKDNCfD9qVIDExFUCE/9GwELauFg+6kFmctPdISSTUfXXyZoxuMZgF 35UQScpHeDwDovjUxIDjIlzYnO5Qo01Dg8nAgpMYA+aMi7+qfuiBwd4Jxy52o3mv SfUwCnONblPHq+ISb3oh1sOC5/Tx83s= -----END CERTIFICATE-----Generated at Sun Oct 4 22:49:32 2026 by rpki-client