$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1a24448-10c5-378b-8a5e-9ef2d1b969c0.roa File: e1a24448-10c5-378b-8a5e-9ef2d1b969c0.roa (raw, json) Hash identifier: Oh2n0tKH5q0no4FAWPDdfz1LSli/L1iW9GwC5sVIGF0= Subject key identifier: 62:A1:62:BF:ED:23:85:3A:44:D4:B8:57:B3:99:32:EA:72:F6:A8:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD74C5734159E4887EC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1a24448-10c5-378b-8a5e-9ef2d1b969c0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.127.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d7:4c:57:34:15:9e:48:87:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1643224d-a48e-469f-bcde-cf3da475b1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:21:f9:4c:83:da:81:9f:e1:c7:f8:27:a8: c3:6b:37:c3:00:c9:39:09:fc:a4:47:11:3b:70:75: b4:69:f8:40:24:92:b2:60:80:12:fb:46:ac:0a:91: 23:9c:a1:ea:a8:7e:3b:66:02:66:71:88:e5:fe:6a: 0c:0a:39:07:30:46:14:dd:44:53:b3:36:b3:46:17: 91:59:ca:0a:0a:f3:77:98:7e:77:6f:37:f4:4d:37: 69:9e:11:6e:54:7c:4e:c7:38:74:dd:90:65:ae:1b: d7:08:7e:8d:5c:66:34:54:75:a9:a9:42:f6:c5:65: 3b:d0:2d:79:7b:54:18:7c:ba:f4:9f:dd:7e:7d:25: 4b:b0:2d:1a:e9:35:fe:46:fc:b4:c1:be:7c:db:83: 38:8b:ce:ce:8b:07:74:35:b4:05:d1:38:37:ac:28: 29:9d:02:a4:4b:03:15:5b:0d:5b:90:aa:62:34:b5: 88:61:c7:b1:48:a8:5d:99:0f:a5:b0:27:b4:de:a1: 70:16:f2:4f:06:48:3d:25:ee:9b:81:65:f4:c4:91: 06:23:ac:b0:68:8a:11:11:c5:28:90:d6:ce:72:d4: 60:b1:71:8e:08:0f:8f:0a:f7:a9:38:01:ff:de:b7: 1c:95:2e:28:aa:78:12:5e:ae:67:c0:a0:ee:3e:5a: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A1:62:BF:ED:23:85:3A:44:D4:B8:57:B3:99:32:EA:72:F6:A8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1a24448-10c5-378b-8a5e-9ef2d1b969c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.127.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9f:77:7e:3e:7d:96:45:30:49:79:5b:6b:38:30:77:09:fc: bc:4b:3b:3f:d1:b2:10:83:fd:6a:a3:df:37:51:78:13:8a:28: 91:34:f0:ce:87:a9:c9:a8:e8:e7:ae:6c:75:c0:e2:c8:86:b2: 21:fb:b9:c2:c1:f1:a6:4b:ac:4f:95:7f:bc:dc:fe:09:64:c4: ae:90:49:6c:aa:24:f1:5b:b4:a7:ae:7e:1d:71:e0:fd:c0:0e: 21:d7:fa:09:cc:4a:2c:a3:ac:64:41:99:89:86:0a:74:12:ac: 69:c4:57:a1:e6:a4:de:34:a3:e4:c2:57:a3:d9:1b:b2:10:b7: 6c:5f:bf:07:b9:e6:20:30:52:9f:4f:80:6b:94:7c:1d:1a:5c: 57:3c:81:1d:be:57:df:83:11:72:56:a8:52:91:60:53:02:39: 61:70:ed:44:4c:dd:63:ef:a3:f9:4d:05:b4:0d:2c:e7:17:e4: 3b:83:47:80:70:ab:62:10:34:d2:0b:0e:f0:2a:75:70:1a:1f: 8d:ca:ba:7d:d7:b8:9e:3e:c7:8a:30:55:d1:c2:9c:17:1c:71: 20:4d:6e:43:fe:a9:36:44:9a:95:e2:48:49:6c:6b:2f:cd:f3: e0:ff:13:68:e3:fd:ff:c2:40:90:1d:49:f8:8a:48:81:32:eb: 47:40:2e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPddMVzQVnkiH7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTY0MzIyNGQtYTQ4ZS00NjlmLWJjZGUtY2YzZGE0NzViMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhech+UyD2oGf4cf4J6jDazfDAMk5CfykRxE7 cHW0afhAJJKyYIAS+0asCpEjnKHqqH47ZgJmcYjl/moMCjkHMEYU3URTszazRheR WcoKCvN3mH53bzf0TTdpnhFuVHxOxzh03ZBlrhvXCH6NXGY0VHWpqUL2xWU70C15 e1QYfLr0n91+fSVLsC0a6TX+Rvy0wb5824M4i87Oiwd0NbQF0Tg3rCgpnQKkSwMV Ww1bkKpiNLWIYcexSKhdmQ+lsCe03qFwFvJPBkg9Je6bgWX0xJEGI6ywaIoREcUo kNbOctRgsXGOCA+PCvepOAH/3rcclS4oqngSXq5nwKDuPlqM1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKhYr/tI4U6RNS4V7OZMupy9qibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTFhMjQ0NDgtMTBjNS0z NzhiLThhNWUtOWVmMmQxYjk2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqfd34+fZZFMEl5W2s4MHcJ/LxLOz/RshCD/Wqj3zdReBOKKJE08M6H qcmo6OeubHXA4siGsiH7ucLB8aZLrE+Vf7zc/glkxK6QSWyqJPFbtKeufh1x4P3A DiHX+gnMSiyjrGRBmYmGCnQSrGnEV6HmpN40o+TCV6PZG7IQt2xfvwe55iAwUp9P gGuUfB0aXFc8gR2+V9+DEXJWqFKRYFMCOWFw7URM3WPvo/lNBbQNLOcX5DuDR4Bw q2IQNNILDvAqdXAaH43Kun3XuJ4+x4owVdHCnBcccSBNbkP+qTZEmpXiSElsay/N 8+D/E2jj/f/CQJAdSfiKSIEy60dALgs= -----END CERTIFICATE-----Generated at Tue Sep 29 00:27:39 2026 by rpki-client