$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa File: c407de36-1988-3e5d-83c0-862a9a9f7064.roa (raw, json) Hash identifier: J0m1NMuYGcUi1FWzXNEM2wRjL+D5nUydWp9VyteXdWA= Subject key identifier: E9:88:7E:42:20:93:33:14:76:C5:39:63:9B:F0:F6:08:0C:F7:52:7E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DDD7C5F44BBE72ED41900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.65.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:dd:7c:5f:44:bb:e7:2e:d4:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=223d6261-48ec-4796-b9e3-47959259c5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:1a:52:a1:78:90:ad:96:f2:1c:73:81:fd: b0:9c:bb:4e:6d:73:5d:dc:3d:ad:39:14:27:8c:7a: f7:38:7d:00:8d:4c:f7:c6:e9:b9:5f:db:f6:4e:6a: c4:f8:ef:f4:90:71:97:91:4d:14:29:ee:27:1c:58: d5:41:08:ec:3b:96:74:08:34:ca:40:2e:3f:10:b0: 9e:9a:f5:4e:d5:60:ad:f3:fd:bb:fd:b0:a6:4d:ee: 79:1d:57:96:2b:4e:18:b5:ba:34:08:b1:d8:e1:7c: 9f:6f:03:7e:24:5b:e4:74:5b:f3:05:84:03:b9:06: 06:07:88:7b:f6:e9:0b:4f:9c:b2:90:f0:83:46:56: ac:89:83:ba:94:69:c8:46:20:0f:29:70:46:d3:20: be:92:09:9b:6f:a3:23:69:ff:03:b6:7b:02:23:1b: 63:1c:47:3d:fe:28:1d:6f:ec:f4:dd:40:ab:75:c1: 01:e0:60:2f:8d:0c:d1:ba:16:b6:33:71:ab:37:08: 85:8d:66:ee:f7:ef:76:61:96:ad:46:f2:63:99:e0: ba:7e:26:57:9e:77:2a:66:50:9c:c3:c7:37:de:15: 56:ae:85:a1:0b:79:0a:60:38:cc:c6:c4:59:b9:2f: 05:24:fd:12:05:b1:5c:07:4d:b3:54:1f:d0:80:1d: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:7E:42:20:93:33:14:76:C5:39:63:9B:F0:F6:08:0C:F7:52:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c407de36-1988-3e5d-83c0-862a9a9f7064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5d:04:ad:aa:03:3d:bd:b8:4f:72:80:ef:87:10:ef:fa:72: 68:2a:8e:96:a6:50:23:db:4f:84:62:0b:c0:89:20:af:4c:e5: 0c:15:3e:6d:04:8c:be:0b:d0:7e:82:ae:45:1e:96:95:25:5e: 37:8d:7f:c4:bf:e4:3f:c4:8f:8b:4e:61:a2:33:9c:55:13:32: bf:23:0a:72:d8:8e:21:fe:a3:41:30:4b:2e:63:74:2b:d7:b0: fb:b3:ac:ea:af:5f:2a:61:e0:84:45:4a:bb:b7:a6:68:02:2c: 65:47:b6:c1:ee:48:0c:12:a7:e7:b7:0f:60:4d:eb:f1:3f:1a: 06:d0:a7:6e:41:98:b7:22:65:fa:80:1c:18:28:27:84:66:6f: 8b:72:ea:ed:47:45:59:94:59:37:1b:68:87:74:e7:45:a1:66: cc:2d:c4:1d:ba:20:ef:6d:59:d4:35:15:79:c2:ca:81:3b:3c: fd:a0:a8:05:8e:24:83:a4:d3:4b:66:a0:62:52:1c:de:53:4a: 50:a1:33:e5:34:a6:c6:22:93:12:7f:20:dc:0d:be:a5:20:fc: 3c:df:9a:7c:6b:f9:c4:c8:c6:69:5f:c9:77:56:e0:53:50:11: 1f:57:6c:2f:e2:04:bd:85:3d:9c:4e:0b:70:43:d2:3f:14:85: 8c:50:76:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd18X0S75y7UGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjIzZDYyNjEtNDhlYy00Nzk2LWI5ZTMtNDc5NTkyNTljNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfsaUqF4kK2W8hxzgf2wnLtObXNd3D2tORQn jHr3OH0AjUz3xum5X9v2TmrE+O/0kHGXkU0UKe4nHFjVQQjsO5Z0CDTKQC4/ELCe mvVO1WCt8/27/bCmTe55HVeWK04Ytbo0CLHY4XyfbwN+JFvkdFvzBYQDuQYGB4h7 9ukLT5yykPCDRlasiYO6lGnIRiAPKXBG0yC+kgmbb6Mjaf8DtnsCIxtjHEc9/igd b+z03UCrdcEB4GAvjQzRuha2M3GrNwiFjWbu9+92YZatRvJjmeC6fiZXnncqZlCc w8c33hVWroWhC3kKYDjMxsRZuS8FJP0SBbFcB02zVB/QgB33XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmIfkIgkzMUdsU5Y5vw9ggM91J+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzQwN2RlMzYtMTk4OC0z ZTVkLTgzYzAtODYyYTlhOWY3MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRdBK2qAz29uE9ygO+HEO/6cmgqjpamUCPbT4RiC8CJIK9M5QwVPm0E jL4L0H6CrkUelpUlXjeNf8S/5D/Ej4tOYaIznFUTMr8jCnLYjiH+o0EwSy5jdCvX sPuzrOqvXyph4IRFSru3pmgCLGVHtsHuSAwSp+e3D2BN6/E/GgbQp25BmLciZfqA HBgoJ4Rmb4ty6u1HRVmUWTcbaId050WhZswtxB26IO9tWdQ1FXnCyoE7PP2gqAWO JIOk00tmoGJSHN5TSlChM+U0psYikxJ/INwNvqUg/Dzfmnxr+cTIxmlfyXdW4FNQ ER9XbC/iBL2FPZxOC3BD0j8UhYxQdtk= -----END CERTIFICATE-----Generated at Tue Sep 29 16:37:48 2026 by rpki-client