$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d76625c-4abc-3d0d-abb9-c5888fe01491.roa File: 9d76625c-4abc-3d0d-abb9-c5888fe01491.roa (raw, json) Hash identifier: aE31iCABhaS6GjDdKZzj/Aq+0Wq5HZqk9I3GcN64+FI= Subject key identifier: 12:A8:D5:FF:90:95:AE:C1:6E:AB:DB:D3:BD:73:0A:AD:BF:04:0D:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49733A12B5686FE7CDC94B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d76625c-4abc-3d0d-abb9-c5888fe01491.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3a:12:b5:68:6f:e7:cd:c9:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d923fa37-f745-4e55-9415-6f81232d47a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ca:01:6d:e5:a8:2b:28:5a:91:3e:2f:3c:36: a0:ff:5d:da:a2:95:f4:dc:70:95:9d:78:be:73:60: 68:83:66:7c:44:ee:24:21:9b:04:39:ae:eb:d6:13: f6:38:cb:af:8c:d2:0d:3f:cf:fc:ca:f4:83:42:b8: 07:2c:7a:3e:57:19:5d:cf:12:cb:b3:16:73:0c:a1: a5:dc:09:7f:05:72:52:9f:86:32:01:01:c7:76:af: b2:d2:d2:d6:84:6b:0a:99:84:c2:64:9f:b3:08:a7: b8:9a:ff:1a:8d:1c:90:d0:c9:e1:1a:a9:e8:d3:3a: f2:1c:1f:04:5f:18:17:51:57:03:d0:ad:24:e5:d4: eb:ac:b0:f6:94:a5:e9:ea:9c:db:ad:bc:3b:1e:3c: aa:50:07:d2:20:9e:0b:59:bd:43:88:33:53:77:c9: 2b:af:a0:5e:f3:e1:8e:f2:4c:8a:94:97:2a:74:a6: 63:0e:95:7f:cd:c7:40:36:c0:33:88:db:0b:a5:23: 18:a8:23:17:4b:b3:43:a3:66:14:47:56:11:ef:42: 72:a0:b1:32:4b:8a:23:86:bf:cc:07:01:c3:03:4e: 65:ec:a3:92:28:5c:fd:7a:d5:a9:f0:26:11:0a:0f: b0:37:0d:71:58:c4:13:e9:a0:09:61:58:e8:f4:39: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A8:D5:FF:90:95:AE:C1:6E:AB:DB:D3:BD:73:0A:AD:BF:04:0D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d76625c-4abc-3d0d-abb9-c5888fe01491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:32:2e:35:d9:9a:47:1f:f2:51:86:8c:7f:1e:12:04:11:03: 86:b3:b8:51:65:95:c8:8a:20:61:36:ae:ce:24:c3:73:c1:b8: 24:c8:49:c6:6e:e3:07:72:ab:9e:12:35:6a:49:55:8c:f6:cb: 6b:c5:9e:a3:67:1f:ca:0e:6e:af:16:3f:94:07:80:ed:fc:c9: 8c:cb:ad:74:c2:b8:f1:65:91:72:5e:a9:df:23:ea:3f:1d:cc: b6:9c:76:09:fa:9b:ad:4d:bd:f3:69:8f:7e:35:63:d7:cc:03: 02:6b:88:16:ed:08:14:d2:2d:4c:31:a2:35:f2:b8:cb:d5:a0: e5:31:bf:49:ee:12:f1:cd:7c:27:88:47:05:a3:a8:ad:89:ab: da:ca:b3:0b:2f:b1:51:b4:df:7a:0a:2e:fa:1f:ab:e5:ce:c1: 50:13:3b:e8:8e:87:c9:e7:02:9f:fb:02:cf:ee:dc:bb:72:5a: 1e:3c:33:4d:36:43:10:bb:ba:1c:2e:59:2e:f0:b2:3d:82:2c: 3f:20:70:d7:05:6f:2b:fd:49:5d:f7:e3:d9:3e:4b:40:7d:ee: 6e:32:0f:3e:73:b4:5b:bd:61:06:6f:96:72:84:c7:91:ac:58: 2a:2e:df:3c:39:1c:de:dd:4a:c6:25:93:3d:71:a3:f6:a5:93: 09:1f:8d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczoStWhv583JSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkyM2ZhMzctZjc0NS00ZTU1LTk0MTUtNmY4MTIzMmQ0N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcoBbeWoKyhakT4vPDag/13aopX03HCVnXi+ c2Bog2Z8RO4kIZsEOa7r1hP2OMuvjNINP8/8yvSDQrgHLHo+VxldzxLLsxZzDKGl 3Al/BXJSn4YyAQHHdq+y0tLWhGsKmYTCZJ+zCKe4mv8ajRyQ0MnhGqno0zryHB8E XxgXUVcD0K0k5dTrrLD2lKXp6pzbrbw7HjyqUAfSIJ4LWb1DiDNTd8krr6Be8+GO 8kyKlJcqdKZjDpV/zcdANsAziNsLpSMYqCMXS7NDo2YUR1YR70JyoLEyS4ojhr/M BwHDA05l7KOSKFz9etWp8CYRCg+wNw1xWMQT6aAJYVjo9DlgdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKo1f+Qla7Bbqvb071zCq2/BA1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWQ3NjYyNWMtNGFiYy0z ZDBkLWFiYjktYzU4ODhmZTAxNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEyLjXZmkcf8lGGjH8eEgQRA4azuFFllciKIGE2rs4kw3PBuCTIScZu 4wdyq54SNWpJVYz2y2vFnqNnH8oObq8WP5QHgO38yYzLrXTCuPFlkXJeqd8j6j8d zLacdgn6m61NvfNpj341Y9fMAwJriBbtCBTSLUwxojXyuMvVoOUxv0nuEvHNfCeI RwWjqK2Jq9rKswsvsVG033oKLvofq+XOwVATO+iOh8nnAp/7As/u3LtyWh48M002 QxC7uhwuWS7wsj2CLD8gcNcFbyv9SV3349k+S0B97m4yDz5ztFu9YQZvlnKEx5Gs WCou3zw5HN7dSsYlkz1xo/alkwkfjYI= -----END CERTIFICATE-----Generated at Sun Sep 27 01:44:56 2026 by rpki-client