$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa File: aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa (raw, json) Hash identifier: UzW51ywSI/oCazFUuYP+7BXAIP9a+M4K5dEm8Ope4tA= Subject key identifier: 05:C2:42:37:CC:8B:B3:0B:D1:15:A0:28:4B:58:51:D4:14:ED:43:5C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DADE75C48914BABCED880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.96.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ad:e7:5c:48:91:4b:ab:ce:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=618d28b8-054b-447b-9ea7-146d1283f367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:53:4c:8b:2d:2c:e3:71:d1:c8:8a:52:87: 0b:e2:cf:0a:1f:57:05:3c:4f:bb:00:84:7f:55:d4: 2c:dc:9a:ef:66:9d:f0:1b:aa:77:e9:aa:ba:39:87: e1:5e:89:9f:1a:63:7d:ba:0d:03:2d:d1:f7:4b:26: bb:11:d0:fe:94:85:43:b5:57:fb:f5:a1:e3:7c:f2: db:7a:5a:b2:da:b7:77:00:0b:b4:1a:73:49:ab:94: 1c:65:94:98:dc:01:05:b0:5c:cf:9a:5a:53:4c:14: 95:d9:a9:55:03:9b:f0:a7:30:08:38:1c:04:00:e9: 51:61:e8:7c:c8:8e:a2:72:09:5b:a0:ca:94:b4:1a: 95:a3:b1:88:30:86:86:2a:35:28:fd:2e:e9:f9:02: f7:2b:df:f8:90:1f:8b:e2:f0:b8:65:3d:ee:c8:64: c8:bc:d4:16:c4:d6:ee:f6:b4:b8:b9:aa:52:f9:f3: f0:21:e0:af:64:27:3b:08:bf:db:4e:91:d6:93:90: c1:b3:3a:95:a0:b6:8e:43:ad:30:07:67:3e:b7:e0: 18:ba:35:cb:09:33:fd:16:d9:12:a4:9f:a3:68:06: 16:eb:6d:4e:99:20:2f:5d:51:68:90:0f:6e:d8:c5: 0d:20:58:a1:82:1c:f2:79:8b:dd:eb:4d:61:0a:71: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C2:42:37:CC:8B:B3:0B:D1:15:A0:28:4B:58:51:D4:14:ED:43:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7b:56:27:db:3f:d1:15:86:1d:13:ca:19:a4:f0:a6:f6:d4: ab:f6:45:fa:4d:cd:51:1d:a9:10:84:b0:db:cd:9e:3c:ac:bd: 4d:85:4c:bd:68:5e:37:28:8c:89:54:14:c5:f4:1b:7c:66:dd: 89:52:d0:f8:63:ed:81:08:17:b0:95:a2:c2:2f:6f:ab:c9:04: 3d:e1:91:49:e0:33:60:5f:df:2f:37:15:02:1c:3f:f9:bf:ec: 39:81:21:3c:24:a4:9d:d5:be:ab:c4:4d:18:35:8e:c8:31:8e: ed:ad:05:c5:9c:6e:86:e0:a1:8d:54:90:8e:5d:ee:2d:c3:4e: 25:f3:18:d8:0e:42:72:8e:95:15:5e:72:70:ec:d0:e3:91:94: 03:83:ff:d2:c1:6b:e7:11:42:76:2b:46:b5:85:cf:aa:ea:82: 9f:1a:28:c7:e3:f0:d5:3a:bd:eb:c3:29:e2:90:61:a5:33:bd: 3d:40:2f:0c:22:da:04:47:ac:f8:0d:ea:93:1c:ac:9e:bb:65: 79:12:96:5e:2d:b0:d2:49:4c:cc:f9:5f:68:1d:2b:c4:87:ed: 4f:6a:88:d4:fd:62:7c:7c:5c:a5:d0:09:f2:a9:60:1a:bd:c7: 79:22:cd:77:04:65:07:0f:ef:45:c7:dd:60:3e:48:4f:4f:5a: f9:62:af:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPa3nXEiRS6vO2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjE4ZDI4YjgtMDU0Yi00NDdiLTllYTctMTQ2ZDEyODNmMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscxTTIstLONx0ciKUocL4s8KH1cFPE+7AIR/ VdQs3JrvZp3wG6p36aq6OYfhXomfGmN9ug0DLdH3Sya7EdD+lIVDtVf79aHjfPLb elqy2rd3AAu0GnNJq5QcZZSY3AEFsFzPmlpTTBSV2alVA5vwpzAIOBwEAOlRYeh8 yI6icglboMqUtBqVo7GIMIaGKjUo/S7p+QL3K9/4kB+L4vC4ZT3uyGTIvNQWxNbu 9rS4uapS+fPwIeCvZCc7CL/bTpHWk5DBszqVoLaOQ60wB2c+t+AYujXLCTP9FtkS pJ+jaAYW621OmSAvXVFokA9u2MUNIFihghzyeYvd601hCnHOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXCQjfMi7ML0RWgKEtYUdQU7UNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE5ZDk4MDUtY2YyZS0z OTE2LTliOGUtOGE0OGU2ZWFiNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ7VifbP9EVhh0Tyhmk8Kb21Kv2RfpNzVEdqRCEsNvNnjysvU2FTL1o XjcojIlUFMX0G3xm3YlS0Phj7YEIF7CVosIvb6vJBD3hkUngM2Bf3y83FQIcP/m/ 7DmBITwkpJ3VvqvETRg1jsgxju2tBcWcbobgoY1UkI5d7i3DTiXzGNgOQnKOlRVe cnDs0OORlAOD/9LBa+cRQnYrRrWFz6rqgp8aKMfj8NU6vevDKeKQYaUzvT1ALwwi 2gRHrPgN6pMcrJ67ZXkSll4tsNJJTMz5X2gdK8SH7U9qiNT9Ynx8XKXQCfKpYBq9 x3kizXcEZQcP70XH3WA+SE9PWvlir5I= -----END CERTIFICATE-----Generated at Mon Sep 28 16:25:20 2026 by rpki-client