$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa File: 91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa (raw, json) Hash identifier: bRPNVtfJ6GmqBysUwpPv+OXsDeFNWGObzucRN95BRhY= Subject key identifier: E8:FF:47:2A:8B:CB:CC:BB:58:CE:14:C9:16:A1:25:16:F6:96:91:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD3C051108E77EBC58900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.72.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d3:c0:51:10:8e:77:eb:c5:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=601a6fa0-59d2-4d09-a264-662db8fe4de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:1d:24:fb:47:39:32:d2:79:7a:3c:d4:5f: 11:03:bf:d8:45:eb:58:64:66:de:0d:2a:c6:8a:ed: f5:17:62:93:21:9e:3f:1e:54:f5:9d:20:f1:b8:d5: 33:2b:a7:91:f2:b5:23:60:cf:68:0a:e3:52:a7:41: ef:39:0a:f2:a5:d7:cd:65:66:ed:2c:54:d3:c2:86: 8f:e3:0c:9a:db:dd:60:5b:47:5d:7f:f9:22:de:36: 1c:48:33:1a:20:45:a8:89:24:6c:fa:2f:f3:7f:cf: 29:54:09:c5:27:f2:dc:7b:af:bd:a2:40:cc:ab:4b: 36:56:b3:ff:dc:13:ec:2d:a0:5b:f6:e3:94:24:19: 82:30:3d:20:e7:35:99:9a:c1:28:a3:63:9b:64:4d: f1:f2:62:92:56:f1:10:b1:d7:b5:8e:4f:1c:46:a0: c8:01:b1:03:d0:22:b8:7f:49:49:dd:0a:d3:33:82: a7:dd:f1:34:bf:25:99:5f:2c:e3:b2:d4:41:27:90: 2f:1e:57:b7:47:ec:57:b2:82:3a:3a:6c:de:d1:99: e4:0c:3e:ee:27:e9:f3:82:db:9d:d9:6a:30:0b:3a: bf:c1:36:e3:a6:58:d3:10:c6:fb:c0:0f:75:cf:56: dc:18:0d:4c:e4:2d:d8:a5:63:c5:80:b2:91:01:24: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FF:47:2A:8B:CB:CC:BB:58:CE:14:C9:16:A1:25:16:F6:96:91:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:00:38:3f:63:8b:a6:78:71:08:2a:fc:5c:3d:2a:a4:48:1b: 0a:fd:b4:5b:50:a7:96:b3:21:a2:07:6c:03:55:1b:61:c1:29: 9e:aa:87:65:55:1e:de:a4:fc:d1:4c:a4:27:e0:c8:ba:17:22: 84:b9:9c:69:c4:45:48:53:65:60:db:94:ae:d0:5e:d1:ec:6b: e9:fc:19:84:26:bd:50:20:42:cc:0c:53:83:9d:f7:39:32:72: 3f:97:eb:c8:71:46:98:16:ea:d3:f2:36:e6:44:9b:2a:95:7e: 4e:e4:6a:5b:de:a2:8b:24:fd:fb:bb:f3:cf:c2:2e:02:4e:43: c7:77:65:cd:9a:48:8a:e4:7a:50:36:6a:26:83:83:0d:03:95: 7d:d9:42:6e:8a:e2:cb:56:77:b1:e0:f3:e5:5e:16:6a:bf:1b: 73:a9:34:84:52:44:4b:60:41:e5:34:66:f0:d3:23:23:04:e3: 3a:fe:8c:80:54:63:81:93:0f:37:5e:99:7a:8d:ab:57:6d:44: 17:fb:c3:73:56:37:1b:e8:d3:06:69:ba:89:55:41:0d:f0:5d: 51:6f:c1:10:0b:e6:4e:1a:17:d8:09:2d:2e:63:98:a6:f0:87: c0:d9:1a:46:eb:0f:2e:59:c2:22:9a:37:4a:4d:20:ae:d0:ff: 13:89:fa:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdPAURCOd+vFiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjAxYTZmYTAtNTlkMi00ZDA5LWEyNjQtNjYyZGI4ZmU0ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVAdJPtHOTLSeXo81F8RA7/YRetYZGbeDSrG iu31F2KTIZ4/HlT1nSDxuNUzK6eR8rUjYM9oCuNSp0HvOQrypdfNZWbtLFTTwoaP 4wya291gW0ddf/ki3jYcSDMaIEWoiSRs+i/zf88pVAnFJ/Lce6+9okDMq0s2VrP/ 3BPsLaBb9uOUJBmCMD0g5zWZmsEoo2ObZE3x8mKSVvEQsde1jk8cRqDIAbED0CK4 f0lJ3QrTM4Kn3fE0vyWZXyzjstRBJ5AvHle3R+xXsoI6Omze0ZnkDD7uJ+nzgtud 2WowCzq/wTbjpljTEMb7wA91z1bcGA1M5C3YpWPFgLKRASS1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj/RyqLy8y7WM4UyRahJRb2lpG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFmM2I5Y2UtNGNjNy0z N2MxLWEyNmUtZTMwODAwY2VhZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAAOD9ji6Z4cQgq/Fw9KqRIGwr9tFtQp5azIaIHbANVG2HBKZ6qh2VV Ht6k/NFMpCfgyLoXIoS5nGnERUhTZWDblK7QXtHsa+n8GYQmvVAgQswMU4Od9zky cj+X68hxRpgW6tPyNuZEmyqVfk7kalveoosk/fu788/CLgJOQ8d3Zc2aSIrkelA2 aiaDgw0DlX3ZQm6K4stWd7Hg8+VeFmq/G3OpNIRSREtgQeU0ZvDTIyME4zr+jIBU Y4GTDzdemXqNq1dtRBf7w3NWNxvo0wZpuolVQQ3wXVFvwRAL5k4aF9gJLS5jmKbw h8DZGkbrDy5ZwiKaN0pNIK7Q/xOJ+vA= -----END CERTIFICATE-----Generated at Sun Sep 27 00:11:28 2026 by rpki-client