$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa File: ec313fa4-4901-340f-8959-6e5b204c9f0b.roa (raw, json) Hash identifier: BbmLoLZh1huku6RN+jd+BYLchwUH92TBpepeJm8Ncrc= Subject key identifier: 54:7E:50:64:5A:5C:23:B7:6B:90:55:40:8C:D3:CD:49:F3:51:D2:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA35A12AEE6FD4209A000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.123.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a3:5a:12:ae:e6:fd:42:09:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bae833ea-d902-406f-b553-d37a9bb2d86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:49:b0:6f:b8:82:e6:ec:81:5d:6f:8b:03:a9: 0f:ec:bd:09:a8:0e:ac:a1:6d:db:37:af:25:8e:c1: 76:e7:60:4e:33:a3:66:9e:5a:22:34:08:41:2f:25: 25:8d:7e:73:69:49:68:c4:01:8c:32:61:bc:37:cc: 57:de:3e:b7:c9:c2:3c:0e:65:50:ac:b3:59:9a:55: 3b:1a:4a:93:ad:af:6c:2f:07:ac:ca:4b:92:7a:92: 9d:37:b0:18:95:8f:9c:aa:7a:06:7a:5e:70:11:ba: 0a:99:7d:86:04:4e:36:8b:20:2d:d7:00:08:ef:a9: 3a:15:0c:47:52:04:69:85:bd:3c:56:2d:73:26:9e: ce:e4:d7:f5:c2:6b:ea:21:3a:d9:f6:d1:58:38:e2: 4a:cf:1a:b9:e7:f6:3d:40:2b:04:7e:89:09:9a:e8: b5:a4:14:36:81:65:05:cc:4c:6d:85:4f:9f:7d:ea: 39:49:13:2d:c7:6b:96:c7:bb:aa:23:76:b9:7d:7e: dc:2a:87:2c:2c:18:72:73:10:0f:f8:f0:73:71:17: ac:21:58:46:fd:14:e7:d6:d0:2a:82:bb:e6:40:66: ea:86:b9:65:bf:07:d3:f1:75:79:a2:7e:e0:d3:15: 1a:ac:8b:b0:6c:c9:1f:3e:8d:f6:56:d7:88:b1:50: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7E:50:64:5A:5C:23:B7:6B:90:55:40:8C:D3:CD:49:F3:51:D2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0d:79:a4:37:a4:dc:61:99:60:8f:62:a8:7a:20:82:03:3b: 8e:73:fc:8a:34:38:99:3c:6a:66:eb:a5:bf:84:95:ca:85:19: 52:f2:23:79:43:00:2b:5b:cd:d7:76:2f:7a:48:1d:33:30:53: 65:ff:24:72:51:84:ce:6e:d9:6d:81:82:24:a5:bb:6a:a0:d1: ac:c0:9f:1a:81:d8:a7:97:ba:4e:8c:98:70:6a:33:a7:6b:fd: d1:7b:95:80:59:ff:f6:48:91:1d:01:66:6f:4d:e1:3a:b9:21: 65:e6:c2:1a:47:ee:03:bd:98:29:ff:64:d1:39:c8:81:d7:de: 45:86:4b:1b:6d:8e:34:ad:33:ff:a0:ed:d1:62:9e:97:4b:d2: 8f:4b:8b:d1:a2:48:b6:de:b8:db:78:9e:eb:94:09:5f:fa:db: f3:63:88:18:f8:55:d1:e3:a0:fd:26:d4:69:24:60:ff:bc:42: 8f:45:f7:54:54:c6:53:09:49:9e:fa:0a:de:e0:38:86:f5:a9: 84:2e:98:77:2e:93:ef:ae:85:83:99:b5:26:6b:e4:89:06:e0: e9:a4:65:7d:d5:ed:4c:ae:ff:0d:1a:3f:58:e0:23:b7:71:46: f7:85:eb:f2:06:3b:5f:1c:f7:31:2d:86:c0:de:5d:cd:88:30: 65:09:e4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaNaEq7m/UIJoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmFlODMzZWEtZDkwMi00MDZmLWI1NTMtZDM3YTliYjJkODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Umwb7iC5uyBXW+LA6kP7L0JqA6soW3bN68l jsF252BOM6NmnloiNAhBLyUljX5zaUloxAGMMmG8N8xX3j63ycI8DmVQrLNZmlU7 GkqTra9sLwesykuSepKdN7AYlY+cqnoGel5wEboKmX2GBE42iyAt1wAI76k6FQxH UgRphb08Vi1zJp7O5Nf1wmvqITrZ9tFYOOJKzxq55/Y9QCsEfokJmui1pBQ2gWUF zExthU+ffeo5SRMtx2uWx7uqI3a5fX7cKocsLBhycxAP+PBzcResIVhG/RTn1tAq grvmQGbqhrllvwfT8XV5on7g0xUarIuwbMkfPo32VteIsVAzlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR+UGRaXCO3a5BVQIzTzUnzUdKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWMzMTNmYTQtNDkwMS0z NDBmLTg5NTktNmU1YjIwNGM5ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkNeaQ3pNxhmWCPYqh6IIIDO45z/Io0OJk8ambrpb+ElcqFGVLyI3lD ACtbzdd2L3pIHTMwU2X/JHJRhM5u2W2BgiSlu2qg0azAnxqB2KeXuk6MmHBqM6dr /dF7lYBZ//ZIkR0BZm9N4Tq5IWXmwhpH7gO9mCn/ZNE5yIHX3kWGSxttjjStM/+g 7dFinpdL0o9Li9GiSLbeuNt4nuuUCV/62/NjiBj4VdHjoP0m1GkkYP+8Qo9F91RU xlMJSZ76Ct7gOIb1qYQumHcuk++uhYOZtSZr5IkG4OmkZX3V7Uyu/w0aP1jgI7dx RveF6/IGO18c9zEthsDeXc2IMGUJ5J4= -----END CERTIFICATE-----Generated at Mon Sep 28 10:56:00 2026 by rpki-client