$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c07381e-2407-34da-8916-bf3f41d5f524.roa File: 4c07381e-2407-34da-8916-bf3f41d5f524.roa (raw, json) Hash identifier: zJurSTIlDidbeyckYm5eeSeojCnTc0KqD/FMDLt+7DA= Subject key identifier: 10:0C:8D:37:AD:E6:BF:CE:D0:18:90:34:93:F5:60:6B:97:68:78:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4972CD21C7ED64A0D5E91D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c07381e-2407-34da-8916-bf3f41d5f524.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.4.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:cd:21:c7:ed:64:a0:d5:e9:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6665cec2-82b1-4d6f-b68e-30aa981de52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:95:1a:60:ff:6a:b9:43:a1:ee:8b:67:07: f0:f5:53:09:45:f8:9d:a7:7b:d8:1a:3e:aa:86:aa: 88:52:6b:78:76:8f:a2:e5:f0:fa:cf:ae:47:8b:fd: ff:eb:ed:53:86:15:df:8a:4d:b8:44:24:b6:92:a2: 29:2a:f6:8d:8f:62:59:ca:4b:f9:67:be:67:b4:30: d5:a6:a1:d8:a7:21:fd:e5:ba:71:7f:54:ca:dd:96: ee:9d:84:e8:8b:c3:78:d8:e7:39:04:5d:a2:38:27: 99:dd:65:ce:f4:f0:38:8b:a3:87:7a:f0:ee:b0:2d: f6:c0:d9:bf:18:87:65:22:36:0c:3b:c6:85:ba:60: 49:24:b4:65:f5:5e:8e:ec:ca:79:12:0d:e9:54:95: 2a:2e:1c:1f:5a:e8:52:91:0b:31:13:e2:31:31:34: 09:71:49:3b:8e:51:a3:98:00:f7:57:cb:83:f8:d4: 4f:d9:f2:58:d0:26:56:66:31:b9:74:66:7d:5b:46: 77:45:96:9d:cb:f0:8f:bd:6f:c5:ee:c2:05:50:be: af:43:6c:56:6e:73:2b:b0:19:96:0e:20:e1:80:02: 2f:b1:01:fc:97:bc:bf:9d:06:c4:ac:a0:23:65:7d: 99:ef:7c:42:bd:17:cf:2d:52:dd:cc:f8:4d:f5:af: be:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0C:8D:37:AD:E6:BF:CE:D0:18:90:34:93:F5:60:6B:97:68:78:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c07381e-2407-34da-8916-bf3f41d5f524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ca:8c:6f:c0:21:43:33:37:02:83:6a:d4:c2:65:be:bb:3e: ec:31:81:2c:7f:38:f3:08:fe:00:d4:00:35:6b:bf:10:20:45: fe:0e:0c:27:aa:ab:7b:2f:12:c4:32:5f:90:b7:6e:46:bd:4b: f7:33:bd:43:a7:8d:27:2e:0f:8b:64:83:27:ae:3b:a0:f1:6b: b1:be:b9:9e:e0:3e:e2:1f:3c:45:00:e4:48:a2:5f:32:3b:01: 2a:95:64:45:05:00:1b:52:28:98:5a:71:81:d7:56:80:2a:78: de:e0:9b:60:22:42:82:db:7a:6a:93:ab:36:f8:55:e5:bf:d7: 1f:03:75:5a:3b:b4:2e:8d:1e:1e:cc:05:9c:9a:f3:6c:c5:ba: 41:c3:2b:b5:37:01:ab:11:db:e3:7d:95:b0:cc:70:38:50:f5: 67:63:9f:9d:7f:d3:0c:b0:d2:2b:4c:a5:ae:b5:30:a5:f8:68: 4e:13:dd:24:a5:63:f1:ea:42:95:0a:9f:15:9b:e7:22:31:8f: 9c:93:3d:13:8f:be:8d:39:ed:30:55:5d:24:3e:1e:2c:cc:1e: e0:a8:c4:c4:9f:22:72:74:8f:b6:0a:77:31:28:94:d2:79:67: 97:e3:a7:16:4b:6e:c3:43:7f:a2:f4:9e:c5:d2:16:3a:0d:7c: 5f:54:4b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcs0hx+1koNXpHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjY2NWNlYzItODJiMS00ZDZmLWI2OGUtMzBhYTk4MWRlNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7uVGmD/arlDoe6LZwfw9VMJRfidp3vYGj6q hqqIUmt4do+i5fD6z65Hi/3/6+1ThhXfik24RCS2kqIpKvaNj2JZykv5Z75ntDDV pqHYpyH95bpxf1TK3ZbunYToi8N42Oc5BF2iOCeZ3WXO9PA4i6OHevDusC32wNm/ GIdlIjYMO8aFumBJJLRl9V6O7Mp5Eg3pVJUqLhwfWuhSkQsxE+IxMTQJcUk7jlGj mAD3V8uD+NRP2fJY0CZWZjG5dGZ9W0Z3RZady/CPvW/F7sIFUL6vQ2xWbnMrsBmW DiDhgAIvsQH8l7y/nQbErKAjZX2Z73xCvRfPLVLdzPhN9a++PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAMjTet5r/O0BiQNJP1YGuXaHgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGMwNzM4MWUtMjQwNy0z NGRhLTg5MTYtYmYzZjQxZDVmNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrKjG/AIUMzNwKDatTCZb67PuwxgSx/OPMI/gDUADVrvxAgRf4ODCeq q3svEsQyX5C3bka9S/czvUOnjScuD4tkgyeuO6Dxa7G+uZ7gPuIfPEUA5EiiXzI7 ASqVZEUFABtSKJhacYHXVoAqeN7gm2AiQoLbemqTqzb4VeW/1x8DdVo7tC6NHh7M BZya82zFukHDK7U3AasR2+N9lbDMcDhQ9Wdjn51/0wyw0itMpa61MKX4aE4T3SSl Y/HqQpUKnxWb5yIxj5yTPROPvo057TBVXSQ+HizMHuCoxMSfInJ0j7YKdzEolNJ5 Z5fjpxZLbsNDf6L0nsXSFjoNfF9US8g= -----END CERTIFICATE-----Generated at Sat Sep 26 09:52:21 2026 by rpki-client