$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa File: 2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa (raw, json) Hash identifier: L9U/7jb3LLBFI73RL60wquw+ZozdzlVuuTYzJYDF06g= Subject key identifier: E2:CC:AB:63:48:4F:EF:40:11:2A:D6:DB:FB:3E:31:11:EF:78:CA:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB0EAC4B80BD041714080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.77.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b0:ea:c4:b8:0b:d0:41:71:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=83f43921-26fb-4a96-a86c-be6a7421fdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:10:d4:43:62:c7:e4:cf:38:ed:6e:18:bc: 88:db:74:d2:cc:e5:0e:37:c3:f8:81:2e:6c:f6:55: 4f:dd:53:69:54:e3:60:6c:7c:18:9d:45:bf:13:0d: 00:d5:a1:7e:ac:2b:22:3f:57:c5:45:f6:53:ae:6b: fd:e6:f8:68:a8:9c:83:3d:8b:a3:8f:ff:e4:53:56: 94:b3:af:ab:12:9b:20:ac:1f:28:fe:f6:f1:db:15: e1:3f:4f:9c:64:2e:9a:60:e5:b3:43:da:c9:bb:20: 07:99:b5:36:db:4c:d3:d1:5b:d4:c0:70:ce:e2:6c: 73:3f:d2:e6:9e:42:6b:f4:94:5f:59:d2:ff:29:c0: 41:c0:e2:88:f2:c9:fa:70:b7:e3:d7:15:61:a6:ef: 16:9d:42:d7:d9:94:be:2f:33:2b:86:fa:75:b8:c4: e7:e6:e9:47:8b:ba:1b:96:7c:da:c9:d5:9a:3c:c9: f2:23:3a:72:12:92:34:15:61:75:86:ac:b5:a1:8b: ab:10:0c:9c:9f:76:db:f2:07:d1:5c:7b:81:eb:25: ed:31:c2:e7:3c:8f:3d:4a:c1:b3:44:51:9b:ba:24: 96:c5:1d:dd:de:9c:0d:48:93:e8:f7:5e:e6:be:6e: 60:a5:5f:aa:f7:bc:07:13:32:08:6b:17:cc:f1:8b: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CC:AB:63:48:4F:EF:40:11:2A:D6:DB:FB:3E:31:11:EF:78:CA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.77.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bf:fe:cf:a5:12:0e:e8:5e:a0:30:1c:a6:f3:b6:53:c6:40: 32:18:e4:c7:d2:0d:3a:69:ff:3b:40:69:5e:8d:24:b1:7b:22: 7c:69:d9:ff:87:d2:7e:72:21:b9:be:c4:a6:78:e1:66:1b:0b: bf:89:78:6b:e4:16:df:c5:b2:d6:4f:65:a3:cf:a4:98:ca:95: 86:58:ad:df:63:f3:69:1c:62:f4:6c:0f:4c:2e:5e:91:56:84: a1:81:e8:c6:b7:34:a3:9f:25:c6:e1:c0:f7:65:62:2e:4d:77: 87:c1:b3:1e:54:eb:fc:d7:92:a2:f8:74:04:c9:22:01:4c:b2: f1:82:39:59:2a:02:e6:5c:24:0b:f5:3c:54:4e:d9:83:da:5a: 85:e1:e2:59:d7:d5:36:14:22:6e:cb:a8:87:6f:30:60:88:45: e0:e5:98:96:1d:11:b9:6f:22:74:a3:21:f7:94:59:fb:43:cf: 94:d4:8c:48:9e:20:49:ea:dd:6b:d8:7b:cc:83:c7:ae:61:7a: f6:86:e6:1a:87:35:f2:01:12:b5:b0:ae:ce:53:78:05:9c:78: 1d:76:dd:97:30:a2:b3:1c:be:ba:86:46:7f:13:7a:06:ee:b3: 30:4b:ed:e4:c8:ec:05:3a:b6:d9:75:09:91:84:83:ab:01:40: 21:7a:19:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbDqxLgL0EFxQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODNmNDM5MjEtMjZmYi00YTk2LWE4NmMtYmU2YTc0MjFmZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTwQ1ENix+TPOO1uGLyI23TSzOUON8P4gS5s 9lVP3VNpVONgbHwYnUW/Ew0A1aF+rCsiP1fFRfZTrmv95vhoqJyDPYujj//kU1aU s6+rEpsgrB8o/vbx2xXhP0+cZC6aYOWzQ9rJuyAHmbU220zT0VvUwHDO4mxzP9Lm nkJr9JRfWdL/KcBBwOKI8sn6cLfj1xVhpu8WnULX2ZS+LzMrhvp1uMTn5ulHi7ob lnzaydWaPMnyIzpyEpI0FWF1hqy1oYurEAycn3bb8gfRXHuB6yXtMcLnPI89SsGz RFGbuiSWxR3d3pwNSJPo917mvm5gpV+q97wHEzIIaxfM8YtwdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLMq2NIT+9AESrW2/s+MRHveMqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmU3OGY3ZmYtN2M1Ni0z N2YxLThlYTAtZWUzMzRiMWFkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC//s+lEg7oXqAwHKbztlPGQDIY5MfSDTpp/ztAaV6NJLF7Inxp2f+H 0n5yIbm+xKZ44WYbC7+JeGvkFt/FstZPZaPPpJjKlYZYrd9j82kcYvRsD0wuXpFW hKGB6Ma3NKOfJcbhwPdlYi5Nd4fBsx5U6/zXkqL4dATJIgFMsvGCOVkqAuZcJAv1 PFRO2YPaWoXh4lnX1TYUIm7LqIdvMGCIReDlmJYdEblvInSjIfeUWftDz5TUjEie IEnq3WvYe8yDx65hevaG5hqHNfIBErWwrs5TeAWceB123ZcworMcvrqGRn8Tegbu szBL7eTI7AU6ttl1CZGEg6sBQCF6GRg= -----END CERTIFICATE-----Generated at Mon Sep 28 20:48:34 2026 by rpki-client