$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa File: 5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa (raw, json) Hash identifier: 49jSbxoeZq7ZYmd2gWRIT2swM4GgOvLSRFOVsQ4xs9w= Subject key identifier: 30:2C:CC:51:BA:32:68:F0:54:8B:CE:5E:DF:26:29:8A:FE:D2:5A:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DDE1EFF4D85A8C1CED080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.86.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:de:1e:ff:4d:85:a8:c1:ce:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ebb86fb8-4d32-42d9-b56c-ad69a9282dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9d:f3:d4:bc:29:20:3a:64:3f:f7:04:a2:2d: 2f:6a:44:27:5b:c6:94:5f:81:db:6f:76:ec:63:0c: 59:db:fd:e5:ee:d1:bb:c2:d8:05:e8:06:a1:32:cf: e6:44:ae:76:75:4a:7d:8e:5b:c2:a5:a7:55:bd:ef: 7b:b5:38:76:16:f7:82:21:65:86:b0:7c:b8:0d:1f: f3:a6:c6:ee:66:2e:f0:e2:1c:17:e1:12:fe:5c:5e: 82:e0:8f:a6:c4:6c:2f:e1:57:b1:b8:3a:63:57:fe: 49:7a:72:fe:24:ef:bd:a2:17:b9:b2:e5:2c:8b:f5: d1:74:1e:ac:20:7f:58:80:1d:96:3b:bf:cb:d3:28: 3d:c9:dd:8d:e2:c6:ee:fc:30:8f:d7:14:35:62:93: 37:df:e6:3b:14:6c:c2:88:52:41:03:54:8f:19:26: c6:b2:d7:47:06:7e:27:07:33:7e:a1:43:8d:ea:fd: 1e:33:06:a9:b2:85:94:a0:76:ef:67:4d:5d:9e:e4: b1:f8:bb:20:28:e9:8d:b1:6d:cf:b6:d9:fe:18:d2: 35:71:5c:7f:fe:f1:8a:52:f1:ef:2f:a7:84:1e:e0: 4d:11:e3:d8:34:96:d6:d4:3b:b8:d9:87:9d:db:dc: 50:06:5f:4d:f6:42:55:f2:ea:b4:e9:67:fe:76:c5: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2C:CC:51:BA:32:68:F0:54:8B:CE:5E:DF:26:29:8A:FE:D2:5A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:52:3b:43:51:a9:4e:da:4d:cf:e0:5a:f4:88:84:7e:a6:7b: e9:4f:86:84:64:59:05:8e:19:76:b3:89:e9:2b:70:03:05:f9: c6:42:bc:13:9d:c3:de:c3:85:9f:86:98:32:eb:c2:22:ae:74: 35:ca:3c:3b:b7:68:63:07:d9:bc:82:71:49:d3:90:04:70:c4: 42:c5:16:58:39:dc:57:1c:9f:ca:fa:cc:31:b8:46:4d:71:91: c5:1b:3a:be:ad:8c:4e:69:06:62:d6:7f:04:0a:d3:0c:fb:92: 95:4c:72:82:ab:ba:bd:ef:76:66:90:dc:f0:87:fe:2e:37:9d: 33:55:d9:84:e2:f9:55:44:a9:e7:6e:6c:75:20:5f:19:4e:fe: ec:62:9d:c4:3e:be:15:f0:ee:df:a0:27:f1:a5:57:a4:b8:ad: 33:cb:e3:7e:b8:5d:3c:55:e4:f6:d0:3e:84:da:7f:04:04:82: 47:10:ef:ae:0c:e7:f1:70:bb:c8:7c:6d:d0:b1:29:22:f8:7d: 33:d5:46:ed:68:f7:27:97:ec:d0:d2:50:fd:b1:dd:5d:c0:29: bd:d5:b1:c3:22:40:94:4a:90:1c:22:c0:cd:c0:db:df:b6:34: 13:ad:0c:31:51:b8:94:d7:5a:3a:44:95:91:2d:d8:bc:cb:9c: c1:c4:d0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd4e/02FqMHO0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWJiODZmYjgtNGQzMi00MmQ5LWI1NmMtYWQ2OWE5MjgyZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp3z1LwpIDpkP/cEoi0vakQnW8aUX4Hbb3bs YwxZ2/3l7tG7wtgF6AahMs/mRK52dUp9jlvCpadVve97tTh2FveCIWWGsHy4DR/z psbuZi7w4hwX4RL+XF6C4I+mxGwv4VexuDpjV/5JenL+JO+9ohe5suUsi/XRdB6s IH9YgB2WO7/L0yg9yd2N4sbu/DCP1xQ1YpM33+Y7FGzCiFJBA1SPGSbGstdHBn4n BzN+oUON6v0eMwapsoWUoHbvZ01dnuSx+LsgKOmNsW3Pttn+GNI1cVx//vGKUvHv L6eEHuBNEePYNJbW1Du42Yed29xQBl9N9kJV8uq06Wf+dsXAQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAszFG6MmjwVIvOXt8mKYr+0loUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWVjNTFkNGUtM2EyMS0z OWExLTk0ZDgtZTE4OTlkZjBlYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJSO0NRqU7aTc/gWvSIhH6me+lPhoRkWQWOGXaziekrcAMF+cZCvBOd w97DhZ+GmDLrwiKudDXKPDu3aGMH2byCcUnTkARwxELFFlg53Fccn8r6zDG4Rk1x kcUbOr6tjE5pBmLWfwQK0wz7kpVMcoKrur3vdmaQ3PCH/i43nTNV2YTi+VVEqedu bHUgXxlO/uxincQ+vhXw7t+gJ/GlV6S4rTPL4364XTxV5PbQPoTafwQEgkcQ764M 5/Fwu8h8bdCxKSL4fTPVRu1o9yeX7NDSUP2x3V3AKb3VscMiQJRKkBwiwM3A29+2 NBOtDDFRuJTXWjpElZEt2LzLnMHE0EY= -----END CERTIFICATE-----Generated at Sun Sep 27 08:49:30 2026 by rpki-client