$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa File: d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa (raw, json) Hash identifier: e6s8SjEwP7wYwjyoAl1lwabYPLKKLSdpP7vkwjqd97Q= Subject key identifier: F0:4D:B7:F8:D4:C4:2C:68:EA:00:13:9A:C3:C9:75:77:E6:21:11:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497350E5FC6B0E8C6B8C5F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.191.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:50:e5:fc:6b:0e:8c:6b:8c:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6aa9ee78-eca0-4950-9e97-68c77f21f1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:0b:66:47:3d:05:40:14:6e:05:64:d9:11: c4:78:2c:e8:ee:e8:4d:ca:03:db:2d:5a:1c:0e:d9: af:46:65:32:50:39:e0:48:ee:a8:6a:73:de:5f:3a: 1f:48:aa:da:13:d1:ce:a1:61:d0:87:90:44:2f:10: b9:c8:21:f8:ab:5e:0e:61:be:28:7c:c9:b9:71:71: 0d:82:57:0d:2b:80:69:ea:ed:32:59:66:10:46:4d: bb:eb:ff:a8:79:e0:b4:f2:7b:67:14:36:a4:6b:4a: 53:d1:aa:f4:2d:f3:c1:0a:65:5d:c4:a6:f4:48:03: ed:74:24:ba:f2:44:85:75:60:ce:b3:4c:da:36:e2: 34:3e:f5:21:ee:d7:c0:a2:68:c9:b2:5a:71:bc:bd: d3:6f:7e:29:a9:b7:d8:a3:43:a7:c8:a8:3c:09:1a: d8:b0:e4:3b:5f:c7:91:e5:62:ad:2d:ce:09:5f:f9: ad:78:92:5b:84:0c:06:e1:80:45:a4:0c:5f:9f:e4: 8e:9a:3c:90:96:d0:c5:0d:22:72:3a:9f:82:7b:7d: 03:90:cf:41:12:98:65:41:df:35:10:d2:70:f1:51: 8b:3d:85:70:50:ba:61:be:34:46:24:3c:d4:30:e3: d9:40:7e:d5:a7:1e:f5:4d:f9:1e:3f:8a:72:59:c6: 26:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4D:B7:F8:D4:C4:2C:68:EA:00:13:9A:C3:C9:75:77:E6:21:11:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:04:cd:84:5e:d1:23:ec:87:c4:66:bc:89:c8:71:5d:b7:4d: 25:43:9c:2a:36:6b:ba:d6:5a:0a:68:70:2d:78:64:fd:5b:62: cd:66:e5:56:5f:d2:cc:03:92:4c:a6:5e:46:30:97:b8:c7:a3: e7:f5:3b:00:c4:c0:b5:bb:59:a1:63:a5:62:ba:97:bb:a2:ec: c0:b8:8c:69:e6:47:1b:8a:46:22:91:fc:ef:0d:79:7c:76:00: b3:ed:8b:30:07:f8:0d:b7:f9:0b:3b:de:c1:c7:e2:93:8c:fe: 62:b4:83:c3:93:2c:80:8c:8d:dd:34:71:4f:57:d8:51:8c:0d: 55:80:6d:43:e6:6e:c5:a6:d5:f4:6c:1d:f3:d5:ea:86:4c:65: 72:bf:c1:43:8e:71:95:4f:60:65:1a:9a:50:2b:29:a6:2a:23: 85:90:23:fd:40:73:4c:79:82:1c:2b:5e:93:43:b7:64:be:4e: be:f4:96:e4:51:68:b2:a5:c8:e3:26:62:0a:94:7d:c1:cf:05: ca:e7:ff:0a:c3:30:19:1c:9c:b8:45:98:fe:07:15:a8:d9:89: 87:5d:97:c9:bc:35:b2:84:c9:17:d2:67:2e:ea:f9:de:83:6f: ef:7a:86:8f:98:61:48:ab:43:c3:e8:d4:0c:61:07:b3:a0:1b: 4c:fd:45:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1Dl/GsOjGuMX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmFhOWVlNzgtZWNhMC00OTUwLTllOTctNjhjNzdmMjFmMWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSgLZkc9BUAUbgVk2RHEeCzo7uhNygPbLVoc DtmvRmUyUDngSO6oanPeXzofSKraE9HOoWHQh5BELxC5yCH4q14OYb4ofMm5cXEN glcNK4Bp6u0yWWYQRk276/+oeeC08ntnFDaka0pT0ar0LfPBCmVdxKb0SAPtdCS6 8kSFdWDOs0zaNuI0PvUh7tfAomjJslpxvL3Tb34pqbfYo0OnyKg8CRrYsOQ7X8eR 5WKtLc4JX/mteJJbhAwG4YBFpAxfn+SOmjyQltDFDSJyOp+Ce30DkM9BEphlQd81 ENJw8VGLPYVwULphvjRGJDzUMOPZQH7Vpx71TfkeP4pyWcYmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBNt/jUxCxo6gATmsPJdXfmIRHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDlkZjdiMjUtOTNlMS0z NmYwLWFiZmEtOGFjOGJmMjhmN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkEzYRe0SPsh8RmvInIcV23TSVDnCo2a7rWWgpocC14ZP1bYs1m5VZf 0swDkkymXkYwl7jHo+f1OwDEwLW7WaFjpWK6l7ui7MC4jGnmRxuKRiKR/O8NeXx2 ALPtizAH+A23+Qs73sHH4pOM/mK0g8OTLICMjd00cU9X2FGMDVWAbUPmbsWm1fRs HfPV6oZMZXK/wUOOcZVPYGUamlArKaYqI4WQI/1Ac0x5ghwrXpNDt2S+Tr70luRR aLKlyOMmYgqUfcHPBcrn/wrDMBkcnLhFmP4HFajZiYddl8m8NbKEyRfSZy7q+d6D b+96ho+YYUirQ8Po1AxhB7OgG0z9RQ4= -----END CERTIFICATE-----Generated at Mon Sep 28 18:15:07 2026 by rpki-client