$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c4426fb-b133-3c42-abec-3f036498486e.roa File: 1c4426fb-b133-3c42-abec-3f036498486e.roa (raw, json) Hash identifier: ICqePA+osxzRZOAbLWGEmGGgZM6yTGFRzyNulRQ5EmY= Subject key identifier: FB:30:73:04:F9:B2:76:0B:26:5A:AC:7E:DA:41:11:66:C6:CC:18:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC57CB27907F99A0617E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c4426fb-b133-3c42-abec-3f036498486e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.95.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c5:7c:b2:79:07:f9:9a:06:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=967d1c38-378b-4d99-b633-892d5d5cf866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ee:c1:7f:0b:57:2a:ee:6c:ef:47:d7:cf:96: c0:34:7b:49:6e:9e:6d:f1:54:c1:7a:ac:cf:28:08: 86:86:cc:4d:c6:70:eb:be:4a:ae:f7:a5:7e:c0:e0: 7b:f6:ed:37:e7:53:dc:26:f5:5b:77:ac:58:12:66: 75:bf:68:3d:f1:bb:a1:68:ef:a8:e3:a8:b7:ee:41: 67:a2:0b:4e:1e:fa:82:ed:8d:76:de:28:a1:f9:94: 74:e3:ac:69:e4:ad:36:cf:1b:1f:c1:73:eb:71:04: 71:65:79:54:51:18:38:9e:de:36:db:93:f7:31:ec: 35:a6:3e:43:35:cd:2e:69:74:18:aa:e1:3b:1b:f5: b0:fb:81:97:98:a7:3b:b1:cb:99:bb:6a:2c:54:99: 63:62:84:57:fd:b6:0d:88:ce:75:35:4e:51:4e:41: 35:c8:57:2f:eb:22:7d:c1:62:02:0e:2c:4d:3f:f6: 12:42:ba:a2:13:6c:dd:3c:70:9b:01:51:f4:02:cc: 0c:8b:b8:48:64:12:76:f9:a6:5a:9d:9d:9a:7d:8b: 64:f2:64:ab:8e:6d:57:12:6e:de:5a:eb:a9:79:1b: 43:78:fa:08:ae:a9:7d:be:82:49:06:e1:ef:25:1e: c3:8a:19:76:c9:92:ce:e2:84:91:fc:63:e1:9e:b4: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:73:04:F9:B2:76:0B:26:5A:AC:7E:DA:41:11:66:C6:CC:18:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c4426fb-b133-3c42-abec-3f036498486e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:61:f6:85:9f:67:ed:f3:90:ed:6f:ed:da:09:12:31:a7:c8: c6:dd:39:1a:17:8c:9f:f0:b7:1a:1b:0e:88:2f:8b:bc:e4:53: 0c:d3:ee:73:0f:d7:c2:c9:a1:5d:0d:7b:6b:26:8b:b3:22:47: 32:23:6a:fe:20:9c:c6:be:56:f9:03:36:63:2c:22:fd:37:c5: 7e:2b:3a:9f:e6:40:44:94:c3:b6:36:bb:a7:61:e1:3f:47:f5: de:4a:e1:fe:75:e4:3f:81:92:2f:50:5d:4d:61:12:9a:60:20: 79:e7:68:03:04:69:73:14:82:0a:d3:62:d5:f1:72:f2:28:f9: 2c:00:0f:21:0d:7d:a5:a3:37:e2:ef:43:21:b9:1e:27:42:fc: 3f:18:ea:77:bd:da:c1:9a:1c:9c:ff:fb:c3:71:04:dd:34:7a: 75:b0:01:55:7a:64:71:87:f8:a8:66:5e:e9:3b:ee:27:bf:ae: 21:ab:b9:74:df:10:08:8e:79:c5:b7:dd:17:f5:44:57:eb:8e: f9:34:5c:f7:e4:0e:c1:74:e9:46:d5:b5:fa:53:83:b9:73:9b: c3:b5:44:ca:29:70:f2:f8:0d:27:5a:45:1f:d5:2f:e2:c7:9b: 52:75:f6:93:1a:e6:96:16:d6:27:d8:a7:84:90:d1:3c:02:6d: ec:c4:01:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcV8snkH+ZoGF+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTY3ZDFjMzgtMzc4Yi00ZDk5LWI2MzMtODkyZDVkNWNmODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+7BfwtXKu5s70fXz5bANHtJbp5t8VTBeqzP KAiGhsxNxnDrvkqu96V+wOB79u0351PcJvVbd6xYEmZ1v2g98buhaO+o46i37kFn ogtOHvqC7Y123iih+ZR046xp5K02zxsfwXPrcQRxZXlUURg4nt4225P3Mew1pj5D Nc0uaXQYquE7G/Ww+4GXmKc7scuZu2osVJljYoRX/bYNiM51NU5RTkE1yFcv6yJ9 wWICDixNP/YSQrqiE2zdPHCbAVH0AswMi7hIZBJ2+aZanZ2afYtk8mSrjm1XEm7e WuupeRtDePoIrql9voJJBuHvJR7Dihl2yZLO4oSR/GPhnrTgLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPswcwT5snYLJlqsftpBEWbGzBgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWM0NDI2ZmItYjEzMy0z YzQyLWFiZWMtM2YwMzY0OTg0ODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClh9oWfZ+3zkO1v7doJEjGnyMbdORoXjJ/wtxobDogvi7zkUwzT7nMP 18LJoV0Ne2smi7MiRzIjav4gnMa+VvkDNmMsIv03xX4rOp/mQESUw7Y2u6dh4T9H 9d5K4f515D+Bki9QXU1hEppgIHnnaAMEaXMUggrTYtXxcvIo+SwADyENfaWjN+Lv QyG5HidC/D8Y6ne92sGaHJz/+8NxBN00enWwAVV6ZHGH+KhmXuk77ie/riGruXTf EAiOecW33Rf1RFfrjvk0XPfkDsF06UbVtfpTg7lzm8O1RMopcPL4DSdaRR/VL+LH m1J19pMa5pYW1ifYp4SQ0TwCbezEAa8= -----END CERTIFICATE-----Generated at Mon Sep 28 20:23:52 2026 by rpki-client