$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa File: 90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa (raw, json) Hash identifier: khG59zneQyzXu08DpkJE9/OY5khK0dKqXduhAsVdKg8= Subject key identifier: 99:29:0A:57:BF:CA:59:FD:CE:41:37:EC:D0:4B:1F:07:A7:B3:F4:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD791272641FBBB7C8700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.71.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d7:91:27:26:41:fb:bb:7c:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e67f37f6-9047-429a-a135-c3475e42910a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ca:3d:d7:2b:a2:04:86:61:df:2c:64:47:31: 59:e8:f8:25:4c:fa:c8:3e:16:d1:48:04:d7:45:2c: 69:24:87:a6:92:dd:43:c2:47:6b:e9:ae:de:28:f4: b0:32:74:51:15:02:d0:1b:a8:9b:67:82:0d:b7:a2: af:30:16:2c:49:a8:d2:20:ca:fc:76:ac:51:fd:b3: 99:01:71:e9:c7:82:51:1c:51:c2:44:52:6b:12:cc: 1d:d9:a5:d9:9c:12:ed:49:0c:dd:7f:60:46:01:13: d8:b8:10:6f:86:f5:3c:32:07:9b:0f:e2:df:5b:61: 9b:12:45:66:a6:ea:37:34:70:af:70:e0:0f:d3:8f: e3:93:fc:06:21:6f:48:ff:5b:07:d9:c2:aa:90:0b: 83:b7:70:81:be:0e:45:a4:fb:4b:b6:7e:ee:b0:e0: ce:6f:5c:de:be:f2:b7:0b:a0:56:b5:0c:24:59:16: 38:e2:bd:1c:92:ba:c0:9f:8b:ad:75:28:a7:03:4f: bb:1a:07:3d:02:b3:d1:a9:c3:ff:d8:07:37:e2:09: 98:a3:94:00:06:ba:65:15:9f:f2:d2:47:81:f8:d9: 26:e9:86:a2:03:1e:ae:70:06:3b:81:f4:1b:a5:37: 02:46:cb:46:49:80:c6:ca:42:64:12:84:a3:bd:e2: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:29:0A:57:BF:CA:59:FD:CE:41:37:EC:D0:4B:1F:07:A7:B3:F4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:71:2c:1c:af:79:e8:ec:48:cf:2f:54:de:33:5a:d5:57:e5: 03:61:dc:63:56:75:be:78:4a:5f:d2:7b:23:2c:5b:ed:41:67: 23:49:82:ac:88:c6:11:b5:f9:f4:39:7c:13:72:55:2a:32:b7: de:29:f7:8f:25:4a:5f:ed:29:e1:7c:b2:0b:7a:ef:85:c5:80: 6d:1f:0a:d2:7f:67:6a:ca:9e:cd:52:6d:fd:02:c6:c3:e7:ba: ef:a6:54:2f:ec:75:90:35:36:ca:0a:e8:8c:7f:9e:1b:c6:53: 40:05:7c:22:61:a5:3c:33:78:2a:e5:a3:9d:2f:ab:20:64:61: c4:ad:9d:d6:e0:67:c9:18:ac:2d:d8:bc:1c:81:97:fe:39:a3: 3f:c3:ff:bb:40:5e:b1:8a:8d:dc:2c:6c:ed:a7:a8:2e:ee:a8: 74:16:6f:8f:3f:b0:0d:45:1d:86:73:5f:54:a6:a8:40:03:0d: d5:15:be:24:44:63:7a:13:07:a5:f6:d0:20:a4:21:fd:04:28: ff:23:8e:63:38:b6:81:81:ad:f9:6a:16:d5:4a:d0:53:f6:d2: 1d:33:e9:1b:06:4f:5c:0c:db:b1:80:05:0e:f2:12:4e:4d:47: da:22:12:9e:92:02:a4:41:0d:23:42:00:ae:14:23:b9:b1:54: 0f:96:16:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdeRJyZB+7t8hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTY3ZjM3ZjYtOTA0Ny00MjlhLWExMzUtYzM0NzVlNDI5MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4so91yuiBIZh3yxkRzFZ6PglTPrIPhbRSATX RSxpJIemkt1Dwkdr6a7eKPSwMnRRFQLQG6ibZ4INt6KvMBYsSajSIMr8dqxR/bOZ AXHpx4JRHFHCRFJrEswd2aXZnBLtSQzdf2BGARPYuBBvhvU8MgebD+LfW2GbEkVm puo3NHCvcOAP04/jk/wGIW9I/1sH2cKqkAuDt3CBvg5FpPtLtn7usODOb1zevvK3 C6BWtQwkWRY44r0ckrrAn4utdSinA0+7Ggc9ArPRqcP/2Ac34gmYo5QABrplFZ/y 0keB+Nkm6YaiAx6ucAY7gfQbpTcCRstGSYDGykJkEoSjveIv1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkpCle/yln9zkE37NBLHwens/T+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBjZWIwZGUtNWE1OS0z ZDM3LWIzMDgtNWY0M2M1ZjlhZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtxLByveejsSM8vVN4zWtVX5QNh3GNWdb54Sl/SeyMsW+1BZyNJgqyI xhG1+fQ5fBNyVSoyt94p948lSl/tKeF8sgt674XFgG0fCtJ/Z2rKns1Sbf0CxsPn uu+mVC/sdZA1NsoK6Ix/nhvGU0AFfCJhpTwzeCrlo50vqyBkYcStndbgZ8kYrC3Y vByBl/45oz/D/7tAXrGKjdwsbO2nqC7uqHQWb48/sA1FHYZzX1SmqEADDdUVviRE Y3oTB6X20CCkIf0EKP8jjmM4toGBrflqFtVK0FP20h0z6RsGT1wM27GABQ7yEk5N R9oiEp6SAqRBDSNCAK4UI7mxVA+WFuI= -----END CERTIFICATE-----Generated at Sun Oct 11 08:14:15 2026 by rpki-client