$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa File: 8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa (raw, json) Hash identifier: DBwhwh8+rV0P6NlOfWYOrIkvKqHB9QOrPkm7hqVrBgQ= Subject key identifier: 78:11:58:6B:25:FB:9A:15:3A:13:20:18:CC:50:35:1E:B2:0C:41:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC07E6EE6135CDF2C80C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.34.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c0:7e:6e:e6:13:5c:df:2c:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c993db3e-618f-4653-ac7d-bc955ce86b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:58:6f:ee:7a:cc:55:14:12:30:7d:bf:e0: 1a:7b:2d:2a:31:2a:5e:0d:5d:6c:0d:86:aa:3c:16: fd:4d:60:d8:f3:e4:3e:8d:b6:0b:30:e0:ad:03:8e: 57:d6:fb:c5:3a:c9:da:45:ca:5b:1d:c8:d7:27:38: 5f:9e:ba:b0:78:9f:8b:99:95:fe:17:8f:c1:2c:ec: 91:5f:9d:16:87:b6:7c:62:99:e6:2c:d7:99:13:0f: a8:3d:2c:9f:a5:33:42:1a:c8:76:4b:c9:83:7c:01: c3:22:40:53:e2:5b:f0:c8:00:e1:33:bb:9d:74:12: 7b:93:03:98:23:fe:4c:5d:c5:60:21:b8:44:77:12: 17:bb:7d:76:bd:f3:f0:48:61:15:82:3d:2d:c1:0e: ac:ea:d7:c4:f6:9e:0e:38:72:72:85:32:55:5c:09: 63:c2:5d:77:29:b1:f3:66:a3:8d:61:32:18:9c:bb: 73:7d:8b:4b:3b:36:32:65:00:29:74:03:24:a8:3b: da:30:94:49:71:b6:22:0e:c5:10:55:63:50:c2:0d: 07:6a:ed:41:a6:81:1a:dd:10:b5:7e:10:e1:ab:d9: 93:8c:9b:d9:94:7f:67:49:ae:02:f3:dc:e0:f8:68: 5c:65:1d:5c:4d:d3:90:d7:59:25:cd:84:6e:8d:6c: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:11:58:6B:25:FB:9A:15:3A:13:20:18:CC:50:35:1E:B2:0C:41:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.34.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cc:74:8e:99:73:a2:eb:8e:59:c2:ee:4e:fc:31:18:31:91: c8:cd:c9:5c:ac:5c:6b:f4:1c:1d:93:9b:99:e9:46:7f:ff:93: c8:ee:e8:b9:74:08:23:78:b9:be:36:ed:cf:ef:3e:31:70:f8: 94:b1:54:1a:ca:1e:56:0f:8e:de:d4:90:92:8e:0f:48:f1:86: ba:d4:1d:63:2f:fd:1b:a9:2e:56:4e:25:eb:45:05:66:6c:e9: 02:9f:95:1d:df:f2:95:19:83:26:9a:df:f3:79:8d:f2:d8:c1: 37:ac:51:44:9d:48:bb:5c:19:37:69:ba:8f:7e:e3:e8:7f:64: 9b:5c:47:25:8f:ae:70:9c:92:bf:08:68:de:06:2d:6c:5d:8c: 00:de:a7:6f:81:e7:6f:87:03:b1:bb:50:6f:10:8e:7d:dd:03: 89:d9:00:de:6b:18:a8:4c:84:1c:7d:bd:e4:32:ef:ca:5d:00: 4e:8b:9e:96:c2:eb:62:20:f8:98:8e:b2:34:f9:b0:3a:bb:54: 08:ed:ff:de:08:36:b3:2b:04:fa:63:5a:cd:74:0c:88:ab:3a: 84:6b:6a:70:21:fd:87:19:88:bc:01:96:78:8b:47:25:77:0c: 87:48:8c:61:53:81:92:56:12:7b:53:53:e9:3e:d1:26:be:f3: c8:75:d9:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcB+buYTXN8sgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Yzk5M2RiM2UtNjE4Zi00NjUzLWFjN2QtYmM5NTVjZTg2YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHdYb+56zFUUEjB9v+Aaey0qMSpeDV1sDYaq PBb9TWDY8+Q+jbYLMOCtA45X1vvFOsnaRcpbHcjXJzhfnrqweJ+LmZX+F4/BLOyR X50Wh7Z8YpnmLNeZEw+oPSyfpTNCGsh2S8mDfAHDIkBT4lvwyADhM7uddBJ7kwOY I/5MXcVgIbhEdxIXu312vfPwSGEVgj0twQ6s6tfE9p4OOHJyhTJVXAljwl13KbHz ZqONYTIYnLtzfYtLOzYyZQApdAMkqDvaMJRJcbYiDsUQVWNQwg0Hau1BpoEa3RC1 fhDhq9mTjJvZlH9nSa4C89zg+GhcZR1cTdOQ11klzYRujWwN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgRWGsl+5oVOhMgGMxQNR6yDEGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGFmMGUxM2YtNjJjNC0z MmNkLWI4ZTYtNTJlOWYwZmVjMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIiLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHMdI6Zc6LrjlnC7k78MRgxkcjNyVysXGv0HB2Tm5npRn//k8ju6Ll0 CCN4ub427c/vPjFw+JSxVBrKHlYPjt7UkJKOD0jxhrrUHWMv/RupLlZOJetFBWZs 6QKflR3f8pUZgyaa3/N5jfLYwTesUUSdSLtcGTdpuo9+4+h/ZJtcRyWPrnCckr8I aN4GLWxdjADep2+B52+HA7G7UG8Qjn3dA4nZAN5rGKhMhBx9veQy78pdAE6LnpbC 62Ig+JiOsjT5sDq7VAjt/94INrMrBPpjWs10DIirOoRranAh/YcZiLwBlniLRyV3 DIdIjGFTgZJWEntTU+k+0Sa+88h12Zg= -----END CERTIFICATE-----Generated at Sun Sep 27 02:19:33 2026 by rpki-client