$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa File: 52037103-8e6a-31e2-91b6-01a8928ef1da.roa (raw, json) Hash identifier: kZeH+py1MpX3wxdgLUq5Manj6mopTbGsHL0HUT/ZtWY= Subject key identifier: 9C:40:0C:BB:75:65:A5:AD:52:D4:42:7D:5A:C3:EB:42:5E:3F:52:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCF1FD7BF643CA82AC200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.123.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:cf:1f:d7:bf:64:3c:a8:2a:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=36ffc42b-e37f-4a03-b65d-30676676affd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:d1:c0:dd:2d:77:17:36:ab:eb:56:c7:c2: 8e:51:48:19:d1:a5:94:fc:50:4f:09:1b:ca:27:e5: 82:02:ce:f4:f2:d5:41:e9:fd:25:bf:c8:95:64:a9: 90:46:b0:b9:33:6d:a4:64:d2:d9:b0:7d:79:39:b0: 48:f5:b0:bc:8d:09:a4:16:ce:f0:e0:59:9e:07:62: 6d:88:cd:6a:74:64:b1:a3:d8:dd:2d:a4:2c:a6:1f: 9d:43:dc:e3:b1:a1:5d:3f:71:e3:d8:64:2a:df:e7: 7d:23:f9:a8:33:f6:95:49:81:29:b7:a8:fe:5a:3a: 77:2e:3a:ec:60:e0:f3:f1:88:d0:89:73:99:28:f9: bf:99:4c:c4:dc:f6:a9:42:9a:ab:de:be:ee:cc:fb: 8f:bb:ef:64:d5:84:44:2c:d8:b0:07:0c:6f:6f:35: 26:ea:a1:c2:5d:31:32:8c:78:d3:df:67:b1:67:7d: 78:85:8d:28:40:f9:b8:5b:40:a9:d0:a6:2c:bc:7d: 54:d0:86:25:2b:06:1e:9e:e2:f5:88:83:b8:46:db: 05:4c:af:67:c1:1f:ae:4d:35:fa:69:df:a9:0d:85: 18:6c:08:00:df:95:c7:13:09:b9:27:83:77:e4:28: 50:6d:f3:1d:18:b8:67:1a:5a:ed:db:4b:ce:2f:07: b2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:40:0C:BB:75:65:A5:AD:52:D4:42:7D:5A:C3:EB:42:5E:3F:52:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8b:5b:f3:3c:c7:af:5b:64:5d:1a:f2:31:fa:73:39:6c:43: 3d:1b:46:eb:bf:a1:f0:c5:47:f8:61:6a:8b:af:fc:55:2c:de: 7e:2e:35:4c:1c:12:86:87:3f:2e:3c:b6:78:62:c3:40:a9:0e: 5d:10:74:a2:29:86:f4:1b:8a:b8:46:74:10:c4:f0:48:83:f1: 64:2c:4d:31:c4:1f:33:49:06:f1:50:1b:a7:f3:30:ff:70:e2: 06:54:69:5a:6f:e7:3c:59:ee:47:df:16:09:2f:8f:ba:ed:34: 34:1a:71:e7:ec:0c:e1:61:22:53:5e:e6:26:33:a2:73:f1:8d: c1:bd:d0:1c:6e:b4:09:e5:81:fa:7c:05:ff:7a:e3:3f:ec:70: 55:e5:96:73:c2:f9:34:a1:00:a3:a5:86:fe:c9:9c:e0:b0:9e: bf:8f:db:1a:9a:6b:ce:43:8b:3c:f1:c3:3a:17:f9:44:75:e6: af:19:42:cc:1f:79:07:3c:f6:16:1c:15:0c:71:8f:2b:b8:39: 65:cb:34:39:2a:5a:c0:4c:33:7c:a2:0a:dd:45:c4:04:be:0c: aa:77:ac:c7:40:61:28:92:66:95:8b:7c:c1:4e:22:92:20:cb: 89:cf:29:d7:0d:65:ae:38:b2:f2:11:df:c9:09:03:4b:41:7f: 8d:db:d2:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPc8f179kPKgqwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzZmZmM0MmItZTM3Zi00YTAzLWI2NWQtMzA2NzY2NzZhZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6LRwN0tdxc2q+tWx8KOUUgZ0aWU/FBPCRvK J+WCAs708tVB6f0lv8iVZKmQRrC5M22kZNLZsH15ObBI9bC8jQmkFs7w4FmeB2Jt iM1qdGSxo9jdLaQsph+dQ9zjsaFdP3Hj2GQq3+d9I/moM/aVSYEpt6j+Wjp3Ljrs YODz8YjQiXOZKPm/mUzE3PapQpqr3r7uzPuPu+9k1YRELNiwBwxvbzUm6qHCXTEy jHjT32exZ314hY0oQPm4W0Cp0KYsvH1U0IYlKwYenuL1iIO4RtsFTK9nwR+uTTX6 ad+pDYUYbAgA35XHEwm5J4N35ChQbfMdGLhnGlrt20vOLweyGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxADLt1ZaWtUtRCfVrD60JeP1KQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTIwMzcxMDMtOGU2YS0z MWUyLTkxYjYtMDFhODkyOGVmMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaLW/M8x69bZF0a8jH6czlsQz0bRuu/ofDFR/hhaouv/FUs3n4uNUwc EoaHPy48tnhiw0CpDl0QdKIphvQbirhGdBDE8EiD8WQsTTHEHzNJBvFQG6fzMP9w 4gZUaVpv5zxZ7kffFgkvj7rtNDQacefsDOFhIlNe5iYzonPxjcG90BxutAnlgfp8 Bf964z/scFXllnPC+TShAKOlhv7JnOCwnr+P2xqaa85DizzxwzoX+UR15q8ZQswf eQc89hYcFQxxjyu4OWXLNDkqWsBMM3yiCt1FxAS+DKp3rMdAYSiSZpWLfMFOIpIg y4nPKdcNZa44svIR38kJA0tBf43b0kI= -----END CERTIFICATE-----Generated at Mon Sep 28 06:49:34 2026 by rpki-client