$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a03a0fe-f7a8-3939-9d01-2a452c240670.roa File: 0a03a0fe-f7a8-3939-9d01-2a452c240670.roa (raw, json) Hash identifier: YaNX+12GDnirXzq++1fq1GzVXY2xeHnGdngi+JxzJI8= Subject key identifier: 4C:53:56:BB:56:A9:30:F3:02:79:B5:A5:BB:41:02:0D:A6:5A:9E:59 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA37BA67B44EB27CE6840 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a03a0fe-f7a8-3939-9d01-2a452c240670.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.85.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a3:7b:a6:7b:44:eb:27:ce:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=448d0ee5-01b2-4967-932b-620b4f7d1643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:51:a8:98:16:66:7c:73:d3:50:69:9d:e7: a3:12:c4:83:a9:dc:ce:1a:09:8d:a0:73:25:35:55: 07:43:e1:82:bb:8e:a0:7e:dd:f2:0a:31:07:d8:92: b6:98:0e:7c:42:7b:fe:85:e2:44:d0:4a:2e:62:15: 7d:c3:77:60:3b:f2:e6:e8:a6:50:6b:3b:9a:b8:e4: 0f:16:2d:4c:8a:43:7c:a8:9b:cb:06:0a:ee:a2:a6: 33:da:e6:0b:1b:7b:7a:40:02:66:09:26:94:c3:a8: d9:62:a4:66:d8:72:c4:bf:48:37:a3:2c:af:b9:6a: 2b:25:2e:27:7f:46:dd:0e:15:f8:7c:22:4f:37:0a: 49:b6:ee:af:4b:b3:9a:6c:1e:63:af:34:4e:ea:c6: ff:4f:df:1b:44:c5:af:91:b6:6c:37:10:6d:02:18: f8:40:44:5d:9d:61:17:27:74:26:1c:51:97:75:5b: 13:02:1e:11:5a:5d:84:ca:3d:0b:fa:a4:fc:ef:23: 67:87:31:89:74:5a:3e:61:3d:11:a2:20:8e:10:94: 9b:59:11:7f:c9:0f:02:43:a7:b7:d4:f4:cd:e3:b3: 84:a6:e2:95:d0:1b:21:e5:4e:a3:f5:34:7b:0e:67: c1:a8:e2:6e:4e:eb:35:70:f0:83:e4:db:26:ff:0c: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:56:BB:56:A9:30:F3:02:79:B5:A5:BB:41:02:0D:A6:5A:9E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a03a0fe-f7a8-3939-9d01-2a452c240670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f7:e8:13:0f:60:24:b5:66:ce:36:9a:cf:f5:6c:82:74:ae: de:ab:50:00:2b:55:19:ef:50:91:a3:83:48:0c:31:09:bd:af: da:02:d4:b2:39:8c:61:ab:8d:75:e5:13:ca:c4:0b:52:86:a2: b9:ca:1a:3b:e5:0b:2b:47:1e:58:b6:34:f7:2c:b3:60:7c:17: 4c:78:b4:f1:a4:7c:15:a9:2a:cf:f4:bf:d8:b0:3a:d4:4e:56: ff:d7:85:86:0b:9d:b9:68:be:df:85:9a:4f:1a:d3:1b:70:fb: d3:e7:62:f5:2c:9f:1c:ca:94:87:9a:16:c9:cb:6b:fd:89:d4: 04:a7:b2:5f:77:87:22:6a:c4:3c:31:08:19:b1:99:2d:85:d1: 57:bd:9e:fb:9f:54:3e:b3:54:65:fe:f5:97:50:1f:43:17:05: 8d:23:bb:0e:b1:76:00:ed:0e:6e:71:a3:54:25:72:07:6c:51: dc:28:b4:b3:3d:c3:6f:9a:2c:6c:fb:18:ef:fb:ec:c0:21:8d: fd:00:dd:b6:a6:a7:43:90:75:41:7d:25:09:8d:6f:27:29:e3: c8:96:41:0f:70:4b:43:08:4e:d9:ae:46:1f:92:17:4c:73:49: da:07:ba:f5:4e:64:8b:9b:e8:0a:99:b4:5d:a1:ea:ad:39:72: 9c:02:bd:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaN7pntE6yfOaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDQ4ZDBlZTUtMDFiMi00OTY3LTkzMmItNjIwYjRmN2QxNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27VRqJgWZnxz01BpneejEsSDqdzOGgmNoHMl NVUHQ+GCu46gft3yCjEH2JK2mA58Qnv+heJE0EouYhV9w3dgO/Lm6KZQazuauOQP Fi1MikN8qJvLBgruoqYz2uYLG3t6QAJmCSaUw6jZYqRm2HLEv0g3oyyvuWorJS4n f0bdDhX4fCJPNwpJtu6vS7OabB5jrzRO6sb/T98bRMWvkbZsNxBtAhj4QERdnWEX J3QmHFGXdVsTAh4RWl2Eyj0L+qT87yNnhzGJdFo+YT0RoiCOEJSbWRF/yQ8CQ6e3 1PTN47OEpuKV0Bsh5U6j9TR7DmfBqOJuTus1cPCD5Nsm/wxpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExTVrtWqTDzAnm1pbtBAg2mWp5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGEwM2EwZmUtZjdhOC0z OTM5LTlkMDEtMmE0NTJjMjQwNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz36BMPYCS1Zs42ms/1bIJ0rt6rUAArVRnvUJGjg0gMMQm9r9oC1LI5 jGGrjXXlE8rEC1KGornKGjvlCytHHli2NPcss2B8F0x4tPGkfBWpKs/0v9iwOtRO Vv/XhYYLnblovt+Fmk8a0xtw+9PnYvUsnxzKlIeaFsnLa/2J1ASnsl93hyJqxDwx CBmxmS2F0Ve9nvufVD6zVGX+9ZdQH0MXBY0juw6xdgDtDm5xo1QlcgdsUdwotLM9 w2+aLGz7GO/77MAhjf0A3bamp0OQdUF9JQmNbycp48iWQQ9wS0MITtmuRh+SF0xz SdoHuvVOZIub6AqZtF2h6q05cpwCvQw= -----END CERTIFICATE-----Generated at Fri Oct 9 21:52:00 2026 by rpki-client