$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa File: bfad2657-6c63-37ab-8995-4f4f371014c2.roa (raw, json) Hash identifier: SkvCQxLvlFkLOgummi06DVF9F66UVAhNn4XUj8iBRXM= Subject key identifier: 39:E5:E8:B8:DD:98:46:5E:3B:E0:70:E0:21:80:3E:5E:ED:8F:DF:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8A785A47B03412CF2480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.72.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8a:78:5a:47:b0:34:12:cf:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6b2441c8-bbe0-453d-80ce-b2ca78254612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:a5:8d:c0:2f:4e:1f:7c:7e:70:64:b5:5d: d9:60:31:56:ef:46:e7:8c:ce:f5:e4:da:b9:9c:7e: ed:e6:f1:3c:13:36:2f:6e:4c:59:79:39:7b:c2:6b: 4c:84:2e:07:a9:6a:3d:c6:7f:b7:3e:f8:3f:11:7f: 02:1e:71:3a:f8:cf:9a:73:9e:49:ad:28:4b:cd:87: 2f:5d:ab:3c:41:8c:17:b8:3f:b7:be:e2:c9:7f:9e: 65:e9:52:d9:94:ef:5e:8d:3d:8f:26:9c:d6:29:4b: d4:dc:ad:b0:69:1d:7f:81:a3:c9:e7:80:26:c5:04: 7a:be:47:97:7f:be:0b:58:5e:10:5c:5f:54:9c:c5: 7f:35:59:c6:48:b3:4f:9f:77:55:6d:ac:49:4d:ea: a3:1a:4a:fc:fb:d3:64:ea:a6:21:52:67:11:e1:cd: cf:c9:42:e1:26:a9:45:00:d6:b1:75:af:7d:da:4e: d3:4f:74:cb:f8:00:f1:1c:f0:a5:0f:75:7f:6d:85: a2:a0:ba:be:3f:06:d9:fb:fc:b1:32:8f:7c:7d:d6: 45:be:38:21:65:2b:1c:b0:39:dd:be:1e:3a:d5:96: a4:e6:2f:0b:e0:b7:7a:e4:b4:9d:cd:2d:10:08:b2: 6a:94:fe:0a:46:3b:17:62:a0:0d:fe:af:10:1b:20: b7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E5:E8:B8:DD:98:46:5E:3B:E0:70:E0:21:80:3E:5E:ED:8F:DF:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:20:fc:10:b7:13:a9:25:6b:8e:5d:2f:b6:24:3a:bb:76:7e: 09:f9:b4:e8:58:de:c2:b3:a6:29:b9:c5:f5:fe:6a:4c:be:94: 1a:86:e0:3a:02:5b:e2:73:20:48:ec:74:1a:df:17:85:96:c9: e1:ee:20:40:43:91:ca:8b:b2:09:ec:09:8c:e8:1d:b9:70:15: d8:c6:49:89:5f:23:1f:bd:ba:78:34:ff:e4:65:2c:6e:92:91: 62:c0:7a:c4:eb:7b:26:45:39:05:3d:3f:62:6c:ac:1e:ee:1a: cf:e0:a7:63:a9:3e:3b:b8:34:8a:2c:67:d1:2a:97:1a:ea:27: 6f:e6:9e:40:b4:d8:e1:36:df:85:9d:50:fb:0f:8d:3e:b8:d2: ef:20:92:2e:7f:db:49:11:0f:e7:6e:75:12:4d:99:4a:9e:8c: cd:ad:3d:96:4a:78:29:6e:e8:4c:a2:50:e2:8b:79:f0:ee:9b: 60:53:b4:51:eb:29:2a:0b:d1:59:1c:d8:0b:41:d8:cb:26:1d: f2:a6:79:82:c3:c2:f4:a2:bb:b1:d4:73:52:55:17:b6:5e:0d: 02:d3:0d:21:94:82:8b:30:da:ba:b2:0e:2e:93:69:30:33:fe: f6:5b:35:fe:78:6d:0a:16:6d:33:b4:bd:48:4a:12:b4:27:0c: 09:ea:a4:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYp4WkewNBLPJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmIyNDQxYzgtYmJlMC00NTNkLTgwY2UtYjJjYTc4MjU0NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyGljcAvTh98fnBktV3ZYDFW70bnjM715Nq5 nH7t5vE8EzYvbkxZeTl7wmtMhC4HqWo9xn+3Pvg/EX8CHnE6+M+ac55JrShLzYcv Xas8QYwXuD+3vuLJf55l6VLZlO9ejT2PJpzWKUvU3K2waR1/gaPJ54AmxQR6vkeX f74LWF4QXF9UnMV/NVnGSLNPn3dVbaxJTeqjGkr8+9Nk6qYhUmcR4c3PyULhJqlF ANaxda992k7TT3TL+ADxHPClD3V/bYWioLq+PwbZ+/yxMo98fdZFvjghZSscsDnd vh461Zak5i8L4Ld65LSdzS0QCLJqlP4KRjsXYqAN/q8QGyC3rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnl6LjdmEZeO+Bw4CGAPl7tj98YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZhZDI2NTctNmM2My0z N2FiLTg5OTUtNGY0ZjM3MTAxNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAog/BC3E6kla45dL7YkOrt2fgn5tOhY3sKzpim5xfX+aky+lBqG4DoC W+JzIEjsdBrfF4WWyeHuIEBDkcqLsgnsCYzoHblwFdjGSYlfIx+9ung0/+RlLG6S kWLAesTreyZFOQU9P2JsrB7uGs/gp2OpPju4NIosZ9EqlxrqJ2/mnkC02OE234Wd UPsPjT640u8gki5/20kRD+dudRJNmUqejM2tPZZKeClu6EyiUOKLefDum2BTtFHr KSoL0Vkc2AtB2MsmHfKmeYLDwvSiu7HUc1JVF7ZeDQLTDSGUgosw2rqyDi6TaTAz /vZbNf54bQoWbTO0vUhKErQnDAnqpOM= -----END CERTIFICATE-----Generated at Mon Sep 28 20:55:47 2026 by rpki-client