$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa File: abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa (raw, json) Hash identifier: ynr/x+KTfT4cffxsR21Gqpbkr8aa4DGItyi2T2OOh30= Subject key identifier: 87:53:18:8D:0D:9B:89:34:97:98:AB:5D:83:85:30:B7:A7:26:48:2C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498530C8C04D2AFD643C6988 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.121.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:30:c8:c0:4d:2a:fd:64:3c:69:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60d9f090-54a3-4f79-b232-f9abee89d25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:4b:78:3a:24:45:73:ff:14:a7:a7:72:aa: d5:20:dd:0e:28:b5:1c:1a:eb:af:25:c0:0a:1c:93: c0:be:ce:5d:5e:1a:a9:7c:47:f2:60:cc:15:6d:20: da:51:11:05:cd:a9:2b:83:cf:67:d3:51:d0:c9:80: fa:ed:e3:00:29:86:e5:ec:c1:f3:0b:49:d8:91:9e: d4:ad:7b:4c:3f:62:2c:0b:51:48:6e:46:88:29:3b: 0f:98:25:2b:84:23:6b:f9:30:31:cb:cf:34:10:31: 13:c9:e6:42:84:37:08:64:68:c0:4e:22:74:66:aa: c3:01:a8:74:96:c9:37:f9:3b:31:5f:75:5d:05:cd: 33:6b:50:2e:c0:2e:98:e0:5e:18:27:05:d9:7b:61: 83:12:20:8b:e4:c6:67:7d:ed:09:f5:02:9f:97:f4: c4:e6:33:4f:51:3b:14:83:b9:5d:a3:be:6b:23:93: d5:96:68:a6:5a:e1:81:90:56:51:c6:ec:11:97:b8: 78:ea:db:53:f5:df:65:ba:f4:f9:2e:ec:93:ea:bf: f6:ba:3e:51:7a:59:86:da:b0:04:f6:08:63:0e:4e: 12:a6:f6:15:c7:d2:69:78:9b:5d:9c:56:d8:89:48: 73:f0:06:26:1c:8c:13:ca:d8:fe:8f:e2:cb:ef:55: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:53:18:8D:0D:9B:89:34:97:98:AB:5D:83:85:30:B7:A7:26:48:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abc938c3-0f04-3c1c-b2b5-db9bee7d5609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:47:de:e3:9d:c3:57:9f:d9:f3:e1:a3:ce:0f:ec:8e:9a:5b: f9:c2:06:8c:c0:99:26:31:c8:42:87:a1:9a:48:e3:9a:3a:c1: c7:11:b0:6d:83:44:1d:95:3e:65:07:94:f5:34:4f:ad:a9:41: 7e:9a:23:9c:bf:b5:0b:6c:69:d9:2b:7b:90:ca:3c:2d:a8:46: f4:39:01:38:ff:af:55:b8:04:8f:f7:81:30:c5:33:49:27:c7: 0d:6c:b8:fc:0a:d0:5a:7b:a0:2b:45:4f:95:b3:16:9a:c4:51: 8e:5e:e9:86:d6:20:09:1a:3e:37:72:00:8e:34:4f:f9:3a:74: 7d:dd:8f:d3:3d:00:e4:65:80:a9:0e:7f:6c:fc:86:1c:d0:3c: 7d:c9:cc:8b:1e:67:74:5b:9f:e5:eb:c3:3f:5d:06:c8:66:05: d6:5a:55:70:ca:87:44:29:ad:df:86:e2:3d:3d:8f:b0:35:ec: 2c:93:73:3d:3d:0e:9a:c6:f7:0e:e4:80:8e:4d:85:2c:ac:31: da:e6:5e:ed:5f:1f:77:d3:af:b2:21:5a:43:69:66:ec:83:db: bd:e2:2e:b3:06:be:70:a5:56:5c:84:46:c3:75:bb:7b:5c:24: 7f:a2:e0:1f:57:0f:52:ad:4a:37:52:d3:9a:30:f8:9b:44:02: d8:95:8f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhTDIwE0q/WQ8aYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBkOWYwOTAtNTRhMy00Zjc5LWIyMzItZjlhYmVlODlkMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvFLeDokRXP/FKencqrVIN0OKLUcGuuvJcAK HJPAvs5dXhqpfEfyYMwVbSDaUREFzakrg89n01HQyYD67eMAKYbl7MHzC0nYkZ7U rXtMP2IsC1FIbkaIKTsPmCUrhCNr+TAxy880EDETyeZChDcIZGjATiJ0ZqrDAah0 lsk3+TsxX3VdBc0za1AuwC6Y4F4YJwXZe2GDEiCL5MZnfe0J9QKfl/TE5jNPUTsU g7ldo75rI5PVlmimWuGBkFZRxuwRl7h46ttT9d9luvT5LuyT6r/2uj5RelmG2rAE 9ghjDk4SpvYVx9JpeJtdnFbYiUhz8AYmHIwTytj+j+LL71XZkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdTGI0Nm4k0l5irXYOFMLenJkgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWJjOTM4YzMtMGYwNC0z YzFjLWIyYjUtZGI5YmVlN2Q1NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdH3uOdw1ef2fPho84P7I6aW/nCBozAmSYxyEKHoZpI45o6wccRsG2D RB2VPmUHlPU0T62pQX6aI5y/tQtsadkre5DKPC2oRvQ5ATj/r1W4BI/3gTDFM0kn xw1suPwK0Fp7oCtFT5WzFprEUY5e6YbWIAkaPjdyAI40T/k6dH3dj9M9AORlgKkO f2z8hhzQPH3JzIseZ3Rbn+Xrwz9dBshmBdZaVXDKh0Qprd+G4j09j7A17CyTcz09 DprG9w7kgI5NhSysMdrmXu1fH3fTr7IhWkNpZuyD273iLrMGvnClVlyERsN1u3tc JH+i4B9XD1KtSjdS05ow+JtEAtiVj4s= -----END CERTIFICATE-----Generated at Tue Sep 29 13:04:51 2026 by rpki-client