$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa File: 8a5ecf25-e2b2-3327-9834-af1bffafca00.roa (raw, json) Hash identifier: kgaoTPrbyUk5gKk99vCFuaXPK79VZLVbfoHCJ7t6kT8= Subject key identifier: 4F:98:32:CA:80:B0:BB:36:72:67:C9:18:30:B8:2D:82:3A:8D:E4:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD01F865480D10C6E9580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 34.4.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d0:1f:86:54:80:d1:0c:6e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d254f29f-d3e8-4bf2-b101-a708b2f082ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:7f:a1:22:1e:68:c0:e4:31:29:45:2e:2a: c4:d1:fe:20:bb:b4:a9:0c:6a:17:d9:67:2e:e8:60: 0c:c7:2d:b2:e8:0d:d2:ca:35:f0:bf:ba:61:81:9c: ff:89:55:5e:25:a0:73:fa:17:f0:61:30:8a:2a:bf: b6:74:07:a9:48:d1:44:c7:c1:01:99:39:ba:cf:d8: 28:d5:3f:16:83:47:91:43:78:ad:77:58:0c:b3:3e: db:c5:d3:8f:3c:67:35:30:e0:5d:b7:bc:90:55:e7: 8c:28:86:ff:7f:82:ad:f9:3b:fe:bd:73:0a:5b:d9: 4e:c2:d5:61:71:d8:c4:c1:28:ec:0c:44:d1:d8:0e: d3:9b:35:63:20:26:9f:a4:55:87:58:57:7c:34:bd: 4e:23:d5:ec:10:df:52:93:02:80:d5:38:5c:90:cb: 51:57:68:31:f4:d2:5b:7a:ce:fb:33:1c:08:4e:71: dd:fd:b0:c6:bc:73:9a:3e:11:10:b3:ce:22:60:c5: 35:e8:e5:3f:7e:1a:bd:fa:be:40:53:27:f1:77:e8: d7:e8:de:c1:f7:1a:6f:e0:a9:25:b3:60:ae:91:9c: cb:29:5f:3f:9e:bf:d5:67:b1:7b:7c:af:42:f4:cf: 9d:6d:66:f1:bd:2a:79:1d:32:73:14:8a:45:90:fc: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:98:32:CA:80:B0:BB:36:72:67:C9:18:30:B8:2D:82:3A:8D:E4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.4.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:39:d5:6c:0c:3c:cc:9d:3b:57:9c:38:d4:b3:38:ad:07:7b: f4:e1:47:13:c9:e2:14:93:5b:37:1a:ac:72:89:2d:01:f3:bf: 1f:b9:b8:a8:44:d3:c9:65:06:15:d4:7d:23:ea:dc:24:ec:e7: 65:60:e1:6e:d2:0a:b2:59:d4:96:fa:2b:5b:9a:fc:65:66:31: 58:28:a5:61:f4:dd:47:6a:d6:95:95:39:89:69:e4:c4:34:83: 1f:b0:90:3f:95:2b:a3:e1:58:33:74:b9:9d:e0:1a:49:79:a5: 8d:6b:aa:4b:ca:1d:e8:62:f4:57:98:0e:8e:68:4d:b8:2c:ec: 8f:b7:07:6f:77:37:cb:08:b3:af:35:19:39:db:54:d8:47:72: 53:f1:47:ef:37:cf:e6:4c:42:ae:5d:b8:14:de:0d:d3:cf:31: fe:74:a5:94:56:a9:05:b4:93:1f:55:3a:3e:fe:9c:19:4a:87: 8a:99:e1:b2:b7:a0:d6:45:c6:35:bc:d5:2d:f6:63:27:4e:57: 31:46:b6:71:c5:ee:36:27:2b:61:c6:5c:62:03:76:14:40:ca: bc:5b:33:04:f1:19:c3:8a:ac:25:fe:2e:0e:7c:84:e2:7b:e5: 76:3a:ef:55:66:57:58:ad:6d:69:78:5d:ee:2d:f5:2d:40:98: 5e:bd:6d:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9AfhlSA0QxulYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDI1NGYyOWYtZDNlOC00YmYyLWIxMDEtYTcwOGIyZjA4MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGd/oSIeaMDkMSlFLirE0f4gu7SpDGoX2Wcu 6GAMxy2y6A3SyjXwv7phgZz/iVVeJaBz+hfwYTCKKr+2dAepSNFEx8EBmTm6z9go 1T8Wg0eRQ3itd1gMsz7bxdOPPGc1MOBdt7yQVeeMKIb/f4Kt+Tv+vXMKW9lOwtVh cdjEwSjsDETR2A7TmzVjICafpFWHWFd8NL1OI9XsEN9SkwKA1ThckMtRV2gx9NJb es77MxwITnHd/bDGvHOaPhEQs84iYMU16OU/fhq9+r5AUyfxd+jX6N7B9xpv4Kkl s2CukZzLKV8/nr/VZ7F7fK9C9M+dbWbxvSp5HTJzFIpFkPzNfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+YMsqAsLs2cmfJGDC4LYI6jeQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE1ZWNmMjUtZTJiMi0z MzI3LTk4MzQtYWYxYmZmYWZjYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY51WwMPMydO1ecONSzOK0He/ThRxPJ4hSTWzcarHKJLQHzvx+5uKhE 08llBhXUfSPq3CTs52Vg4W7SCrJZ1Jb6K1ua/GVmMVgopWH03Udq1pWVOYlp5MQ0 gx+wkD+VK6PhWDN0uZ3gGkl5pY1rqkvKHehi9FeYDo5oTbgs7I+3B293N8sIs681 GTnbVNhHclPxR+83z+ZMQq5duBTeDdPPMf50pZRWqQW0kx9VOj7+nBlKh4qZ4bK3 oNZFxjW81S32YydOVzFGtnHF7jYnK2HGXGIDdhRAyrxbMwTxGcOKrCX+Lg58hOJ7 5XY671VmV1itbWl4Xe4t9S1AmF69bRU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:52:02 2026 by rpki-client