$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa File: a39c4916-d280-3db9-8d45-5b63bb04856b.roa (raw, json) Hash identifier: FAVYSS1zX2TTMoE7ybIlub5XZB/4upweWsXHJXNKBYE= Subject key identifier: 66:C6:6A:C7:2D:D7:29:3D:C1:E1:D8:8F:E4:F3:7A:55:98:76:89:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D82BB89021660FAD0E680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.89.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:82:bb:89:02:16:60:fa:d0:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2f8ce83b-a2bf-4cab-b432-1377cdf8639a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:d4:7b:29:95:62:57:6b:89:85:5b:ad:77: 2f:71:11:76:9b:9c:62:a1:46:9d:79:95:1b:13:9b: 8a:6c:65:76:4c:37:87:d3:6b:5b:a5:69:8e:c7:fd: 8e:72:44:b8:31:93:97:8f:50:19:d0:28:cc:85:22: f9:e8:53:32:c1:0f:21:80:df:84:8b:54:20:b3:13: ea:b3:66:35:ed:4a:11:75:c4:da:8f:cc:52:4e:c9: 64:65:10:ee:28:cc:7b:f9:de:89:78:a9:71:22:59: 42:3d:dc:30:7e:19:e8:f3:10:46:3a:61:82:d0:38: a4:63:75:57:2e:bf:cf:86:93:0d:22:ab:ed:7a:cd: 07:e9:9f:93:96:e7:4f:17:3d:a0:9a:d3:a5:9e:4c: 35:2f:1d:cf:2f:95:21:19:52:65:6c:ab:63:43:d8: 37:50:56:e0:cd:78:da:ae:4d:2e:96:7d:c8:03:8f: 1c:08:1c:9f:4c:ab:84:9b:20:aa:8f:16:dd:c6:c3: 58:aa:ed:5a:19:71:27:4e:9a:7d:14:f5:c3:35:96: 55:53:90:e9:f5:88:1c:4d:59:13:eb:dd:36:35:a6: d5:e9:09:68:a9:85:16:2b:72:d8:7d:d8:97:f1:e1: df:5e:7e:1f:44:df:42:cc:13:19:7f:6e:e7:fd:af: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:6A:C7:2D:D7:29:3D:C1:E1:D8:8F:E4:F3:7A:55:98:76:89:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:69:f1:6f:73:e4:f3:06:b3:de:f8:00:d7:a3:e5:c5:ed:50: cd:83:6d:d3:98:fe:42:3d:55:2f:5d:11:65:60:a0:e6:73:1d: 3d:c0:bb:01:03:4f:c8:9d:fc:e6:4a:63:90:a7:a6:5b:c2:79: 60:8a:3e:5c:7f:f1:2e:f8:f4:20:98:30:8d:81:3f:ce:6b:95: 2b:19:ab:05:40:74:ba:7b:c3:26:93:cf:a4:07:e8:18:dd:4a: 06:f2:12:59:70:c1:2c:78:fa:cb:02:72:e9:fa:fe:fd:ee:c8: 01:af:97:ac:b1:64:da:b1:36:b1:4a:c0:3e:66:72:fa:03:0e: 28:9a:ce:c3:0d:e9:f9:86:72:e7:3b:58:55:23:fd:8b:da:d9: 2d:5f:e1:a5:ee:3e:99:8d:96:eb:4b:db:f1:5e:ad:e0:a1:5d: 59:a0:99:a7:53:1b:b0:a7:58:e1:ee:69:6d:65:31:34:79:a5: 58:9e:eb:42:c1:20:07:47:33:ca:6d:8d:c2:c2:2f:e2:de:21: 98:81:4d:b9:90:07:c7:90:d2:8c:e5:76:c2:4a:2e:51:4d:f8: 7b:41:11:fb:f0:a9:90:0e:5f:0c:be:e1:1c:bc:5d:f8:da:c4: 2b:9f:cd:5d:3d:3a:ba:c5:5f:29:b9:d8:61:7a:a8:6f:24:a7: 83:ec:9a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYK7iQIWYPrQ5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmY4Y2U4M2ItYTJiZi00Y2FiLWI0MzItMTM3N2NkZjg2MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CPUeymVYldriYVbrXcvcRF2m5xioUadeZUb E5uKbGV2TDeH02tbpWmOx/2OckS4MZOXj1AZ0CjMhSL56FMywQ8hgN+Ei1QgsxPq s2Y17UoRdcTaj8xSTslkZRDuKMx7+d6JeKlxIllCPdwwfhno8xBGOmGC0DikY3VX Lr/PhpMNIqvtes0H6Z+TludPFz2gmtOlnkw1Lx3PL5UhGVJlbKtjQ9g3UFbgzXja rk0uln3IA48cCByfTKuEmyCqjxbdxsNYqu1aGXEnTpp9FPXDNZZVU5Dp9YgcTVkT 6902NabV6QloqYUWK3LYfdiX8eHfXn4fRN9CzBMZf27n/a/7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbGasct1yk9weHYj+TzelWYdol9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTM5YzQ5MTYtZDI4MC0z ZGI5LThkNDUtNWI2M2JiMDQ4NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1p8W9z5PMGs974ANej5cXtUM2DbdOY/kI9VS9dEWVgoOZzHT3AuwED T8id/OZKY5CnplvCeWCKPlx/8S749CCYMI2BP85rlSsZqwVAdLp7wyaTz6QH6Bjd SgbyEllwwSx4+ssCcun6/v3uyAGvl6yxZNqxNrFKwD5mcvoDDiiazsMN6fmGcuc7 WFUj/Yva2S1f4aXuPpmNlutL2/FereChXVmgmadTG7CnWOHuaW1lMTR5pVie60LB IAdHM8ptjcLCL+LeIZiBTbmQB8eQ0ozldsJKLlFN+HtBEfvwqZAOXwy+4Ry8Xfja xCufzV09OrrFXym52GF6qG8kp4Psmlg= -----END CERTIFICATE-----Generated at Sat Oct 10 00:24:26 2026 by rpki-client