$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a90d132-d83c-3048-9ead-d6c2708162f3.roa File: 2a90d132-d83c-3048-9ead-d6c2708162f3.roa (raw, json) Hash identifier: m+TzERO6WjsgFxTa6lU4MuB506P3r0Nbl3StYbYpUxc= Subject key identifier: 05:9D:EB:69:7D:08:E7:89:6B:1C:BF:91:61:A1:23:86:D6:F4:76:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F549DAF6495D34C16C1E097C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a90d132-d83c-3048-9ead-d6c2708162f3.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.1.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:af:64:95:d3:4c:16:c1:e0:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2fc8426b-7957-478b-911d-cedefed95a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:34:da:08:20:2f:d2:e8:86:c6:30:ba:d9: 19:a0:aa:40:ca:6b:bb:22:b1:b9:4e:79:71:d0:d3: 1a:63:ab:82:f3:fc:27:8d:ff:fe:3e:2f:0b:8f:de: 49:70:9e:84:2a:64:6b:22:59:ae:a0:3c:d9:ea:bf: 6f:81:d1:4f:2a:8a:26:2e:4e:30:57:e4:fc:01:de: 70:44:dd:bf:2d:3c:50:7e:19:13:f5:ab:ec:6a:0c: 4c:c7:43:52:b7:bb:55:c1:05:ee:bc:ee:34:ed:fa: 74:42:10:1a:77:14:19:74:a7:90:18:5c:dd:9d:06: eb:07:96:40:0f:a4:af:66:df:40:73:e2:6f:e4:51: 16:1b:4a:17:57:b9:0a:bb:b3:2a:4d:50:9c:95:79: 16:ab:b6:d2:f5:4a:d6:82:a5:6e:a1:b9:9a:82:d5: c6:07:c5:7e:e0:e6:d4:74:f6:77:39:64:6d:c2:68: e8:3a:77:ca:0f:00:19:75:47:06:87:dd:03:99:13: 91:07:b9:51:11:48:c3:1f:90:1b:c1:8b:a7:ab:f9: 69:18:91:c5:a9:bb:38:38:1d:ba:9b:6f:9b:71:a3: 03:38:1b:1d:52:72:c9:bf:10:6c:e6:29:22:64:67: 62:82:48:fa:14:4a:3a:b2:74:82:9d:94:02:b0:a6: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9D:EB:69:7D:08:E7:89:6B:1C:BF:91:61:A1:23:86:D6:F4:76:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a90d132-d83c-3048-9ead-d6c2708162f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:51:b4:c9:45:72:f4:28:58:00:e0:cd:9f:1e:c2:ad:58:df: e8:25:7a:e9:17:68:90:32:ad:99:4f:23:81:80:ce:05:56:c0: 0e:d4:f9:7d:c8:a8:0a:01:d2:9d:00:d2:0c:44:32:43:58:41: 4c:6b:bb:4f:76:5d:f0:4f:1b:7c:84:3d:e7:e7:81:11:a0:43: e4:5e:32:6d:43:65:2d:92:4e:7d:ec:d3:27:3e:b9:2c:8c:64: 6b:ef:27:ff:cd:5e:f5:40:dd:43:fc:b3:dd:f1:09:6b:a3:02: 9a:2f:71:5c:5d:ac:a6:83:0c:d6:d8:eb:08:f4:a4:0d:53:8f: ba:bc:d0:ec:22:a1:b8:88:70:fc:31:cb:46:70:f3:ce:69:25: e6:c0:13:20:76:64:a3:21:d8:6f:95:37:b4:3b:79:e5:86:95: bb:46:dc:6a:13:0a:b7:bf:1a:09:19:27:f2:59:af:bf:2f:96: a6:cf:3f:04:67:78:97:8f:c8:f5:19:98:c4:0d:ce:77:d2:60: 5d:8d:63:50:99:a8:44:f7:b5:bd:a5:8f:b0:12:0c:3a:b3:95: 84:90:e8:12:fb:2a:ed:bf:49:84:4b:6f:85:2a:79:ab:a9:ee: 34:79:7f:de:f3:a1:a2:34:fa:ca:03:0b:93:e6:22:71:d7:5d: d8:cc:04:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Una9kldNMFsHgl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmZjODQyNmItNzk1Ny00NzhiLTkxMWQtY2VkZWZlZDk1YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLE02gggL9LohsYwutkZoKpAymu7IrG5Tnlx 0NMaY6uC8/wnjf/+Pi8Lj95JcJ6EKmRrIlmuoDzZ6r9vgdFPKoomLk4wV+T8Ad5w RN2/LTxQfhkT9avsagxMx0NSt7tVwQXuvO407fp0QhAadxQZdKeQGFzdnQbrB5ZA D6SvZt9Ac+Jv5FEWG0oXV7kKu7MqTVCclXkWq7bS9UrWgqVuobmagtXGB8V+4ObU dPZ3OWRtwmjoOnfKDwAZdUcGh90DmRORB7lREUjDH5AbwYunq/lpGJHFqbs4OB26 m2+bcaMDOBsdUnLJvxBs5ikiZGdigkj6FEo6snSCnZQCsKbnSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWd62l9COeJaxy/kWGhI4bW9Hb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmE5MGQxMzItZDgzYy0z MDQ4LTllYWQtZDZjMjcwODE2MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhRtMlFcvQoWADgzZ8ewq1Y3+gleukXaJAyrZlPI4GAzgVWwA7U+X3I qAoB0p0A0gxEMkNYQUxru092XfBPG3yEPefngRGgQ+ReMm1DZS2STn3s0yc+uSyM ZGvvJ//NXvVA3UP8s93xCWujApovcVxdrKaDDNbY6wj0pA1Tj7q80OwiobiIcPwx y0Zw885pJebAEyB2ZKMh2G+VN7Q7eeWGlbtG3GoTCre/GgkZJ/JZr78vlqbPPwRn eJePyPUZmMQNznfSYF2NY1CZqET3tb2lj7ASDDqzlYSQ6BL7Ku2/SYRLb4Uqeaup 7jR5f97zoaI0+soDC5PmInHXXdjMBIs= -----END CERTIFICATE-----Generated at Tue Sep 29 12:22:59 2026 by rpki-client