$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895f24ca-03cd-315d-857e-42a4f594e647.roa File: 895f24ca-03cd-315d-857e-42a4f594e647.roa (raw, json) Hash identifier: jn0+FjdVAszaEW6f17cy7TKj5AuD6GK1/hbBLIyTKPk= Subject key identifier: 09:EB:1B:82:96:79:10:5B:4C:34:C1:8E:CB:6A:4A:F5:32:D5:AD:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DADFE1762C186C6C8F3E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895f24ca-03cd-315d-857e-42a4f594e647.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.133.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ad:fe:17:62:c1:86:c6:c8:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0ce4bf4c-062e-413a-a568-7acd75789c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:ec:ee:c0:12:d0:38:a9:37:b8:70:96:be: 33:4e:ed:83:86:6a:f2:50:19:5e:f7:8b:97:15:bc: 30:97:72:99:ae:12:05:8a:08:65:5c:3a:4f:bd:d4: f0:d3:0f:63:0a:e7:c2:1d:45:a0:0f:a1:71:b2:74: 79:17:c8:63:7d:94:34:88:8f:2b:c7:4d:60:82:0d: bc:bd:79:79:2d:f9:8f:a8:79:31:90:3c:4f:b9:91: cc:89:f6:5c:c2:cb:67:07:d8:2d:39:dc:32:5f:e4: fc:4a:cf:f8:e9:1e:e9:e1:80:48:d9:17:0b:e6:3d: a0:09:3e:09:1f:dc:6b:f9:19:67:3d:ce:6f:23:c5: ae:0a:f2:02:17:39:86:1a:f4:84:c8:cb:04:18:9a: 51:11:19:79:74:d0:4c:11:69:43:5a:6c:d0:f5:20: 96:ab:68:d4:53:b1:21:b9:5e:5c:db:4b:38:c3:ba: 5c:52:99:a3:f7:69:ad:b7:98:79:8e:ff:00:e4:17: ba:60:26:6f:e9:ba:da:54:51:d7:e1:89:f9:56:2d: f7:3c:4d:d5:a6:75:0e:31:ea:0f:d3:f7:a8:ad:08: 9b:7d:f0:7e:45:11:30:8b:23:2c:7e:00:06:ec:b8: bc:c9:37:4f:1d:0f:81:ef:dc:f2:a0:a0:d7:2e:6e: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:1B:82:96:79:10:5B:4C:34:C1:8E:CB:6A:4A:F5:32:D5:AD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895f24ca-03cd-315d-857e-42a4f594e647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:51:7d:e4:72:d4:03:84:05:b2:1f:52:ac:a8:07:d2:37:83: 7c:79:54:ca:39:de:7a:7c:c7:08:80:e9:b3:3d:a1:d6:31:95: 6f:b4:f5:eb:92:ac:4f:b3:ba:34:46:cc:d0:e0:fe:2d:c0:d5: b4:57:70:2d:19:17:4e:09:e2:3b:61:61:84:34:d0:ae:ff:32: ba:1f:05:7a:e9:18:3b:af:c7:e3:bc:46:72:a0:39:7c:7e:9d: 43:3b:cc:dd:91:32:4b:39:48:4d:37:07:54:64:46:d6:01:97: 4a:4a:a8:5a:ba:52:d5:a9:c4:96:81:2e:94:e2:64:8f:9a:bc: 80:e3:ad:9d:35:6b:f2:40:d4:8c:fc:ab:05:72:ab:44:79:1b: 78:b3:8a:20:73:37:ad:4c:a0:7d:0b:6d:3a:75:fa:47:3e:d0: bd:11:c0:09:d6:7b:5e:4a:94:b7:a3:6c:9c:c6:f5:b4:d9:e7: 7a:e2:c2:ac:d9:76:f2:db:cf:c2:58:98:47:31:88:5d:4c:e7: 96:d6:99:0b:8e:62:a7:a2:5a:86:1d:52:15:cb:9f:41:eb:b3: 22:0f:48:7b:aa:f3:c0:9c:db:6d:5f:95:de:9d:25:95:4e:43: f1:f5:34:8c:94:b9:02:24:23:17:85:d6:96:c5:46:81:99:39: e2:fc:7f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPa3+F2LBhsbI8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGNlNGJmNGMtMDYyZS00MTNhLWE1NjgtN2FjZDc1Nzg5YzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCrs7sAS0DipN7hwlr4zTu2DhmryUBle94uX Fbwwl3KZrhIFighlXDpPvdTw0w9jCufCHUWgD6FxsnR5F8hjfZQ0iI8rx01ggg28 vXl5LfmPqHkxkDxPuZHMifZcwstnB9gtOdwyX+T8Ss/46R7p4YBI2RcL5j2gCT4J H9xr+RlnPc5vI8WuCvICFzmGGvSEyMsEGJpRERl5dNBMEWlDWmzQ9SCWq2jUU7Eh uV5c20s4w7pcUpmj92mtt5h5jv8A5Be6YCZv6braVFHX4Yn5Vi33PE3VpnUOMeoP 0/eorQibffB+RREwiyMsfgAG7Li8yTdPHQ+B79zyoKDXLm4mWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnrG4KWeRBbTDTBjstqSvUy1a2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk1ZjI0Y2EtMDNjZC0z MTVkLTg1N2UtNDJhNGY1OTRlNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJRfeRy1AOEBbIfUqyoB9I3g3x5VMo53np8xwiA6bM9odYxlW+09euS rE+zujRGzNDg/i3A1bRXcC0ZF04J4jthYYQ00K7/MrofBXrpGDuvx+O8RnKgOXx+ nUM7zN2RMks5SE03B1RkRtYBl0pKqFq6UtWpxJaBLpTiZI+avIDjrZ01a/JA1Iz8 qwVyq0R5G3iziiBzN61MoH0LbTp1+kc+0L0RwAnWe15KlLejbJzG9bTZ53riwqzZ dvLbz8JYmEcxiF1M55bWmQuOYqeiWoYdUhXLn0HrsyIPSHuq88Cc221fld6dJZVO Q/H1NIyUuQIkIxeF1pbFRoGZOeL8f4c= -----END CERTIFICATE-----Generated at Mon Sep 28 22:39:50 2026 by rpki-client