$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa File: d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa (raw, json) Hash identifier: Qr4hKNcWOdY73qMXwDxDTu+ln6DycQoiihdtdRlTEWc= Subject key identifier: 6C:4F:B0:E2:AB:4A:2C:07:1C:17:14:73:A8:E6:28:B4:77:3B:1A:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49851CB1D66A13C56CD6F650 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.108.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:1c:b1:d6:6a:13:c5:6c:d6:f6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ea5c3da-258f-4b53-8885-7b9a98ce8daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:76:ed:29:41:89:1f:99:17:13:d4:6e:e1: 86:db:ae:b5:75:bb:e7:d9:c8:1a:38:a7:d3:31:6c: 41:09:85:fe:a0:5b:d5:7e:25:d8:97:d6:32:e2:b8: 43:e7:48:98:07:6a:f1:42:88:6e:9b:49:b9:b6:ac: f3:72:14:a1:2d:7c:77:e9:01:60:4a:75:ee:05:b0: 3e:1c:37:51:03:f8:74:13:1a:18:15:48:d4:65:d2: 62:37:1c:38:dc:18:33:72:a6:f1:d6:8a:48:1c:95: 44:d1:15:5b:87:d2:17:6e:03:c3:df:c0:a5:c8:c5: d7:77:6d:dc:cc:c8:0d:c6:80:f6:1b:57:9c:f9:19: 6e:68:17:8a:94:4d:23:d0:93:cf:78:1d:b1:4c:3d: 43:c0:6b:6f:fa:36:fe:e9:e9:de:b0:c0:41:cb:4d: 0b:ea:6f:e7:ef:6a:3c:ec:d9:f7:4e:13:41:03:c0: 5f:c4:98:83:1f:0c:6f:1a:f9:28:42:14:b1:d4:5a: f1:af:16:13:f3:72:be:86:9a:bb:78:c5:43:65:fa: 29:af:66:cb:d9:ed:83:1e:c9:77:c4:b5:eb:7b:c0: 37:25:6e:06:17:ac:75:d1:31:30:44:4c:c8:74:29: ba:9b:7f:5d:8c:ca:af:ea:af:0a:03:1e:04:bd:a2: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:B0:E2:AB:4A:2C:07:1C:17:14:73:A8:E6:28:B4:77:3B:1A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:98:f9:7d:6e:c6:bc:89:04:3f:22:cb:14:6d:a6:c5:fa:d3: 65:cf:81:8b:dd:73:da:2b:af:1a:d2:9b:f9:54:5f:75:17:c7: 24:46:4d:10:8b:4c:2b:67:a1:e5:03:50:dd:80:e3:da:a7:0d: ca:4d:92:f7:2e:03:ae:51:0c:ff:ea:55:37:26:c5:92:0d:81: 57:a5:32:ae:30:9d:18:0b:90:fc:62:11:d0:5c:b6:46:e4:f5: b8:4b:53:da:91:12:18:20:9c:c0:6a:9b:ab:e1:40:27:4b:f5: 02:8b:c0:de:12:e3:25:c7:e2:7d:ec:bf:5f:b2:10:07:e4:31: 0d:c8:c5:c1:b0:fd:fd:79:4c:3d:10:92:e3:6c:11:ce:31:49: 69:46:5f:55:fb:f5:3a:56:a1:12:6c:2b:63:59:d9:63:25:ef: 50:e3:85:85:5b:a4:b0:2a:73:f3:26:69:3d:78:06:ea:39:72: b4:e0:b8:f2:4f:4d:bc:bf:b3:8a:37:23:10:d3:a3:02:8c:76: 2f:2c:00:b7:96:2d:2c:10:87:aa:45:6c:dc:92:55:24:4f:a9: fb:7d:00:b1:49:7c:55:61:ca:4b:13:05:bd:12:e8:43:ca:c1: fb:38:16:df:94:b8:3a:58:3b:3a:de:51:4f:48:25:31:31:f0: 63:3a:7c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhRyx1moTxWzW9lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmVhNWMzZGEtMjU4Zi00YjUzLTg4ODUtN2I5YTk4Y2U4ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5d27SlBiR+ZFxPUbuGG2661dbvn2cgaOKfT MWxBCYX+oFvVfiXYl9Yy4rhD50iYB2rxQohum0m5tqzzchShLXx36QFgSnXuBbA+ HDdRA/h0ExoYFUjUZdJiNxw43Bgzcqbx1opIHJVE0RVbh9IXbgPD38ClyMXXd23c zMgNxoD2G1ec+RluaBeKlE0j0JPPeB2xTD1DwGtv+jb+6enesMBBy00L6m/n72o8 7Nn3ThNBA8BfxJiDHwxvGvkoQhSx1FrxrxYT83K+hpq7eMVDZfopr2bL2e2DHsl3 xLXre8A3JW4GF6x10TEwREzIdCm6m39djMqv6q8KAx4EvaKmRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxPsOKrSiwHHBcUc6jmKLR3OxqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJhMTI1YTktMjViZi0z OTM3LWJkYzktN2FhYTQ2MGZmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWY+X1uxryJBD8iyxRtpsX602XPgYvdc9orrxrSm/lUX3UXxyRGTRCL TCtnoeUDUN2A49qnDcpNkvcuA65RDP/qVTcmxZINgVelMq4wnRgLkPxiEdBctkbk 9bhLU9qREhggnMBqm6vhQCdL9QKLwN4S4yXH4n3sv1+yEAfkMQ3IxcGw/f15TD0Q kuNsEc4xSWlGX1X79TpWoRJsK2NZ2WMl71DjhYVbpLAqc/MmaT14Buo5crTguPJP Tby/s4o3IxDTowKMdi8sALeWLSwQh6pFbNySVSRPqft9ALFJfFVhyksTBb0S6EPK wfs4Ft+UuDpYOzreUU9IJTEx8GM6fLs= -----END CERTIFICATE-----Generated at Thu Oct 8 20:41:38 2026 by rpki-client