$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa File: 8a5ecf25-e2b2-3327-9834-af1bffafca00.roa (raw, json) Hash identifier: 7R/RvyIu8RVTu6vi14ip4SBotBF3WuW7vW5cDC7kZpI= Subject key identifier: C5:3B:18:5A:F9:31:98:6E:41:7E:36:56:9B:25:AC:9A:75:CC:61:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EB3C2AA301768ED2C2C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 34.4.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:eb:3c:2a:a3:01:76:8e:d2:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9996a628-ea16-4818-84f5-e58af5d482e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:42:8b:c7:2b:be:08:53:17:2e:a0:9a:84: 9b:80:04:71:a0:60:ae:25:5e:5c:41:23:08:3a:9b: 65:ee:4b:1f:33:fa:2a:7c:4a:87:2d:26:2e:5f:a0: 3f:2f:ee:68:e3:5f:a4:e4:21:b6:0f:45:14:2c:59: 70:39:db:0b:ed:f6:97:13:c1:49:81:22:f1:20:5d: 81:8c:7c:dd:a6:ad:a6:8a:4f:0d:21:5c:24:8f:36: f6:c2:08:26:a1:b8:63:2c:df:1a:ad:0b:ff:f0:18: b8:a9:c1:a9:ab:c8:01:8e:4b:54:3e:92:6d:ac:d9: c9:43:94:26:cc:11:37:9f:e0:66:64:c7:29:65:e2: ff:d2:56:58:5c:61:12:7d:ea:03:ad:8d:f4:77:7c: d2:3c:7a:1c:b3:5a:da:4e:a8:01:5d:84:e7:ce:93: c4:f5:55:e2:0f:6e:46:eb:1d:ff:19:a3:c1:95:c5: 87:94:a1:77:6e:cc:bf:fb:72:eb:17:02:f5:7d:af: 25:dd:a7:af:1a:b7:2b:41:f7:23:25:93:58:56:89: d0:a1:b0:98:b8:a1:02:a5:0a:e1:18:44:3b:31:e8: 01:7c:02:03:d0:49:3c:f8:05:3a:8e:9c:79:69:aa: 3e:e7:b0:33:73:de:21:92:0a:3e:d0:80:54:62:c7: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:18:5A:F9:31:98:6E:41:7E:36:56:9B:25:AC:9A:75:CC:61:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.4.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:50:1d:83:ee:e5:fc:77:b2:7a:1e:3a:61:a0:7d:45:2c:ed: a1:cb:ae:8f:14:36:2b:18:a0:3f:33:d9:49:2f:13:d3:eb:14: 32:d0:18:25:c7:30:ad:4f:12:b4:8a:0c:d1:47:56:43:24:31: 27:ab:c6:d4:be:66:d5:57:6f:c1:3c:25:17:77:a7:5b:46:92: 34:25:3d:49:26:53:e0:64:67:06:ca:45:7b:38:38:b5:5b:b6: 3c:a1:27:f2:c6:03:b3:02:af:50:b1:dd:0d:ca:d7:52:66:d0: 46:e0:fe:7e:d3:be:93:67:ed:a4:03:3e:3e:5c:eb:5e:63:50: 78:5f:5e:de:3a:5c:63:1b:5d:89:c3:8b:de:55:af:23:15:0e: ae:b3:30:16:aa:01:74:13:21:f7:10:c1:b0:2c:c6:2b:ee:f5: eb:79:18:e9:8a:21:4b:da:1c:93:6e:01:17:b1:d1:14:c7:ae: cb:50:db:60:71:26:1b:9c:2b:49:18:92:04:12:c7:c7:0c:42: 03:c3:31:cf:bc:40:34:8f:26:5d:3b:7a:f9:52:5a:1b:f3:c2: 53:bd:e6:fa:86:c2:9c:eb:9a:42:8c:06:fd:b4:d1:48:d6:35: 8c:6e:14:c9:85:60:00:4a:7a:92:b0:b2:01:04:3b:6c:be:fa: b3:4f:97:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikus8KqMBdo7SwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTk5NmE2MjgtZWExNi00ODE4LTg0ZjUtZTU4YWY1ZDQ4MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1lCi8crvghTFy6gmoSbgARxoGCuJV5cQSMI Optl7ksfM/oqfEqHLSYuX6A/L+5o41+k5CG2D0UULFlwOdsL7faXE8FJgSLxIF2B jHzdpq2mik8NIVwkjzb2wggmobhjLN8arQv/8Bi4qcGpq8gBjktUPpJtrNnJQ5Qm zBE3n+BmZMcpZeL/0lZYXGESfeoDrY30d3zSPHocs1raTqgBXYTnzpPE9VXiD25G 6x3/GaPBlcWHlKF3bsy/+3LrFwL1fa8l3aevGrcrQfcjJZNYVonQobCYuKECpQrh GEQ7MegBfAID0Ek8+AU6jpx5aao+57Azc94hkgo+0IBUYscRdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU7GFr5MZhuQX42VpslrJp1zGFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE1ZWNmMjUtZTJiMi0z MzI3LTk4MzQtYWYxYmZmYWZjYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxQHYPu5fx3snoeOmGgfUUs7aHLro8UNisYoD8z2UkvE9PrFDLQGCXH MK1PErSKDNFHVkMkMSerxtS+ZtVXb8E8JRd3p1tGkjQlPUkmU+BkZwbKRXs4OLVb tjyhJ/LGA7MCr1Cx3Q3K11Jm0Ebg/n7TvpNn7aQDPj5c615jUHhfXt46XGMbXYnD i95VryMVDq6zMBaqAXQTIfcQwbAsxivu9et5GOmKIUvaHJNuARex0RTHrstQ22Bx JhucK0kYkgQSx8cMQgPDMc+8QDSPJl07evlSWhvzwlO95vqGwpzrmkKMBv200UjW NYxuFMmFYABKepKwsgEEO2y++rNPl8E= -----END CERTIFICATE-----Generated at Tue Nov 10 22:48:43 2026 by rpki-client