$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aee7b4ac-bdaa-35cc-a517-12805e63920d.roa File: aee7b4ac-bdaa-35cc-a517-12805e63920d.roa (raw, json) Hash identifier: jmqr0FUzwj65ns+LQJn8sbcWTYIrAOk5cPrRKXdayy0= Subject key identifier: 06:08:C0:0E:5A:02:1C:07:C0:50:A1:B5:F4:46:36:26:36:54:8D:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F11A1595F100FB42297F04200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aee7b4ac-bdaa-35cc-a517-12805e63920d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 214611 IP address blocks: 34.3.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:59:5f:10:0f:b4:22:97:f0:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=fcf06abd-921a-455c-956e-156033b148c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:ef:1a:bd:88:76:ab:ba:e0:b4:e9:1e:cd: c2:c0:3b:73:93:ed:62:1d:b4:90:ae:7d:ad:cb:1c: 4c:e1:2a:ae:2d:27:d0:bb:ce:b7:c3:91:73:27:e4: 42:fe:33:c3:1b:bf:3f:cc:41:ec:6a:27:4f:ad:1c: c8:8a:8f:65:6c:19:cc:82:4e:8f:a6:79:89:f1:af: 0b:05:9d:52:ab:b9:b9:1e:82:b5:48:6d:b4:28:3d: 2d:a1:2f:2e:b6:0e:84:b3:17:31:bb:c5:26:6c:c3: aa:32:84:b5:71:2f:41:df:17:3f:a9:a5:21:a7:da: 66:fc:76:da:ac:2d:de:81:a1:62:cb:d3:67:02:14: 0c:32:42:65:48:64:e8:b2:0d:ad:b0:4f:ad:b4:03: b6:e3:08:cd:d5:ef:c4:23:70:b4:ff:8b:df:94:7e: c2:f0:00:cb:52:a2:ee:28:92:00:bf:d9:f7:6a:f0: 6c:3c:c0:69:41:5e:26:51:c0:33:07:a5:b9:53:8b: 9d:88:70:51:d2:4d:05:bb:ed:85:23:89:f7:84:7b: b4:85:91:72:6b:f9:2e:55:f0:06:f1:d9:8e:fb:65: de:11:61:02:60:54:7c:dd:4c:b7:50:57:37:ee:3b: dc:68:2d:62:fa:61:3d:54:25:7c:bb:f0:80:50:53: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:C0:0E:5A:02:1C:07:C0:50:A1:B5:F4:46:36:26:36:54:8D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aee7b4ac-bdaa-35cc-a517-12805e63920d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8d:b7:4a:5b:fa:66:10:aa:05:ca:e3:fd:bd:92:56:cd:ae: 7b:40:9b:0a:ec:00:f7:b3:83:67:b4:0f:2e:21:c0:77:ff:2e: 5a:8d:81:75:c2:85:06:00:0e:38:a1:d7:fe:88:11:2f:6c:79: a4:77:c1:7b:d0:7b:4b:fd:a2:e5:9e:ab:7f:67:bc:f4:50:bd: 50:a6:ba:cb:73:21:00:76:7e:4d:01:16:b5:9a:fe:74:7f:72: 37:7d:7e:c5:b6:19:31:92:8f:10:bb:de:6f:79:ee:72:08:67: 2b:56:3a:ce:09:fc:74:aa:5d:5b:45:4e:08:60:81:fa:a7:fb: f7:d9:a2:4b:93:89:10:9d:c2:aa:a9:42:cc:d1:02:2e:a5:db: f1:9a:23:40:8c:7a:ce:46:2f:b0:65:b5:30:60:1f:a1:67:f2: 72:99:98:c9:a3:1c:0b:1c:f2:a9:84:82:f0:ad:66:ac:b7:d5: 87:62:7e:e6:69:ed:e8:13:93:1c:7e:a7:8a:83:a3:ed:67:96: c8:00:b9:e3:c0:2f:7f:28:aa:18:53:35:2b:a5:35:9a:fc:2f: 02:d9:f6:07:26:b3:52:38:7e:27:bc:8f:c1:66:a7:82:4d:d5: b6:cf:17:d8:7c:a7:00:b0:5f:f2:af:c6:64:ce:f5:2d:fa:b8: 92:7a:24:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVlfEA+0IpfwQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmNmMDZhYmQtOTIxYS00NTVjLTk1NmUtMTU2MDMzYjE0OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldrvGr2Idqu64LTpHs3CwDtzk+1iHbSQrn2t yxxM4SquLSfQu863w5FzJ+RC/jPDG78/zEHsaidPrRzIio9lbBnMgk6PpnmJ8a8L BZ1Sq7m5HoK1SG20KD0toS8utg6Esxcxu8UmbMOqMoS1cS9B3xc/qaUhp9pm/Hba rC3egaFiy9NnAhQMMkJlSGTosg2tsE+ttAO24wjN1e/EI3C0/4vflH7C8ADLUqLu KJIAv9n3avBsPMBpQV4mUcAzB6W5U4udiHBR0k0Fu+2FI4n3hHu0hZFya/kuVfAG 8dmO+2XeEWECYFR83Uy3UFc37jvcaC1i+mE9VCV8u/CAUFPYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYIwA5aAhwHwFChtfRGNiY2VI3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVlN2I0YWMtYmRhYS0z NWNjLWE1MTctMTI4MDVlNjM5MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIgOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCNt0pb+mYQqgXK4/29klbNrntAmwrsAPezg2e0Dy4hwHf/LlqNgXXC hQYADjih1/6IES9seaR3wXvQe0v9ouWeq39nvPRQvVCmustzIQB2fk0BFrWa/nR/ cjd9fsW2GTGSjxC73m957nIIZytWOs4J/HSqXVtFTghggfqn+/fZokuTiRCdwqqp QszRAi6l2/GaI0CMes5GL7BltTBgH6Fn8nKZmMmjHAsc8qmEgvCtZqy31YdifuZp 7egTkxx+p4qDo+1nlsgAuePAL38oqhhTNSulNZr8LwLZ9gcms1I4fie8j8Fmp4JN 1bbPF9h8pwCwX/KvxmTO9S36uJJ6JBU= -----END CERTIFICATE-----Generated at Mon Sep 28 20:26:50 2026 by rpki-client