$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd2460b4-cfaa-3616-9883-7e59acfb8311.roa File: dd2460b4-cfaa-3616-9883-7e59acfb8311.roa (raw, json) Hash identifier: +NObQKZSODeOMxYy7hqj1Fa+aJlAOmhpuRIjvKLsgdk= Subject key identifier: 68:1A:26:A2:68:FB:C5:B0:74:27:D5:5E:A1:91:3A:7B:CB:70:DE:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4984473E18CD366987235E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd2460b4-cfaa-3616-9883-7e59acfb8311.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.1.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:47:3e:18:cd:36:69:87:23:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aaef83a4-3daa-4a9f-a8c5-55b900c827f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:31:10:08:c5:23:01:71:61:11:de:94:c1:1b: a6:38:9c:9f:d9:4c:bc:e8:35:57:35:b3:16:c2:37: 31:bc:ef:e3:e5:79:20:91:07:46:c1:fb:41:f0:1a: 1e:c7:23:50:25:85:d9:a4:54:c5:3a:b4:d7:b8:06: 6d:ce:5e:3b:97:ba:e7:64:79:62:8c:11:98:41:14: 5f:b9:5a:27:2d:f5:b7:ae:43:e6:18:02:af:82:86: bf:bb:4e:72:e6:ff:d9:18:c4:66:25:7d:0e:1f:b4: 8b:e0:72:5a:ab:b1:dc:09:d0:21:4f:f9:46:38:4a: 8d:a4:ab:45:1c:9e:59:97:99:81:18:a3:8f:2d:2c: 98:74:e4:cc:e2:56:6f:1d:e7:d6:23:9d:3c:74:c4: e1:c3:91:b3:6d:6e:d5:fa:cc:92:c2:ea:a4:5b:33: 13:15:29:fc:60:8d:cd:da:d0:7b:88:4c:07:c4:78: c4:c3:01:63:c8:10:68:f6:9a:dc:2f:e9:95:51:7b: 15:25:a1:0e:9b:d5:8b:cd:5d:36:d3:89:e8:ee:6f: 21:86:57:f9:58:cb:1e:1b:22:4f:23:3d:88:76:b9: 77:12:0a:b2:84:48:7a:11:6c:8d:73:d7:17:9e:39: f3:f5:a2:86:f3:6d:36:e9:1c:2b:f0:82:e0:9e:11: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:26:A2:68:FB:C5:B0:74:27:D5:5E:A1:91:3A:7B:CB:70:DE:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd2460b4-cfaa-3616-9883-7e59acfb8311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:29:3a:99:c4:47:66:36:33:d9:0e:c4:cb:ec:34:c0:54:51: 69:e4:f9:e0:4e:17:bc:0b:3e:f5:6e:2a:47:b8:77:c7:dc:9e: 97:9b:b2:92:14:8d:7d:c3:c2:76:2b:5b:6e:9d:6b:f2:d0:f8: a6:c0:ad:5c:04:8b:7e:a6:d7:17:9e:b0:62:f9:85:9c:65:b5: 6e:62:c5:4e:bf:8a:95:8c:34:67:1d:9c:5d:38:fe:19:57:df: e8:ab:55:79:52:1b:14:54:91:f8:39:3c:c3:a3:e0:15:8e:0c: 67:ce:64:1f:1e:0c:86:e4:2d:7d:9c:c8:35:f1:37:0b:2c:c7: 08:58:39:ef:d1:7c:c3:7b:1b:c9:7a:11:c8:e4:15:b5:d5:70: a9:9b:87:b5:06:21:d0:c9:10:79:7b:46:26:eb:c1:11:bc:83: 28:41:3d:e4:8e:72:b5:fa:d6:3a:0c:0a:50:09:48:3a:ba:a3: 7e:c5:10:bd:7d:88:57:87:49:90:86:f8:54:0c:3a:16:f5:3d: 4e:d7:0f:14:09:3e:db:d5:4f:27:74:e9:a2:93:09:cf:ba:62: 9a:1e:32:53:54:7c:e3:d1:87:b2:11:b6:41:65:a7:2c:a0:48: 0c:dd:91:20:c1:d9:f0:00:02:da:9e:2c:52:7f:00:7e:4a:99: 99:a2:a3:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhEc+GM02aYcjXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWFlZjgzYTQtM2RhYS00YTlmLWE4YzUtNTViOTAwYzgyN2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTEQCMUjAXFhEd6UwRumOJyf2Uy86DVXNbMW wjcxvO/j5XkgkQdGwftB8BoexyNQJYXZpFTFOrTXuAZtzl47l7rnZHlijBGYQRRf uVonLfW3rkPmGAKvgoa/u05y5v/ZGMRmJX0OH7SL4HJaq7HcCdAhT/lGOEqNpKtF HJ5Zl5mBGKOPLSyYdOTM4lZvHefWI508dMThw5GzbW7V+sySwuqkWzMTFSn8YI3N 2tB7iEwHxHjEwwFjyBBo9prcL+mVUXsVJaEOm9WLzV0204no7m8hhlf5WMseGyJP Iz2Idrl3EgqyhEh6EWyNc9cXnjnz9aKG82026Rwr8ILgnhEQAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgaJqJo+8WwdCfVXqGROnvLcN6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQyNDYwYjQtY2ZhYS0z NjE2LTk4ODMtN2U1OWFjZmI4MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8pOpnER2Y2M9kOxMvsNMBUUWnk+eBOF7wLPvVuKke4d8fcnpebspIU jX3DwnYrW26da/LQ+KbArVwEi36m1xeesGL5hZxltW5ixU6/ipWMNGcdnF04/hlX 3+irVXlSGxRUkfg5PMOj4BWODGfOZB8eDIbkLX2cyDXxNwssxwhYOe/RfMN7G8l6 EcjkFbXVcKmbh7UGIdDJEHl7RibrwRG8gyhBPeSOcrX61joMClAJSDq6o37FEL19 iFeHSZCG+FQMOhb1PU7XDxQJPtvVTyd06aKTCc+6YpoeMlNUfOPRh7IRtkFlpyyg SAzdkSDB2fAAAtqeLFJ/AH5KmZmioxM= -----END CERTIFICATE-----Generated at Mon Sep 28 10:11:59 2026 by rpki-client