$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa File: cafacae6-4253-3d5e-b635-56c65cb9329e.roa (raw, json) Hash identifier: z7lDAdp2ODeLgfFtQTbItT+bX0w9KHEgtMDk4U+XmNc= Subject key identifier: D8:E4:5F:12:7F:36:67:24:A3:E4:29:88:4F:77:99:8F:09:46:1E:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB8811AC0ED4D2D8F1480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.124.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b8:81:1a:c0:ed:4d:2d:8f:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f45ab634-8817-4ab6-a638-1a551103668d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:a0:2f:e5:12:4f:cf:2f:93:16:99:4c:7a: 7c:13:12:19:5a:81:04:df:49:bf:e4:a4:fa:f6:8e: 37:9e:27:61:35:e5:82:99:43:9a:e6:79:69:d7:43: 22:02:7e:1c:20:06:f1:10:dd:6a:22:d6:4b:f3:8b: 8e:8e:a0:f9:7d:e9:da:2d:3c:f9:fa:76:39:11:73: 4b:44:f8:78:24:d5:ff:91:dd:5d:bf:68:eb:d0:d5: 2d:40:d8:e2:5c:9c:7f:70:f6:02:ee:8b:b2:d3:d6: 8c:be:9e:6e:08:73:e4:f7:f7:ed:e7:be:d9:ef:07: 92:01:65:e4:2f:48:e6:20:24:f5:21:78:90:04:be: 87:06:f0:b9:f2:1c:a1:c9:21:ab:49:f9:35:74:24: 86:44:47:91:a3:bf:36:36:22:35:36:c3:33:1a:31: 64:a0:d7:59:b0:8f:6c:53:75:1e:b6:22:bc:0a:da: 8f:46:cd:63:f6:b8:a7:ec:49:8b:b3:d4:cd:ce:82: d9:00:00:19:3c:aa:46:b7:a5:90:cc:dc:b6:38:a0: 0d:69:00:b3:c4:88:0f:e0:ef:67:c3:cf:49:8f:9a: 06:18:9f:02:79:4c:e4:c4:83:ad:d4:4d:94:0e:e3: b2:d1:fb:2c:d6:16:52:28:2a:60:8d:26:b9:b1:f0: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:5F:12:7F:36:67:24:A3:E4:29:88:4F:77:99:8F:09:46:1E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b0:00:cd:4d:7a:44:eb:f3:b8:16:4c:f6:13:e8:33:e6:a7: fb:af:aa:9c:07:e7:76:80:22:da:c3:48:d2:b9:62:14:ee:94: 0a:9c:1a:43:46:a9:9b:47:26:ca:f2:71:f5:87:c7:9f:a2:3b: cc:43:9a:5a:1d:a6:27:39:d8:90:21:48:5b:bc:c2:94:11:1f: 8a:63:5c:79:ea:b2:d9:b0:33:a9:1d:f1:f6:43:99:ee:e8:47: 00:f3:52:98:44:22:c6:63:d6:12:9d:70:6e:21:7a:bc:ea:9b: 9a:c0:85:c1:cb:8e:af:a7:dd:45:cb:fe:92:6a:89:d1:3e:74: bc:63:35:85:04:be:45:37:21:9c:cf:ca:8e:14:8a:90:b6:3f: 62:a3:08:bd:26:b4:2c:41:67:34:2c:15:9c:b3:e3:6c:b6:4d: 53:cc:af:a5:b1:ea:b0:66:7d:3a:2b:5e:bd:4b:a9:e8:9b:30: 2b:d8:ae:2c:8f:f1:58:a9:1c:c0:dd:2c:c4:6b:86:dc:3f:ee: f0:3a:55:e9:40:23:d2:e2:4d:69:0c:57:02:bd:1b:b7:e3:ab: f5:26:24:80:01:b6:95:98:ce:b6:76:18:49:cd:6d:b9:26:7c: d4:38:46:d3:ef:93:bb:e4:ca:5c:10:0b:1d:59:d7:c6:ae:d1: 53:50:45:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbiBGsDtTS2PFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjQ1YWI2MzQtODgxNy00YWI2LWE2MzgtMWE1NTExMDM2NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx6gL+UST88vkxaZTHp8ExIZWoEE30m/5KT6 9o43nidhNeWCmUOa5nlp10MiAn4cIAbxEN1qItZL84uOjqD5fenaLTz5+nY5EXNL RPh4JNX/kd1dv2jr0NUtQNjiXJx/cPYC7ouy09aMvp5uCHPk9/ft577Z7weSAWXk L0jmICT1IXiQBL6HBvC58hyhySGrSfk1dCSGREeRo782NiI1NsMzGjFkoNdZsI9s U3UetiK8CtqPRs1j9rin7EmLs9TNzoLZAAAZPKpGt6WQzNy2OKANaQCzxIgP4O9n w89Jj5oGGJ8CeUzkxIOt1E2UDuOy0fss1hZSKCpgjSa5sfBefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjkXxJ/Nmcko+QpiE93mY8JRh4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2FmYWNhZTYtNDI1My0z ZDVlLWI2MzUtNTZjNjVjYjkzMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCInxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISwAM1NekTr87gWTPYT6DPmp/uvqpwH53aAItrDSNK5YhTulAqcGkNG qZtHJsrycfWHx5+iO8xDmlodpic52JAhSFu8wpQRH4pjXHnqstmwM6kd8fZDme7o RwDzUphEIsZj1hKdcG4herzqm5rAhcHLjq+n3UXL/pJqidE+dLxjNYUEvkU3IZzP yo4UipC2P2KjCL0mtCxBZzQsFZyz42y2TVPMr6Wx6rBmfTorXr1LqeibMCvYriyP 8VipHMDdLMRrhtw/7vA6VelAI9LiTWkMVwK9G7fjq/UmJIABtpWYzrZ2GEnNbbkm fNQ4RtPvk7vkylwQCx1Z18au0VNQRXo= -----END CERTIFICATE-----Generated at Mon Sep 28 21:56:55 2026 by rpki-client