$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa File: ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa (raw, json) Hash identifier: ND94bszsHU01IS0rIj6HPyDN14rpleUPrbRVTRuO/YI= Subject key identifier: 7E:EC:79:28:B9:42:A4:A4:C5:CE:3B:B2:6C:58:9B:15:08:06:3A:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBEADDE9D4470C9DDAD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.88.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:be:ad:de:9d:44:70:c9:dd:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=9b1b4a0a-cbed-43c9-adb1-28e8e4e4dfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:90:7f:3b:7f:5d:07:f8:85:98:d1:d7:8a: 5c:a0:2d:57:2c:14:2f:11:ba:f6:b7:15:ad:e2:4c: ac:ee:fd:04:6a:92:f9:f8:5f:cd:45:12:da:19:8f: 18:60:c1:ab:13:6b:96:f1:15:cf:10:76:5f:99:e1: 0c:d9:2f:1c:c3:7c:f0:11:4f:8c:bc:0e:c4:bc:22: 7e:31:25:8d:64:3e:c2:a6:61:52:7f:e8:a8:9b:b9: 7b:9c:3c:1c:6e:25:b7:81:68:44:2d:e3:a6:cf:12: c4:06:36:f5:a4:a1:72:c9:5c:2f:bd:b4:ce:18:e6: 9c:ce:4d:fa:3d:ab:87:12:95:7a:6f:46:03:c6:e1: ee:96:9d:84:cd:31:e0:2c:14:25:09:8a:e2:e7:67: 31:83:86:de:ec:59:9b:30:39:cb:00:fa:a9:2d:2e: c5:76:3f:89:f2:db:fa:7e:1e:ed:b1:5e:04:b2:10: 94:fc:17:6f:27:6d:44:26:0c:23:27:20:28:b7:5c: 40:ef:63:d1:0c:ed:cf:aa:fa:bd:3c:24:d1:cb:1a: fc:01:d5:8f:5a:52:f8:3b:90:cd:00:96:8f:35:4a: a9:75:67:90:0c:3e:67:e8:09:a5:bb:a7:67:9e:5b: 46:69:8e:ed:da:76:d9:1a:4f:f8:e1:f7:d4:4f:f2: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:79:28:B9:42:A4:A4:C5:CE:3B:B2:6C:58:9B:15:08:06:3A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:bb:dd:db:75:e6:06:58:87:bb:65:03:ca:31:49:5d:9d:43: b8:c0:a6:6d:7d:49:3d:bc:1c:96:f4:14:3d:19:6c:a1:33:5a: 60:fc:93:de:b4:12:35:15:c8:c3:6e:e1:2c:fc:7d:e9:ad:2c: 00:3a:c0:cb:83:ca:38:26:d8:b9:e2:dc:7b:cf:99:75:65:93: 2f:e4:a1:de:c1:be:0c:a2:4d:b2:de:ea:e9:89:fc:1e:8a:e6: 73:00:50:4e:80:90:ae:fc:d8:90:44:ba:f9:c2:24:83:a5:53: e0:24:99:51:fb:52:bb:16:c5:9c:36:0d:8b:71:46:74:8b:2c: 7f:60:f6:59:80:03:6f:78:79:40:7f:19:d8:0e:28:a1:3b:c0: 5d:39:a4:ba:0f:76:ec:f5:0f:a5:21:c4:63:f4:c5:69:44:e3: d7:90:20:a6:b0:f4:11:03:1a:46:15:f5:e4:8a:97:22:f7:56: c7:d3:81:8b:d1:77:c6:04:e1:34:7f:d7:da:c4:9c:05:52:f4: 04:ad:85:88:2b:d1:1a:1a:a8:31:1e:7d:06:89:b0:c5:05:c0: db:93:b5:3d:f1:d7:85:60:1a:b0:a0:e4:83:20:32:f4:51:41: 3a:40:b5:09:58:f4:27:4a:f9:0c:a4:c5:be:58:0d:89:90:7c: 59:57:06:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb6t3p1EcMndrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OWIxYjRhMGEtY2JlZC00M2M5LWFkYjEtMjhlOGU0ZTRkZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFCQfzt/XQf4hZjR14pcoC1XLBQvEbr2txWt 4kys7v0EapL5+F/NRRLaGY8YYMGrE2uW8RXPEHZfmeEM2S8cw3zwEU+MvA7EvCJ+ MSWNZD7CpmFSf+iom7l7nDwcbiW3gWhELeOmzxLEBjb1pKFyyVwvvbTOGOaczk36 PauHEpV6b0YDxuHulp2EzTHgLBQlCYri52cxg4be7FmbMDnLAPqpLS7Fdj+J8tv6 fh7tsV4EshCU/BdvJ21EJgwjJyAot1xA72PRDO3Pqvq9PCTRyxr8AdWPWlL4O5DN AJaPNUqpdWeQDD5n6Amlu6dnnltGaY7t2nbZGk/44ffUT/Kr5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7seSi5QqSkxc47smxYmxUIBjpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmYzYWVlNzktODA3MC0z MDhiLWI1ZmUtNWZhNDZiZmE2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW73dt15gZYh7tlA8oxSV2dQ7jApm19ST28HJb0FD0ZbKEzWmD8k960 EjUVyMNu4Sz8femtLAA6wMuDyjgm2Lni3HvPmXVlky/kod7BvgyiTbLe6umJ/B6K 5nMAUE6AkK782JBEuvnCJIOlU+AkmVH7UrsWxZw2DYtxRnSLLH9g9lmAA294eUB/ GdgOKKE7wF05pLoPduz1D6UhxGP0xWlE49eQIKaw9BEDGkYV9eSKlyL3VsfTgYvR d8YE4TR/19rEnAVS9ASthYgr0RoaqDEefQaJsMUFwNuTtT3x14VgGrCg5IMgMvRR QTpAtQlY9CdK+Qykxb5YDYmQfFlXBsQ= -----END CERTIFICATE-----Generated at Sat Sep 26 17:03:48 2026 by rpki-client