$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa File: 90bedec6-b981-3a61-bcac-10457f374814.roa (raw, json) Hash identifier: zZ42MOHwqVEkmStalRK0w67X4mntTCRMwtwX1b9n/BU= Subject key identifier: 1F:0A:C1:4D:99:19:1B:F3:97:2D:BA:A5:D6:87:1B:A0:CB:68:32:C4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBD37CAEF9A15D2B25C40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.125.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bd:37:ca:ef:9a:15:d2:b2:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=22d8e44e-452f-4b95-a5b6-d42ae60bb580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:72:fb:f7:82:67:0f:7f:37:78:d3:55:7e: c1:59:8a:92:18:15:e9:88:46:1a:8d:0a:33:50:f1: c6:9c:5a:3c:1e:b1:15:19:49:78:40:da:05:08:4f: ca:fc:b0:3c:5b:f9:21:c7:ca:a7:45:b2:a1:08:2b: 47:99:c1:3e:f9:b7:52:0c:3e:23:d2:da:22:b0:e1: ed:46:58:73:95:31:d7:de:35:bb:68:12:e5:c3:9d: 24:2a:ed:f8:51:cd:81:d4:78:21:43:22:70:d4:8e: ec:38:47:79:c1:5f:17:e9:42:21:85:9e:d0:21:43: 03:f2:2f:c3:14:b6:c7:b4:cc:a8:32:66:2b:07:e0: 0b:bb:45:2b:42:ad:95:3a:cf:f2:63:b8:cc:87:01: 5e:f6:29:a0:6c:96:63:2d:16:4f:fc:0c:d3:13:9d: 47:6e:9d:0f:95:27:28:53:4d:cc:36:8a:89:25:01: 4d:79:f7:3d:df:ba:f6:35:04:3c:0b:a2:71:8c:26: 3f:51:ee:56:0e:15:30:cd:3b:59:4e:f9:7c:55:e1: 75:cc:6b:b0:5e:80:2f:7c:53:c0:d1:88:11:5d:c3: c0:d3:1f:65:ed:fd:0f:1f:e6:b3:d6:9a:88:3f:9d: ab:7b:f7:ae:e5:e1:d0:be:89:9f:79:9f:0f:2c:e1: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0A:C1:4D:99:19:1B:F3:97:2D:BA:A5:D6:87:1B:A0:CB:68:32:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7f:51:d9:f1:67:bc:e3:53:4f:be:eb:dc:94:4c:81:9b:aa: f2:7b:98:4f:e9:de:aa:79:9a:11:84:9e:3a:aa:15:d5:eb:e0: 89:b7:86:23:8f:83:6f:6a:b1:1d:f8:db:11:b6:5b:1f:9d:01: f9:5c:c4:b0:e3:0e:d3:58:ec:24:11:9d:d2:7b:59:2e:06:e6: b0:ea:0c:9b:a2:27:f3:ee:e5:1e:5a:a0:83:85:23:30:1c:42: b5:0c:3e:f4:1a:5f:d7:ff:44:9d:8e:09:d3:19:36:18:80:7a: 29:12:06:cc:6a:0c:84:80:3b:70:d3:82:37:e0:ae:3b:7c:bf: d1:51:2a:73:a9:ad:e2:47:c7:d0:9d:e8:60:81:5d:5a:8f:f9: 7b:2b:70:b2:9a:08:59:80:d3:0d:d3:84:92:ad:98:0c:25:17: 88:db:92:7b:4c:98:0f:fe:62:27:9e:b9:bb:e9:38:29:34:26: 4d:2d:b0:78:a5:c2:2a:4b:46:1e:d4:e1:d9:d6:9e:c9:7e:c9: 97:71:2e:ad:53:70:1d:01:ee:50:78:93:8f:9f:da:2f:fa:29: 89:06:29:f8:71:3c:ff:d8:79:a5:cb:ee:7e:d9:aa:1e:46:ba: 14:b0:42:b6:30:cc:e8:09:7c:86:f2:4b:50:13:15:15:00:0b: 7f:84:b6:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb03yu+aFdKyXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjJkOGU0NGUtNDUyZi00Yjk1LWE1YjYtZDQyYWU2MGJiNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXdy+/eCZw9/N3jTVX7BWYqSGBXpiEYajQoz UPHGnFo8HrEVGUl4QNoFCE/K/LA8W/khx8qnRbKhCCtHmcE++bdSDD4j0toisOHt RlhzlTHX3jW7aBLlw50kKu34Uc2B1HghQyJw1I7sOEd5wV8X6UIhhZ7QIUMD8i/D FLbHtMyoMmYrB+ALu0UrQq2VOs/yY7jMhwFe9imgbJZjLRZP/AzTE51Hbp0PlSco U03MNoqJJQFNefc937r2NQQ8C6JxjCY/Ue5WDhUwzTtZTvl8VeF1zGuwXoAvfFPA 0YgRXcPA0x9l7f0PH+az1pqIP52re/eu5eHQvomfeZ8PLOFQ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8KwU2ZGRvzly26pdaHG6DLaDLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBiZWRlYzYtYjk4MS0z YTYxLWJjYWMtMTA0NTdmMzc0ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9/UdnxZ7zjU0++69yUTIGbqvJ7mE/p3qp5mhGEnjqqFdXr4Im3hiOP g29qsR342xG2Wx+dAflcxLDjDtNY7CQRndJ7WS4G5rDqDJuiJ/Pu5R5aoIOFIzAc QrUMPvQaX9f/RJ2OCdMZNhiAeikSBsxqDISAO3DTgjfgrjt8v9FRKnOpreJHx9Cd 6GCBXVqP+XsrcLKaCFmA0w3ThJKtmAwlF4jbkntMmA/+YieeubvpOCk0Jk0tsHil wipLRh7U4dnWnsl+yZdxLq1TcB0B7lB4k4+f2i/6KYkGKfhxPP/YeaXL7n7Zqh5G uhSwQrYwzOgJfIbyS1ATFRUAC3+EttQ= -----END CERTIFICATE-----Generated at Tue Sep 29 16:38:10 2026 by rpki-client