$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa File: cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa (raw, json) Hash identifier: XdqcBvRi3FwzVJb2GtE2f49wrjZkY5/O6qREUw/pyuE= Subject key identifier: E2:FA:DA:31:B6:5B:21:CA:7C:F8:F7:48:A2:27:B6:43:EC:69:07:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9475FB616A6F0EB02300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.134.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:94:75:fb:61:6a:6f:0e:b0:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d2b76b1f-ea52-4f7a-a868-b7d0660fe737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:1c:c5:41:ed:d4:b3:d4:00:7d:84:8b:0d: 46:76:56:1f:8f:7f:a2:59:25:8f:81:9e:e4:d4:cd: 2a:cc:bd:97:8d:d9:0e:26:bc:c1:ed:bb:d4:6f:82: 86:9c:b0:61:86:23:a9:70:dd:19:73:05:b3:75:07: 92:7b:91:cb:bf:d2:72:d5:1e:fd:0e:98:ab:e1:09: 41:85:89:d9:ab:c8:c8:5a:99:9f:77:07:c6:ea:d4: cb:ac:93:5a:a1:2a:e3:4f:d8:3e:aa:8b:29:14:8f: 13:14:0b:4d:1b:78:13:4e:fb:0b:a4:ee:fe:a2:00: fa:a9:9d:46:55:86:6a:f1:03:4c:f6:e0:8a:e2:77: 40:30:c5:2d:d8:92:56:dc:33:59:a9:e7:11:d6:47: 8d:97:c3:2f:7f:78:ab:2b:c0:5b:c4:a2:7a:7b:6f: f7:80:f2:00:c2:04:a5:6e:72:1c:ec:ff:6c:4d:eb: 92:1b:62:53:b8:b0:89:e4:72:b9:b3:7d:25:ac:e1: cd:19:cc:0a:8c:2c:bd:18:e2:f4:5f:7a:ad:e5:42: 4b:da:3e:50:ed:6c:a0:99:16:ce:95:e7:cd:6e:ac: 27:f7:9e:d2:65:47:e1:69:23:ad:e8:37:28:d2:1c: 78:94:8f:30:73:41:5d:6a:0e:9e:ef:58:b6:15:39: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FA:DA:31:B6:5B:21:CA:7C:F8:F7:48:A2:27:B6:43:EC:69:07:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:48:fd:04:27:84:ff:a8:cd:6f:9e:a3:b4:44:e1:99:b2:fc: e5:9a:70:a2:f3:91:47:b2:bf:33:cf:b6:58:a0:49:cc:75:3b: a5:fe:7d:92:fb:2d:49:42:33:19:ca:31:23:da:74:b2:2c:ec: 38:f7:61:89:27:44:be:3a:19:48:d2:fc:d7:e7:09:6b:aa:99: 1c:58:47:5b:e0:5c:e2:1c:14:3a:de:84:2a:3a:7b:17:4b:b3: c4:1b:21:09:5a:37:aa:ea:06:1e:61:f3:b5:cb:71:fd:3d:e7: ca:00:05:52:55:aa:e8:22:c0:92:9c:d2:55:4f:ee:83:53:5e: 0e:87:2d:2f:6c:ee:9f:79:24:f0:2b:9f:26:ac:93:be:4f:97: 51:27:5f:10:fc:8f:49:4d:19:bc:cc:77:b6:14:7d:fa:29:19: 10:20:80:f5:27:e9:be:7a:eb:da:11:74:42:ef:7d:c3:bd:fe: 53:6e:14:88:bc:73:95:6f:02:87:4f:84:15:22:43:e3:3f:41: 29:5a:ea:d5:6c:d3:0e:38:ce:a4:1a:4e:00:e7:75:85:fe:fa: 09:05:52:0d:5e:a7:5b:b6:16:cf:0e:02:bd:92:4d:e6:2b:a9: c0:9c:50:9c:10:27:67:7c:51:ef:d6:3b:d7:0e:77:f8:16:81: e7:2c:c5:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZR1+2Fqbw6wIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDJiNzZiMWYtZWE1Mi00ZjdhLWE4NjgtYjdkMDY2MGZlNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCscxUHt1LPUAH2Eiw1GdlYfj3+iWSWPgZ7k 1M0qzL2XjdkOJrzB7bvUb4KGnLBhhiOpcN0ZcwWzdQeSe5HLv9Jy1R79Dpir4QlB hYnZq8jIWpmfdwfG6tTLrJNaoSrjT9g+qospFI8TFAtNG3gTTvsLpO7+ogD6qZ1G VYZq8QNM9uCK4ndAMMUt2JJW3DNZqecR1keNl8Mvf3irK8BbxKJ6e2/3gPIAwgSl bnIc7P9sTeuSG2JTuLCJ5HK5s30lrOHNGcwKjCy9GOL0X3qt5UJL2j5Q7WygmRbO lefNbqwn957SZUfhaSOt6Dco0hx4lI8wc0Fdag6e71i2FTllnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL62jG2WyHKfPj3SKIntkPsaQfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2IzYmIxMDYtM2ZmMi0z MmUxLWI2YzYtZDBkNWI5ZTFmNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRI/QQnhP+ozW+eo7RE4Zmy/OWacKLzkUeyvzPPtligScx1O6X+fZL7 LUlCMxnKMSPadLIs7Dj3YYknRL46GUjS/NfnCWuqmRxYR1vgXOIcFDrehCo6exdL s8QbIQlaN6rqBh5h87XLcf0958oABVJVqugiwJKc0lVP7oNTXg6HLS9s7p95JPAr nyask75Pl1EnXxD8j0lNGbzMd7YUffopGRAggPUn6b5669oRdELvfcO9/lNuFIi8 c5VvAodPhBUiQ+M/QSla6tVs0w44zqQaTgDndYX++gkFUg1ep1u2Fs8OAr2STeYr qcCcUJwQJ2d8Ue/WO9cOd/gWgecsxRw= -----END CERTIFICATE-----Generated at Sat Sep 26 22:38:01 2026 by rpki-client