$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f4b9a-0498-3178-be0e-3930dc62e56d.roa File: bf6f4b9a-0498-3178-be0e-3930dc62e56d.roa (raw, json) Hash identifier: zV4O/JXRVds7Ecx+EQi289wsCKw7RabaVVRlsFr18zs= Subject key identifier: DE:35:8E:70:54:32:1C:18:DB:88:F9:F8:8C:E3:A0:8B:82:F5:3B:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4988DD57A0D3844D33CFE140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f4b9a-0498-3178-be0e-3930dc62e56d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.190.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:dd:57:a0:d3:84:4d:33:cf:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e01dcf1a-4193-4d23-9c82-2cfccbd36cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:f2:b2:bf:fe:f3:ae:b2:2c:6e:02:b7:00: 86:0f:aa:2f:f7:b7:27:2a:45:9d:7d:fb:ff:cb:31: 9f:da:51:02:b0:5d:05:80:86:be:06:52:e1:de:e0: a8:ac:98:08:be:8e:d5:ca:be:2a:ac:8f:57:d8:a4: af:30:fc:e4:31:5c:32:db:b5:b6:ec:da:b9:5c:a6: ba:08:74:b5:19:0c:1a:37:12:29:a8:5f:10:1e:a3: bf:84:3d:1d:63:6f:51:74:ab:0c:9c:fd:4f:bd:56: 58:85:8b:c1:3f:c2:14:ee:89:88:95:5e:64:00:14: 62:a0:28:e1:04:dc:40:46:26:c0:c4:17:60:da:b9: c2:21:6b:80:b9:5a:6c:63:83:75:d1:4a:f9:ac:06: 0f:e3:b1:c4:53:2e:37:22:44:dc:57:a8:e0:90:69: df:5f:9d:74:39:85:2b:5b:9a:b2:8d:94:4f:d8:03: 8c:0d:51:14:ce:b1:0f:80:1c:a4:e0:d1:20:91:46: d3:f1:83:4c:88:c8:ce:d1:76:0d:d1:ba:04:3d:e0: 8a:e8:dd:89:b7:5e:f7:46:82:90:3c:83:9c:bb:38: 90:5e:f9:f7:fe:4b:f2:97:5d:40:3f:e9:d5:a3:dd: 14:53:71:bd:86:6c:dc:08:74:87:7e:e8:af:64:f0: b8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:35:8E:70:54:32:1C:18:DB:88:F9:F8:8C:E3:A0:8B:82:F5:3B:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f4b9a-0498-3178-be0e-3930dc62e56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:41:b9:8b:c8:87:e2:db:f4:1a:33:a3:2c:d2:42:5b:28:5d: 66:41:a5:d2:fb:58:23:f1:8b:23:52:e2:53:f7:2f:40:0b:3d: db:4d:f2:10:6f:9d:63:c6:94:84:b3:bb:c0:ae:c8:37:d5:6b: ab:e3:11:03:cd:90:de:49:f3:65:46:ed:b4:a1:d6:69:c2:6a: ea:a1:8c:52:73:b3:d1:96:20:c4:75:3d:86:31:32:eb:93:84: 84:22:a1:c5:56:6b:7b:b9:1d:71:1d:36:aa:63:73:3f:40:cd: 81:c6:18:b7:e8:30:9f:2d:24:59:fc:21:8c:45:64:88:63:37: 91:52:31:59:b5:4d:e3:fd:56:9e:70:a2:18:2f:8d:02:3e:a3: 5e:00:cd:b4:f8:3d:d2:82:4f:31:8a:f6:3f:78:b6:37:87:d6: 21:db:95:65:ce:4b:50:29:e7:33:12:e1:dc:1d:e3:60:0f:6d: cb:07:da:48:e9:4d:53:63:54:cb:fd:6c:87:b1:f8:a6:a8:17: dd:bc:62:54:64:f1:61:cb:e6:8e:68:c1:0c:f9:0f:aa:73:aa: 94:32:31:b9:52:b5:8e:76:10:e4:02:20:4c:7a:30:68:b6:a4: b7:fe:cd:b3:6c:1d:6e:52:b8:f7:e3:77:d2:df:77:b0:b2:87: 06:01:f9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiN1XoNOETTPP4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTAxZGNmMWEtNDE5My00ZDIzLTljODItMmNmY2NiZDM2Y2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGfysr/+866yLG4CtwCGD6ov97cnKkWdffv/ yzGf2lECsF0FgIa+BlLh3uCorJgIvo7Vyr4qrI9X2KSvMPzkMVwy27W27Nq5XKa6 CHS1GQwaNxIpqF8QHqO/hD0dY29RdKsMnP1PvVZYhYvBP8IU7omIlV5kABRioCjh BNxARibAxBdg2rnCIWuAuVpsY4N10Ur5rAYP47HEUy43IkTcV6jgkGnfX510OYUr W5qyjZRP2AOMDVEUzrEPgByk4NEgkUbT8YNMiMjO0XYN0boEPeCK6N2Jt173RoKQ PIOcuziQXvn3/kvyl11AP+nVo90UU3G9hmzcCHSHfuivZPC45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN41jnBUMhwY24j5+IzjoIuC9TvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2ZjRiOWEtMDQ5OC0z MTc4LWJlMGUtMzkzMGRjNjJlNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxBuYvIh+Lb9BozoyzSQlsoXWZBpdL7WCPxiyNS4lP3L0ALPdtN8hBv nWPGlISzu8CuyDfVa6vjEQPNkN5J82VG7bSh1mnCauqhjFJzs9GWIMR1PYYxMuuT hIQiocVWa3u5HXEdNqpjcz9AzYHGGLfoMJ8tJFn8IYxFZIhjN5FSMVm1TeP9Vp5w ohgvjQI+o14AzbT4PdKCTzGK9j94tjeH1iHblWXOS1Ap5zMS4dwd42APbcsH2kjp TVNjVMv9bIex+KaoF928YlRk8WHL5o5owQz5D6pzqpQyMblStY52EOQCIEx6MGi2 pLf+zbNsHW5SuPfjd9Lfd7CyhwYB+UQ= -----END CERTIFICATE-----Generated at Sun Sep 27 11:33:06 2026 by rpki-client