$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa File: de8acd64-be66-3782-a5b5-279e4662e5e6.roa (raw, json) Hash identifier: uRBTlcRhuBrus31esQeYNomN8vNSM3mCSmt14BdcElo= Subject key identifier: 6A:38:C7:AB:46:B5:BC:F1:BC:B0:17:91:A9:20:37:F7:89:A5:60:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBF93B8DC35B3C5319F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.84.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bf:93:b8:dc:35:b3:c5:31:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2ebbabc7-2a2d-4e16-9fb3-9eec81b4e6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:ee:70:44:88:a4:24:27:da:56:53:c6:ea: ce:e5:ab:07:46:d4:17:85:f2:4c:3b:b6:95:35:c8: 40:62:53:fb:51:08:ab:fe:da:59:57:93:2c:e5:3d: ca:ba:cf:8f:68:0a:c2:98:99:10:f9:e2:ad:48:4a: 15:a1:cf:67:78:83:f1:1a:f3:fd:fe:d6:57:83:b1: 29:ee:42:6d:bb:fc:ae:a8:c4:57:31:9e:e7:66:c7: ad:1f:0a:8a:b6:f5:8e:25:08:e6:59:85:59:4d:19: c7:76:b5:77:11:ce:a9:5d:d8:64:93:0e:2d:40:3c: ae:e5:a4:2b:17:7f:7e:4e:0b:e2:ec:ec:6b:42:93: a9:68:9f:6e:bf:1d:fe:8b:a2:c3:a2:2e:30:f0:81: 55:9b:c0:9e:e1:86:f6:52:ce:5d:8e:3e:80:fb:4b: 3f:11:21:a7:be:8f:5c:eb:1a:a8:04:0d:5e:17:53: 61:04:de:cb:1a:0c:87:23:4e:17:b7:f6:ca:c1:73: eb:2a:84:13:59:85:0e:67:73:51:04:34:95:83:16: e0:44:24:2c:41:ed:66:0c:ff:e5:59:35:f9:bc:78: 17:f1:b6:32:46:4a:df:31:b6:11:29:eb:e4:77:b6: 43:f4:e5:08:90:b6:00:92:2b:40:75:b9:17:e4:e0: b8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:38:C7:AB:46:B5:BC:F1:BC:B0:17:91:A9:20:37:F7:89:A5:60:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b7:82:7b:ed:3e:1f:10:68:52:19:2b:d0:1d:4f:0b:3e:ff: 53:a0:ad:a0:b4:33:8b:cd:06:16:fb:29:09:5d:51:94:68:f6: b8:9f:de:fe:e6:eb:a9:d5:d1:36:b8:fb:d6:72:fe:dc:9f:75: 8f:b2:b4:54:a0:75:eb:b7:70:17:e5:3c:3b:77:ec:8f:da:03: c9:fe:9d:63:36:5e:2a:86:44:a6:52:74:85:97:6a:d4:be:20: b3:74:23:eb:07:11:55:0d:80:9b:b4:f3:9a:7d:de:db:7f:7c: da:c9:8d:91:68:01:a6:4b:ad:13:fc:6c:07:68:f8:e2:d8:99: 67:08:ab:00:a6:bf:1c:0b:18:1f:27:da:bb:92:e1:5c:da:fd: bf:d1:ad:c7:b4:42:0a:6b:f9:96:94:33:c7:f4:f9:fd:40:41: 92:28:84:22:30:17:18:1d:fd:5a:4c:3e:4c:ae:39:27:97:3a: 1a:74:9e:3a:3b:fa:27:ef:cd:9f:1e:80:3b:b9:d3:23:b7:de: ff:11:2c:80:f6:06:63:c5:3e:c9:e5:5f:7e:a9:c6:dc:69:a4: aa:b5:d7:1d:b5:01:58:59:3e:02:b1:d9:c0:c8:af:54:d3:2c: f2:55:50:6a:2f:cd:53:02:26:cb:5a:01:c5:77:6e:f0:f9:40: dc:93:f1:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb+TuNw1s8Uxn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmViYmFiYzctMmEyZC00ZTE2LTlmYjMtOWVlYzgxYjRlNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxnucESIpCQn2lZTxurO5asHRtQXhfJMO7aV NchAYlP7UQir/tpZV5Ms5T3Kus+PaArCmJkQ+eKtSEoVoc9neIPxGvP9/tZXg7Ep 7kJtu/yuqMRXMZ7nZsetHwqKtvWOJQjmWYVZTRnHdrV3Ec6pXdhkkw4tQDyu5aQr F39+Tgvi7OxrQpOpaJ9uvx3+i6LDoi4w8IFVm8Ce4Yb2Us5djj6A+0s/ESGnvo9c 6xqoBA1eF1NhBN7LGgyHI04Xt/bKwXPrKoQTWYUOZ3NRBDSVgxbgRCQsQe1mDP/l WTX5vHgX8bYyRkrfMbYRKevkd7ZD9OUIkLYAkitAdbkX5OC4oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo4x6tGtbzxvLAXkakgN/eJpWAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU4YWNkNjQtYmU2Ni0z NzgyLWE1YjUtMjc5ZTQ2NjJlNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW3gnvtPh8QaFIZK9AdTws+/1OgraC0M4vNBhb7KQldUZRo9rif3v7m 66nV0Ta4+9Zy/tyfdY+ytFSgdeu3cBflPDt37I/aA8n+nWM2XiqGRKZSdIWXatS+ ILN0I+sHEVUNgJu085p93tt/fNrJjZFoAaZLrRP8bAdo+OLYmWcIqwCmvxwLGB8n 2ruS4Vza/b/Rrce0Qgpr+ZaUM8f0+f1AQZIohCIwFxgd/VpMPkyuOSeXOhp0njo7 +ifvzZ8egDu50yO33v8RLID2BmPFPsnlX36pxtxppKq11x21AVhZPgKx2cDIr1TT LPJVUGovzVMCJstaAcV3bvD5QNyT8dw= -----END CERTIFICATE-----Generated at Sat Oct 10 10:23:51 2026 by rpki-client