$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa File: efaf8585-044d-334f-ae1a-da5be895ed5c.roa (raw, json) Hash identifier: xNyKGkcFo8Gg2/hHbP5v297JMpX3i+KrbZMLu8Lhq4g= Subject key identifier: CE:40:2E:96:0E:D2:7C:F3:E4:42:67:7F:62:55:13:6D:82:A7:1B:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D97D477A3F9722E352900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.172.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:97:d4:77:a3:f9:72:2e:35:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=72d6dbb5-7efc-4b8b-b148-e3fb99396b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:ea:63:40:7a:c5:8a:ce:d9:20:32:e8:bd: 1d:d2:7d:d5:24:ee:35:cb:3d:6f:f0:80:0e:ef:99: 51:70:c3:87:84:01:a9:b2:27:ae:13:f4:ac:23:22: f0:aa:fb:e6:79:82:c3:55:cd:cc:05:98:6f:43:90: 30:88:1f:82:0b:81:fa:49:86:c2:8e:bf:ce:d8:d6: 6c:73:45:51:b4:76:55:25:11:2a:c5:c6:38:85:ea: 32:be:e9:d1:6e:01:e3:ac:51:2f:ef:d6:2e:a9:9f: 27:4d:e3:62:95:4f:49:45:c4:92:ed:b4:8a:2b:c6: dc:96:3e:e7:d4:48:70:39:29:e9:50:08:28:d4:af: 8f:c6:15:cc:8b:63:b6:89:06:e9:ef:7c:d4:45:e7: 7f:b4:26:32:29:72:5f:55:c7:3a:25:f7:a4:b1:59: f2:1f:23:58:5e:4e:d5:b5:1e:cd:2a:8d:3d:24:09: 20:9f:65:45:fd:b7:1a:d0:ff:6c:5c:07:08:bf:15: b5:38:33:8d:ac:07:e7:4e:f8:71:ac:4d:56:26:2e: e5:3a:09:eb:e2:e1:c5:00:ba:eb:41:29:e2:05:7d: b2:61:3a:1e:ac:79:2d:fe:59:33:32:a0:4b:a8:3e: 1c:23:12:23:e1:fe:d1:46:15:a4:79:a4:63:5e:cc: 69:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:40:2E:96:0E:D2:7C:F3:E4:42:67:7F:62:55:13:6D:82:A7:1B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.172.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cb:2f:24:e3:35:82:16:b4:21:53:2d:90:ba:80:5d:b1:d6: 24:8d:8f:e1:b2:6a:bf:09:71:b5:fa:9b:20:10:3c:85:36:96: af:77:2f:98:cb:8a:d1:07:aa:21:07:51:a7:5d:11:1e:85:25: 4e:84:10:ff:ec:eb:df:1b:d8:aa:22:cb:20:e0:28:fb:22:f8: 5b:98:70:de:e5:be:da:1f:d3:c4:f5:a1:c9:5e:61:4e:98:b1: 8c:dc:34:4f:61:6f:5a:cd:7a:76:f2:80:b4:65:28:01:55:97: 33:f4:b7:65:9a:c7:8f:da:01:ef:40:01:b5:ea:8f:ee:18:60: cf:40:70:83:db:d3:26:bc:60:35:64:d3:36:03:11:83:bc:04: 7a:59:88:a2:95:f0:28:75:10:09:18:d7:c4:3f:65:86:70:77: c4:82:3f:85:5b:fb:33:cf:f9:5a:99:36:9e:ce:7a:37:e0:49: ac:c1:73:89:ba:25:c7:eb:7d:cb:b9:81:48:2d:8c:0f:29:75: d0:6b:63:7f:3d:b7:3b:60:5d:fc:09:28:83:f4:a8:72:d7:c8: 0f:57:f1:b7:9a:a4:87:56:fe:59:bd:e1:74:9b:e0:82:2e:d6: fc:eb:59:4b:d0:e2:bf:05:03:29:eb:f7:23:c1:e2:f6:0d:44: d2:4c:3e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZfUd6P5ci41KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzJkNmRiYjUtN2VmYy00YjhiLWIxNDgtZTNmYjk5Mzk2YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMrqY0B6xYrO2SAy6L0d0n3VJO41yz1v8IAO 75lRcMOHhAGpsieuE/SsIyLwqvvmeYLDVc3MBZhvQ5AwiB+CC4H6SYbCjr/O2NZs c0VRtHZVJREqxcY4heoyvunRbgHjrFEv79YuqZ8nTeNilU9JRcSS7bSKK8bclj7n 1EhwOSnpUAgo1K+PxhXMi2O2iQbp73zURed/tCYyKXJfVcc6JfeksVnyHyNYXk7V tR7NKo09JAkgn2VF/bca0P9sXAcIvxW1ODONrAfnTvhxrE1WJi7lOgnr4uHFALrr QSniBX2yYToerHkt/lkzMqBLqD4cIxIj4f7RRhWkeaRjXsxpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5ALpYO0nzz5EJnf2JVE22CpxubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWZhZjg1ODUtMDQ0ZC0z MzRmLWFlMWEtZGE1YmU4OTVlZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnLLyTjNYIWtCFTLZC6gF2x1iSNj+Gyar8JcbX6myAQPIU2lq93L5jL itEHqiEHUaddER6FJU6EEP/s698b2KoiyyDgKPsi+FuYcN7lvtof08T1ocleYU6Y sYzcNE9hb1rNenbygLRlKAFVlzP0t2Wax4/aAe9AAbXqj+4YYM9AcIPb0ya8YDVk 0zYDEYO8BHpZiKKV8Ch1EAkY18Q/ZYZwd8SCP4Vb+zPP+VqZNp7OejfgSazBc4m6 Jcfrfcu5gUgtjA8pddBrY389tztgXfwJKIP0qHLXyA9X8beapIdW/lm94XSb4IIu 1vzrWUvQ4r8FAynr9yPB4vYNRNJMPnY= -----END CERTIFICATE-----Generated at Mon Sep 28 18:03:32 2026 by rpki-client