$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa File: 1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa (raw, json) Hash identifier: Kz6Rh7BARwm+9ziABrgxmH+qInlrHtZ94SiYwhMDJ2Q= Subject key identifier: 13:84:26:88:A3:3A:A7:60:BE:79:38:59:5F:9A:F7:10:3F:C8:F7:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4984F11E867BC64750951500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.121.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f1:1e:86:7b:c6:47:50:95:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=355bd062-fb20-4aaf-83a1-f5a50a01520d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:c0:63:24:3a:11:ee:c6:40:2c:49:7f:2d: fc:0a:1c:5c:22:0f:0b:62:97:b2:16:54:61:5c:2b: 21:00:51:ac:0e:ad:d4:3d:ef:13:be:b7:6c:d8:6c: 1a:d7:30:88:fa:ec:61:ac:90:63:81:65:58:c3:38: 47:8b:11:67:26:4b:ea:14:ff:d0:2c:87:5f:2a:7f: 62:8a:5a:28:ae:de:60:62:bd:52:07:1f:8b:8d:6d: 0e:e9:5a:74:b0:e5:df:c1:b6:04:11:62:84:d2:66: 47:52:13:f0:63:ea:50:41:19:38:9f:df:75:db:2c: 51:1c:e4:67:97:68:7e:b9:e7:e2:2d:48:25:3e:03: 37:4f:56:c2:f1:34:ac:89:19:00:7a:1e:01:c6:98: d2:f5:45:36:f3:b7:64:d4:06:b3:99:1c:af:33:24: ef:2e:c4:57:5e:7d:ba:e1:d0:be:1d:26:b0:4a:29: 6f:58:ca:41:0f:d1:cd:35:32:7f:03:a3:b5:ed:5e: 7b:90:ba:7a:b9:c1:b0:9f:95:ce:01:1a:e2:1a:7c: 9e:d3:50:da:3d:77:c1:57:13:25:2d:28:76:73:56: 86:d7:b7:2b:79:f1:ee:a4:e7:ed:8f:ad:9d:32:f8: 43:df:e8:fb:98:8f:03:63:ab:d5:40:e7:1e:1d:de: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:84:26:88:A3:3A:A7:60:BE:79:38:59:5F:9A:F7:10:3F:C8:F7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:10:df:7d:69:32:71:2f:50:26:73:65:b5:21:6b:fa:51:37: a9:06:bb:c3:14:5f:a0:d5:e0:90:dc:f2:da:f3:59:8f:78:81: 84:78:b0:d1:e9:07:c8:1a:86:cb:07:41:cc:98:80:61:66:12: 1e:a9:4c:96:28:cf:7d:7d:98:55:26:08:f1:86:39:a6:9d:4f: 63:1f:49:ff:d6:16:ef:62:bb:f3:89:44:b9:8f:d3:88:30:b2: d5:50:4f:48:b4:6d:f6:6a:39:75:1a:3c:43:d7:bb:19:32:df: f3:ed:e7:94:ee:da:26:20:47:90:ec:bd:92:07:f8:25:85:48: 9b:2d:15:55:07:db:75:63:f4:ba:e5:c3:40:73:0e:18:b5:ae: e9:04:e0:62:99:55:f0:69:a2:30:81:a6:4d:06:e7:db:f1:b2: df:78:94:c5:6b:42:28:9e:a2:57:fd:ce:4e:f5:45:45:79:39: 2a:f7:96:cf:be:75:f2:97:0c:8b:cc:85:3a:35:7a:50:da:9c: be:f2:1e:29:f4:74:bd:ab:6e:6f:67:89:55:77:4d:3a:e8:51: b8:eb:19:f9:19:5c:72:b0:f9:0f:a6:4d:33:5d:c4:cf:ed:0c: fc:76:1b:d8:0e:85:9c:4a:cc:af:ae:85:c0:ba:68:ec:c2:f1: 22:5a:ed:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPEehnvGR1CVFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzU1YmQwNjItZmIyMC00YWFmLTgzYTEtZjVhNTBhMDE1MjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirXAYyQ6Ee7GQCxJfy38ChxcIg8LYpeyFlRh XCshAFGsDq3UPe8Tvrds2Gwa1zCI+uxhrJBjgWVYwzhHixFnJkvqFP/QLIdfKn9i iloort5gYr1SBx+LjW0O6Vp0sOXfwbYEEWKE0mZHUhPwY+pQQRk4n9912yxRHORn l2h+uefiLUglPgM3T1bC8TSsiRkAeh4BxpjS9UU287dk1AazmRyvMyTvLsRXXn26 4dC+HSawSilvWMpBD9HNNTJ/A6O17V57kLp6ucGwn5XOARriGnye01DaPXfBVxMl LSh2c1aG17crefHupOftj62dMvhD3+j7mI8DY6vVQOceHd6ULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOEJoijOqdgvnk4WV+a9xA/yPc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWMyYTNlMGYtNWU1NC0z ZjZjLWI4MGEtYjk0YWYzZTVlY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQQ331pMnEvUCZzZbUha/pRN6kGu8MUX6DV4JDc8trzWY94gYR4sNHp B8gahssHQcyYgGFmEh6pTJYoz319mFUmCPGGOaadT2MfSf/WFu9iu/OJRLmP04gw stVQT0i0bfZqOXUaPEPXuxky3/Pt55Tu2iYgR5DsvZIH+CWFSJstFVUH23Vj9Lrl w0BzDhi1rukE4GKZVfBpojCBpk0G59vxst94lMVrQiieolf9zk71RUV5OSr3ls++ dfKXDIvMhTo1elDanL7yHin0dL2rbm9niVV3TTroUbjrGfkZXHKw+Q+mTTNdxM/t DPx2G9gOhZxKzK+uhcC6aOzC8SJa7W8= -----END CERTIFICATE-----Generated at Mon Sep 28 19:30:35 2026 by rpki-client