$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa File: dafc535e-769c-3c75-884c-f554eca0ad04.roa (raw, json) Hash identifier: /bomlVy/WNq1TX5ggsXjIeopKbI3tqEs0AkS5B1wGCk= Subject key identifier: 53:D2:79:A7:B8:70:DD:F5:0D:04:B1:E3:86:6E:E3:25:69:5A:06:DF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49884516084FB77A2394EB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.153.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:45:16:08:4f:b7:7a:23:94:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e855aea-0d55-46b0-860a-35ce5670c13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:3f:2c:45:1c:c9:b6:06:d8:ad:22:c8:6d: 1c:24:99:32:b2:2d:04:1b:18:23:36:3c:e3:05:e7: ba:a2:ec:6f:75:be:52:ce:b9:72:01:dc:79:40:ac: f0:cc:2a:4a:d7:ec:ae:2a:62:6c:71:26:51:0f:a2: f8:98:f3:8b:54:7d:83:46:91:7b:2b:59:23:f9:73: 9d:12:e7:de:64:ba:43:9f:0a:5d:84:22:06:ed:f1: fe:46:5a:86:87:96:3d:30:0f:5a:1c:35:6f:23:4e: b1:b8:ab:95:da:f7:36:85:ef:bb:8b:51:79:a2:17: d8:11:58:ba:be:a8:4c:4a:c9:64:f0:73:17:21:30: 5c:f3:40:bc:18:c6:9a:dd:53:a5:4b:c7:df:a9:bf: ad:5d:8f:e6:c4:17:a7:a9:cb:08:5a:1f:0b:ce:e1: 72:30:a3:56:10:74:1e:98:d9:f1:cb:bd:ed:c4:8d: 37:38:56:5c:e6:5a:8d:11:b8:ce:14:15:9d:a5:44: 8b:24:ec:2a:e6:dd:d2:69:e5:75:8b:a5:1f:88:8d: 2a:16:f0:0d:59:e6:ca:7f:5e:ee:a4:65:b1:29:a6: 79:56:40:a4:2e:19:3c:2c:81:b9:92:db:14:19:9f: 2b:b3:dd:23:6a:33:49:20:ac:89:2f:6f:bc:3e:b1: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D2:79:A7:B8:70:DD:F5:0D:04:B1:E3:86:6E:E3:25:69:5A:06:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.153.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3a:5c:27:73:91:ce:70:95:3e:95:cf:72:14:bb:21:09:17: 35:c4:69:90:8c:f7:c5:1f:57:68:8f:de:5f:fc:d4:c5:de:c8: 72:d1:d1:06:8d:f5:ed:a7:9e:a5:c3:53:98:b7:14:c3:b9:60: 47:6a:8d:aa:9d:4a:fc:20:26:c1:a3:9a:66:83:02:d9:26:a5: b0:c7:b4:16:3e:43:1b:6d:14:ad:33:77:13:6c:60:02:2a:fe: 8c:c5:69:ae:0e:3a:f9:fb:f9:e2:2d:9b:2b:39:8e:e2:2e:1a: 30:13:65:e4:cb:fb:7b:81:de:f7:8a:6a:d1:19:78:8e:99:bb: 2c:b9:36:a1:16:54:5f:b6:c3:f0:3d:d3:65:da:5e:cf:54:e0: 9b:84:d3:53:38:0e:60:8b:34:5b:f7:4f:aa:13:9c:85:37:71: 57:12:cb:c6:62:f5:9f:ed:a4:de:d6:c3:93:78:ae:fc:40:40: f4:e9:db:e7:55:8b:9f:c2:35:7a:22:5b:88:4b:0d:77:34:fb: 4c:58:b3:29:b7:fc:c5:7d:2e:fb:58:ec:87:d2:4d:07:f0:85: 58:21:73:d1:0c:45:a1:22:09:05:a6:2c:66:cc:60:3a:98:c6: db:af:6f:0f:ee:09:fd:25:51:76:36:23:42:d9:b2:ba:0e:24: 1c:50:4b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEUWCE+3eiOU64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU4NTVhZWEtMGQ1NS00NmIwLTg2MGEtMzVjZTU2NzBjMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1M/LEUcybYG2K0iyG0cJJkysi0EGxgjNjzj Bee6ouxvdb5SzrlyAdx5QKzwzCpK1+yuKmJscSZRD6L4mPOLVH2DRpF7K1kj+XOd EufeZLpDnwpdhCIG7fH+RlqGh5Y9MA9aHDVvI06xuKuV2vc2he+7i1F5ohfYEVi6 vqhMSslk8HMXITBc80C8GMaa3VOlS8ffqb+tXY/mxBenqcsIWh8LzuFyMKNWEHQe mNnxy73txI03OFZc5lqNEbjOFBWdpUSLJOwq5t3SaeV1i6UfiI0qFvANWebKf17u pGWxKaZ5VkCkLhk8LIG5ktsUGZ8rs90jajNJIKyJL2+8PrGB+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPSeae4cN31DQSx44Zu4yVpWgbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGFmYzUzNWUtNzY5Yy0z Yzc1LTg4NGMtZjU1NGVjYTBhZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc6XCdzkc5wlT6Vz3IUuyEJFzXEaZCM98UfV2iP3l/81MXeyHLR0QaN 9e2nnqXDU5i3FMO5YEdqjaqdSvwgJsGjmmaDAtkmpbDHtBY+QxttFK0zdxNsYAIq /ozFaa4OOvn7+eItmys5juIuGjATZeTL+3uB3veKatEZeI6Zuyy5NqEWVF+2w/A9 02XaXs9U4JuE01M4DmCLNFv3T6oTnIU3cVcSy8Zi9Z/tpN7Ww5N4rvxAQPTp2+dV i5/CNXoiW4hLDXc0+0xYsym3/MV9LvtY7IfSTQfwhVghc9EMRaEiCQWmLGbMYDqY xtuvbw/uCf0lUXY2I0LZsroOJBxQSxU= -----END CERTIFICATE-----Generated at Sun Oct 11 22:45:23 2026 by rpki-client