$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa File: 756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa (raw, json) Hash identifier: St+6jkG7W+VrrbBiW6qMIjEPNgksHxf1xpI9sfd+iGI= Subject key identifier: 2A:0B:3C:A9:83:2E:E3:42:1A:0C:20:C1:F4:05:E6:56:1E:DE:52:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8FF7A8E8516579057380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.96.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8f:f7:a8:e8:51:65:79:05:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=63bb3333-dbf8-4b48-bc28-d930bd7ed04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:19:e2:c2:9d:71:44:7e:a3:14:ac:4e:26: ae:1a:7e:8e:6e:6c:d4:00:f9:d8:50:a7:f4:d7:07: a2:2c:38:b6:87:3f:7b:29:df:2d:aa:1c:2c:09:a8: 5b:36:93:3f:2f:84:d4:de:48:b8:7d:e4:56:0f:a0: 60:1e:da:6c:a9:bd:a4:c6:28:9f:6b:c6:c0:51:cc: b3:f9:19:e7:75:d6:a1:08:c4:54:80:a1:a8:9b:e3: 66:14:45:f4:3a:14:33:5a:9c:e2:43:05:7c:02:b7: 8f:e7:64:2f:dc:c7:8e:fa:ec:ff:b0:ed:63:3b:ee: b1:ac:32:37:b3:a5:be:cb:bf:6b:06:94:80:4a:01: 02:5a:60:fb:0e:ca:b6:fd:09:bf:05:3c:f3:7a:a9: bf:35:8b:76:65:eb:09:1f:ed:7b:1a:0d:f0:e5:61: bd:d1:de:1c:d2:c0:a9:2c:00:29:f8:f8:dd:dc:68: c1:67:d4:21:3b:31:9c:3d:cc:22:80:c6:87:a7:03: 52:9d:ac:dd:7e:a9:36:b5:62:11:49:5c:39:40:fb: 26:54:bc:09:cf:05:53:c2:f1:2b:df:39:db:69:21: 27:b1:2d:6b:ee:86:be:36:9c:d3:68:a2:61:bf:7c: e9:ff:d2:0e:4a:f1:a2:39:b2:44:e6:ed:8b:ec:d9: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0B:3C:A9:83:2E:E3:42:1A:0C:20:C1:F4:05:E6:56:1E:DE:52:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/756f9f1e-5648-3aae-9d0d-2d58ad24e58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b4:e8:0e:bd:b6:8e:32:05:5d:14:6f:f9:d6:6f:cb:ae:8d: 55:6d:27:85:60:4d:05:5c:0a:22:98:d2:69:8d:e1:5c:7f:10: 33:1e:b4:d3:1d:1b:82:1d:df:11:43:55:da:2f:2f:ab:b2:a5: 1d:ba:43:65:4c:31:4c:62:8d:9f:6e:8b:60:98:aa:a5:84:09: 60:2e:4c:f3:8a:5b:bf:86:bc:9f:a5:04:b9:8a:4b:51:87:a6: a5:06:64:f6:65:39:11:52:50:44:d0:b0:94:d0:54:f3:30:9b: d8:89:88:f4:ed:cd:08:e0:72:e3:4e:86:67:bf:27:03:37:25: 7f:c2:aa:d6:02:91:c5:ca:67:bd:37:3d:04:f7:23:83:01:8e: e0:dc:e4:f0:83:df:fe:36:f1:1f:64:29:20:aa:17:7f:b3:03: 03:40:c7:51:a1:a7:62:a1:7e:01:b5:d3:b0:29:ed:cf:9b:aa: a0:cf:fb:f5:b9:a0:2c:96:23:f2:fd:ab:92:09:d2:3f:b6:bf: 55:93:04:16:7f:a9:d2:dd:37:6d:3f:80:69:02:ca:ab:ed:b6: 38:4f:d1:71:f6:88:b7:1e:35:d8:08:69:e6:56:42:ed:8f:6d: 32:d3:fe:03:ce:e8:67:9b:1d:8c:c3:21:f9:2d:bc:6b:cc:3c: c8:ff:c2:96 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9MPY/3qOhRZXkFc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjNiYjMzMzMtZGJmOC00YjQ4LWJjMjgtZDkzMGJkN2VkMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZUZ4sKdcUR+oxSsTiauGn6ObmzUAPnYUKf0 1weiLDi2hz97Kd8tqhwsCahbNpM/L4TU3ki4feRWD6BgHtpsqb2kxiifa8bAUcyz +RnnddahCMRUgKGom+NmFEX0OhQzWpziQwV8AreP52Qv3MeO+uz/sO1jO+6xrDI3 s6W+y79rBpSASgECWmD7Dsq2/Qm/BTzzeqm/NYt2ZesJH+17Gg3w5WG90d4c0sCp LAAp+Pjd3GjBZ9QhOzGcPcwigMaHpwNSnazdfqk2tWIRSVw5QPsmVLwJzwVTwvEr 3znbaSEnsS1r7oa+NpzTaKJhv3zp/9IOSvGiObJE5u2L7NndLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCoLPKmDLuNCGgwgwfQF5lYe3lLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzU2ZjlmMWUtNTY0OC0z YWFlLTlkMGQtMmQ1OGFkMjRlNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEImAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAh7ToDr22jjIFXRRv+dZvy66NVW0nhWBNBVwKIpjSaY3hXH8QMx600x0b gh3fEUNV2i8vq7KlHbpDZUwxTGKNn26LYJiqpYQJYC5M84pbv4a8n6UEuYpLUYem pQZk9mU5EVJQRNCwlNBU8zCb2ImI9O3NCOBy406GZ78nAzclf8Kq1gKRxcpnvTc9 BPcjgwGO4Nzk8IPf/jbxH2QpIKoXf7MDA0DHUaGnYqF+AbXTsCntz5uqoM/79bmg LJYj8v2rkgnSP7a/VZMEFn+p0t03bT+AaQLKq+22OE/RcfaItx412Ahp5lZC7Y9t MtP+A87oZ5sdjMMh+S28a8w8yP/Clg== -----END CERTIFICATE-----Generated at Sun Sep 27 01:15:05 2026 by rpki-client