$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa File: 7f9cd50e-9499-3c72-900d-be101e4479c2.roa (raw, json) Hash identifier: HmGC4t+4J2TIYwJubzjpDuCST1GNXUH2zEeVHEV9dvk= Subject key identifier: F2:21:01:05:9C:4F:E3:36:2D:44:27:D7:8D:77:88:CD:D6:40:0B:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F093CFAA20339C80B4BB45A78 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.1.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:fa:a2:03:39:c8:0b:4b:b4:5a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=5e1e9d64-e717-4f47-9064-fd7ea03bb468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cc:c9:63:56:d2:ef:37:bb:f8:95:f0:1d:af: 04:ef:27:28:57:e9:9b:fc:0e:d2:2e:f2:86:92:bb: 51:9d:87:e3:0b:0d:0a:60:fc:a4:ac:d2:09:f9:50: b3:41:6d:92:59:07:c9:77:36:d6:d1:05:77:67:1f: 26:eb:be:46:87:ae:cc:68:fb:ab:8d:63:53:46:44: 0c:c5:c1:e9:c6:07:5e:0b:a6:e3:1c:7f:e2:02:54: 56:f9:5a:3c:05:8c:66:be:36:ee:8a:5b:ef:bd:5a: 48:59:46:3e:66:02:79:0b:31:31:8f:d3:f1:38:48: 49:fe:97:e2:65:b9:4f:f4:fb:a8:ff:aa:90:12:6f: 63:13:5c:c4:75:c8:ac:96:b1:d1:f0:73:93:46:b7: 7a:16:2e:54:6f:56:26:27:fd:be:30:b5:cd:d9:f3: c1:61:29:85:ab:d3:8a:45:86:81:d5:96:5d:0a:a9: 24:17:dc:66:17:a9:b7:b1:37:05:9e:8e:aa:b3:58: 43:09:f0:50:41:41:78:b2:4c:92:7e:2e:4d:94:7c: 16:c9:61:13:41:33:26:a5:5f:5d:22:c0:6a:41:05: f8:e0:79:90:cf:19:fe:d7:fd:b6:c3:3c:d0:2f:52: 30:b9:76:67:42:9e:40:00:85:5d:9a:f9:c6:56:25: 27:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:21:01:05:9C:4F:E3:36:2D:44:27:D7:8D:77:88:CD:D6:40:0B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:60:02:8b:7b:10:27:f3:f6:41:67:6c:52:1c:21:90:d5:95: e6:ec:13:42:ae:83:c5:a4:db:13:ec:85:30:61:ff:9c:6e:83: 10:67:04:8a:69:0a:e4:f3:c0:2e:c4:14:d1:a9:e5:49:a4:85: 36:cc:bc:be:c9:07:80:08:8e:c5:16:54:eb:c6:2b:7f:63:e3: 4a:39:34:6d:ea:6b:d5:e8:2d:00:cc:dd:6b:cb:bc:4f:eb:0a: 34:6a:36:84:be:fa:d9:33:7d:03:ea:5b:30:27:c5:61:d6:17: 38:55:21:b6:d8:c8:36:6f:61:7a:df:76:5b:98:34:35:cc:7c: c0:04:82:a4:f3:a4:bf:59:81:01:20:42:1c:6d:e8:c9:42:f7: 8d:5f:9f:a4:87:7e:3d:ff:89:aa:bc:69:4a:ce:69:34:3a:cc: bd:9a:eb:e5:01:99:3a:e6:bf:00:2a:91:10:db:eb:a4:bf:ee: ee:b6:f2:1b:69:a0:ba:f6:c3:fc:cb:b1:a4:56:52:14:0e:78: 36:77:0e:73:7b:04:36:6f:42:48:1f:41:f4:2e:f7:76:c8:85: 59:52:2e:10:f1:92:f5:8f:01:35:06:c5:9a:e8:a5:6a:12:05: de:86:c8:35:be:0f:ed:b1:e3:86:6c:79:a5:26:09:88:c5:bc: 83:ec:2b:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPqiAznIC0u0WngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NWUxZTlkNjQtZTcxNy00ZjQ3LTkwNjQtZmQ3ZWEwM2JiNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8zJY1bS7ze7+JXwHa8E7ycoV+mb/A7SLvKG krtRnYfjCw0KYPykrNIJ+VCzQW2SWQfJdzbW0QV3Zx8m675Gh67MaPurjWNTRkQM xcHpxgdeC6bjHH/iAlRW+Vo8BYxmvjbuilvvvVpIWUY+ZgJ5CzExj9PxOEhJ/pfi ZblP9Puo/6qQEm9jE1zEdcislrHR8HOTRrd6Fi5Ub1YmJ/2+MLXN2fPBYSmFq9OK RYaB1ZZdCqkkF9xmF6m3sTcFno6qs1hDCfBQQUF4skySfi5NlHwWyWETQTMmpV9d IsBqQQX44HmQzxn+1/22wzzQL1IwuXZnQp5AAIVdmvnGViUn/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIhAQWcT+M2LUQn1413iM3WQAuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2Y5Y2Q1MGUtOTQ5OS0z YzcyLTkwMGQtYmUxMDFlNDQ3OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlgAot7ECfz9kFnbFIcIZDVlebsE0Kug8Wk2xPshTBh/5xugxBnBIpp CuTzwC7EFNGp5UmkhTbMvL7JB4AIjsUWVOvGK39j40o5NG3qa9XoLQDM3WvLvE/r CjRqNoS++tkzfQPqWzAnxWHWFzhVIbbYyDZvYXrfdluYNDXMfMAEgqTzpL9ZgQEg Qhxt6MlC941fn6SHfj3/iaq8aUrOaTQ6zL2a6+UBmTrmvwAqkRDb66S/7u628htp oLr2w/zLsaRWUhQOeDZ3DnN7BDZvQkgfQfQu93bIhVlSLhDxkvWPATUGxZropWoS Bd6GyDW+D+2x44ZseaUmCYjFvIPsK3Y= -----END CERTIFICATE-----Generated at Tue Sep 29 00:03:57 2026 by rpki-client