$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/152abf28-4443-35a4-a740-5039a110d384.roa File: 152abf28-4443-35a4-a740-5039a110d384.roa (raw, json) Hash identifier: aJzUdSXcmSYXj5gytZbTSC9Sgfu2CrJZy7LawOjAeiE= Subject key identifier: E6:15:ED:E0:D6:AB:66:7D:62:B1:0D:A4:07:B9:9E:3C:D9:48:FC:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F549D50DDB52A1F89E52DC040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/152abf28-4443-35a4-a740-5039a110d384.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.1.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:50:dd:b5:2a:1f:89:e5:2d:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=236d0702-2801-4c88-89e6-29af712d83fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:56:9a:81:84:db:90:4c:62:03:51:0b:0e: e2:d7:ad:f3:d7:cc:3c:5d:05:27:93:f4:5a:99:e3: 24:94:3b:4b:14:9a:4a:bd:bf:ac:87:e1:91:25:c9: 65:13:13:ba:52:5e:45:27:5e:2a:93:a1:04:eb:4c: 60:57:4b:8d:bc:84:83:fc:61:95:34:b8:38:c5:96: 00:e1:90:e5:24:99:b1:be:12:a3:b4:22:6b:26:6b: 53:dd:78:38:f0:08:60:04:77:d5:c7:73:15:8e:29: ef:d4:50:52:ee:e1:02:88:70:64:7e:53:25:0e:8a: 51:a8:66:41:eb:cc:87:05:7a:69:e1:0d:bc:10:ac: 83:79:78:23:d0:a3:d8:17:0c:c9:3e:4a:4d:81:ee: f0:42:82:3f:2e:34:c1:38:0f:93:d6:a9:84:dc:21: d4:86:06:d3:07:23:08:ef:3d:3b:32:68:6f:b2:bf: c2:67:72:d2:47:87:bc:c2:a3:6f:31:c8:e4:70:78: 13:82:05:fd:5b:bd:6e:28:d9:97:68:fc:ac:2a:f8: 2c:7f:65:6d:aa:f1:85:ff:be:8a:ec:cc:df:78:a1: ef:35:d9:ac:7c:57:32:58:be:a8:0a:1d:f8:33:23: c3:66:c7:97:5f:7d:4d:64:ef:dc:e4:0c:2c:ad:f3: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:15:ED:E0:D6:AB:66:7D:62:B1:0D:A4:07:B9:9E:3C:D9:48:FC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/152abf28-4443-35a4-a740-5039a110d384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a9:dd:ad:6f:71:60:ac:ac:34:29:cc:ed:dc:38:26:51:bf: 7f:39:cd:2b:b7:57:7f:c1:70:3b:da:e0:07:6a:8a:87:f7:59: d3:b5:85:cc:21:b9:fd:c4:71:43:a6:4f:8b:d0:10:5a:e6:dd: db:32:9b:59:b9:74:ed:40:3e:f4:82:57:80:84:61:1d:83:31: 22:13:c2:da:6f:c9:48:b8:62:ad:2b:92:53:51:41:2e:24:b0: 1c:e4:30:41:8a:1a:a0:10:41:93:08:fa:03:58:d6:a6:e9:51: 28:90:20:e3:3b:bf:39:b1:b5:78:bf:46:54:7d:ce:0a:52:b6: f6:f6:46:41:9a:fd:f7:40:cb:16:68:ea:fa:39:6e:ca:68:84: 9b:20:27:05:2d:3b:e1:be:63:6a:c4:ec:6c:da:c2:8c:01:47: 06:75:04:e9:af:1f:6e:2c:37:e2:a2:b4:dd:82:67:cd:a2:e4: 9b:77:0b:d8:b9:b0:8f:95:ac:dd:f2:97:bc:9d:c3:e8:4a:4a: 0e:d8:97:05:a5:1a:30:3b:c2:ac:4a:07:46:58:12:7a:bb:62: ce:ba:9c:35:22:db:84:51:1b:86:01:ee:2f:e6:d0:7b:56:57: 6c:54:cd:d3:49:c1:84:b5:85:22:22:46:57:84:17:ad:23:66: cd:62:53:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVDdtSofieUtwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjM2ZDA3MDItMjgwMS00Yzg4LTg5ZTYtMjlhZjcxMmQ4M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1VWmoGE25BMYgNRCw7i163z18w8XQUnk/Ra meMklDtLFJpKvb+sh+GRJcllExO6Ul5FJ14qk6EE60xgV0uNvISD/GGVNLg4xZYA 4ZDlJJmxvhKjtCJrJmtT3Xg48AhgBHfVx3MVjinv1FBS7uECiHBkflMlDopRqGZB 68yHBXpp4Q28EKyDeXgj0KPYFwzJPkpNge7wQoI/LjTBOA+T1qmE3CHUhgbTByMI 7z07Mmhvsr/CZ3LSR4e8wqNvMcjkcHgTggX9W71uKNmXaPysKvgsf2VtqvGF/76K 7MzfeKHvNdmsfFcyWL6oCh34MyPDZseXX31NZO/c5AwsrfPSxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYV7eDWq2Z9YrENpAe5njzZSPxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTUyYWJmMjgtNDQ0My0z NWE0LWE3NDAtNTAzOWExMTBkMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWp3a1vcWCsrDQpzO3cOCZRv385zSu3V3/BcDva4Adqiof3WdO1hcwh uf3EcUOmT4vQEFrm3dsym1m5dO1APvSCV4CEYR2DMSITwtpvyUi4Yq0rklNRQS4k sBzkMEGKGqAQQZMI+gNY1qbpUSiQIOM7vzmxtXi/RlR9zgpStvb2RkGa/fdAyxZo 6vo5bspohJsgJwUtO+G+Y2rE7GzawowBRwZ1BOmvH24sN+KitN2CZ82i5Jt3C9i5 sI+VrN3yl7ydw+hKSg7YlwWlGjA7wqxKB0ZYEnq7Ys66nDUi24RRG4YB7i/m0HtW V2xUzdNJwYS1hSIiRleEF60jZs1iU0U= -----END CERTIFICATE-----Generated at Sun Oct 4 22:47:45 2026 by rpki-client