$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/288991fb-2c9d-3ccb-b9de-21673bc37e1b.roa File: 288991fb-2c9d-3ccb-b9de-21673bc37e1b.roa (raw, json) Hash identifier: YC/DVecCi0WavFW0kO1FfB+ise0AVylaOHnnDqL0kVg= Subject key identifier: 78:52:6D:47:34:95:AB:09:17:CE:1E:9A:E9:21:81:F2:66:C5:CA:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498756FFF63487B33A7418F8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/288991fb-2c9d-3ccb-b9de-21673bc37e1b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.190.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:56:ff:f6:34:87:b3:3a:74:18:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49ffe53e-5497-42e9-92a8-04184c928919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:18:f0:e9:35:48:9e:aa:25:df:8b:e4:c2: 3c:ec:1c:7a:6b:a3:b4:d7:19:3f:af:ae:95:81:a3: f9:17:25:40:63:fe:76:ad:ec:cf:33:87:49:bf:59: 37:6c:e1:62:6c:c5:bc:ed:57:f1:84:30:b7:25:f2: 27:3b:24:3a:d4:17:36:32:ae:cd:e4:ab:00:33:a1: f0:0f:16:d9:47:73:e6:27:cd:c0:8b:8e:37:2e:2f: a8:bc:09:65:fb:98:fd:2e:f2:f3:a5:55:99:6a:65: f8:5a:21:0f:58:df:6a:04:99:19:43:c2:0d:01:ca: b8:eb:58:27:03:48:4d:e3:d3:60:28:8d:18:1a:80: 84:21:84:82:24:b4:c6:ae:4e:a0:9d:f7:1f:94:df: dd:20:eb:a3:06:1e:2d:c6:0b:ac:21:72:04:89:56: 87:b8:e6:5f:de:cd:dd:e9:da:50:b6:e6:ff:84:e1: 47:2d:79:64:41:32:7e:d1:90:5c:c0:40:65:9b:c6: 9c:47:86:f4:7b:43:3f:a8:4c:1c:be:16:49:47:ea: df:01:f6:84:67:90:df:55:f6:fe:51:21:52:10:2c: d6:df:ce:87:2d:d9:e2:ef:21:83:d3:95:4d:ad:cb: 90:0e:05:9b:c9:fb:77:6c:02:b1:a2:7c:4f:94:dc: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:6D:47:34:95:AB:09:17:CE:1E:9A:E9:21:81:F2:66:C5:CA:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/288991fb-2c9d-3ccb-b9de-21673bc37e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4c:ea:75:55:03:dc:39:4e:80:98:2a:40:fe:17:79:d8:0f: 4e:4d:1b:b0:c1:3f:b5:7a:9c:49:3e:dd:94:21:71:d4:a2:fc: d5:21:48:aa:9a:49:3a:3e:00:6f:98:67:96:f7:88:e6:1d:b6: dc:01:69:4d:c2:1f:dd:66:eb:f8:59:9c:84:37:6b:13:a3:69: 03:77:81:7e:bd:5a:42:c9:c4:43:51:66:36:0d:8e:4b:ba:49: cd:42:b1:d9:92:d1:5d:c3:00:81:85:3d:72:af:a5:ec:3f:21: b8:0e:51:26:96:eb:26:fa:f5:d3:bc:b4:f8:a4:4d:2e:a6:5e: ed:73:8f:82:28:3e:9f:9e:81:86:df:e9:44:58:34:44:52:3e: 7f:a9:72:0d:c5:b5:17:ff:dd:3a:91:fa:02:2f:59:cc:03:d2: 56:40:94:c8:cf:42:4d:36:ba:53:db:99:ba:e2:1f:e9:10:be: 8a:dc:57:61:2b:b8:ad:64:7a:f4:60:67:d5:f2:3f:62:ff:5e: 94:2d:0c:ab:ad:9f:62:50:1f:67:09:58:d7:ef:53:31:9d:e2: c7:29:10:00:55:8d:ec:9b:e9:10:f6:80:53:39:9d:76:b9:f1: b0:de:78:0c:2d:c3:c6:67:3b:aa:ba:b0:e7:7b:54:15:f0:77: da:75:dc:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh1b/9jSHszp0GPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDlmZmU1M2UtNTQ5Ny00MmU5LTkyYTgtMDQxODRjOTI4OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhIY8Ok1SJ6qJd+L5MI87Bx6a6O01xk/r66V gaP5FyVAY/52rezPM4dJv1k3bOFibMW87VfxhDC3JfInOyQ61Bc2Mq7N5KsAM6Hw DxbZR3PmJ83Ai443Li+ovAll+5j9LvLzpVWZamX4WiEPWN9qBJkZQ8INAcq461gn A0hN49NgKI0YGoCEIYSCJLTGrk6gnfcflN/dIOujBh4txgusIXIEiVaHuOZf3s3d 6dpQtub/hOFHLXlkQTJ+0ZBcwEBlm8acR4b0e0M/qEwcvhZJR+rfAfaEZ5DfVfb+ USFSECzW386HLdni7yGD05VNrcuQDgWbyft3bAKxonxPlNxObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhSbUc0lasJF84emukhgfJmxcoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjg4OTkxZmItMmM5ZC0z Y2NiLWI5ZGUtMjE2NzNiYzM3ZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdM6nVVA9w5ToCYKkD+F3nYD05NG7DBP7V6nEk+3ZQhcdSi/NUhSKqa STo+AG+YZ5b3iOYdttwBaU3CH91m6/hZnIQ3axOjaQN3gX69WkLJxENRZjYNjku6 Sc1CsdmS0V3DAIGFPXKvpew/IbgOUSaW6yb69dO8tPikTS6mXu1zj4IoPp+egYbf 6URYNERSPn+pcg3FtRf/3TqR+gIvWcwD0lZAlMjPQk02ulPbmbriH+kQvorcV2Er uK1kevRgZ9XyP2L/XpQtDKutn2JQH2cJWNfvUzGd4scpEABVjeyb6RD2gFM5nXa5 8bDeeAwtw8ZnO6q6sOd7VBXwd9p13KM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:08:38 2026 by rpki-client