$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa File: 4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa (raw, json) Hash identifier: rHcj6mgNooVcw5jZfBhBtD0P6TgIm0az39kfHA95JeM= Subject key identifier: 5C:70:40:B5:5B:44:79:63:A3:85:0F:FE:8D:4E:DB:50:03:FA:EB:FC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F66C2BE85C1063D2B7B293B9C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 19527 IP address blocks: 34.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:be:85:c1:06:3d:2b:7b:29:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=0ddab9c5-fb2c-4a8c-b8ae-ebd5dd9cef11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:57:7d:d9:4c:86:12:63:47:1e:4a:3e:ae:38: 58:de:9c:2f:8b:0d:27:67:8b:10:8f:a7:d8:c1:d8: 9d:22:25:07:32:8a:99:c5:c2:46:ab:9f:aa:2a:db: d3:20:c4:d9:ee:0f:c0:86:84:0e:eb:9c:f1:12:8a: 9c:a6:a4:67:47:86:7d:59:bb:b8:2f:27:38:9d:cc: a4:3e:c4:56:5a:b3:05:52:ea:39:4b:ec:de:cb:8d: a5:b7:9b:88:c3:c0:9c:8d:8e:b6:36:68:16:b3:a0: a6:0e:f4:f0:62:18:50:1b:fc:46:65:3f:82:04:17: e1:b5:97:2e:a3:3f:8d:30:26:32:1f:b2:0e:dc:35: d4:a2:8a:20:ce:f2:f9:41:c3:97:a5:a9:c5:e2:e6: c2:c8:bc:11:af:cd:5a:81:16:43:c7:0a:aa:7c:c4: 93:43:3f:c7:2f:fb:80:e3:b1:4e:30:76:a5:01:55: 02:fb:45:7d:36:14:64:d6:89:45:c6:ca:cd:c7:5c: ef:0d:61:df:a4:95:6e:4e:0f:e6:81:aa:8a:c1:2d: 93:6b:be:87:99:83:91:28:b3:78:1b:08:4a:17:f5: de:0b:13:f8:b8:57:0b:9f:53:01:82:15:ff:c2:5a: 9b:ec:29:ab:de:5b:e7:f0:ee:52:a5:45:14:a3:77: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:70:40:B5:5B:44:79:63:A3:85:0F:FE:8D:4E:DB:50:03:FA:EB:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:50:8c:62:2e:8d:70:65:e3:9e:e0:2a:a2:a7:59:10:ef:3f: ec:5a:67:94:ad:ed:77:2a:54:e2:0c:0f:60:98:93:58:ea:78: 30:df:2c:4c:a3:c8:88:15:64:14:05:1a:a1:3f:ee:7d:73:d7: 70:c5:90:db:ae:be:2a:fa:1a:c1:39:1b:e4:28:ef:5a:18:78: fd:7c:98:32:1a:69:b7:67:df:fe:96:29:3b:80:dc:3e:7e:cc: 66:64:de:32:3a:22:60:cf:b3:d1:9c:e4:f7:dc:b4:b1:64:ad: 05:eb:01:57:ca:cb:59:d0:d5:30:61:d4:22:a9:d1:76:83:5c: c8:40:d6:28:58:57:ca:d3:94:93:a8:90:70:81:00:46:38:66: f3:33:d0:2c:a7:8e:6e:d3:98:eb:ae:3f:f6:79:ff:a5:cc:83: 34:3c:dc:ba:a4:e6:3e:56:2b:e9:15:25:bf:98:f9:11:12:09: dc:61:cc:41:ce:4c:51:9f:4f:99:dc:a5:a8:d7:52:e9:78:42: ab:af:5f:44:ce:f3:1a:ed:23:f4:2b:48:84:81:eb:3f:9a:94: 70:b3:ea:fe:06:3f:5d:98:5d:6d:87:91:4b:bd:bc:82:23:c5: a7:71:a0:f7:9e:fe:0d:6e:73:6d:12:ef:f8:e7:89:a7:5c:0b: cf:83:d5:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwr6FwQY9K3spO5wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk MGRkYWI5YzUtZmIyYy00YThjLWI4YWUtZWJkNWRkOWNlZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgld92UyGEmNHHko+rjhY3pwviw0nZ4sQj6fY wdidIiUHMoqZxcJGq5+qKtvTIMTZ7g/AhoQO65zxEoqcpqRnR4Z9Wbu4Lyc4ncyk PsRWWrMFUuo5S+zey42lt5uIw8CcjY62NmgWs6CmDvTwYhhQG/xGZT+CBBfhtZcu oz+NMCYyH7IO3DXUooogzvL5QcOXpanF4ubCyLwRr81agRZDxwqqfMSTQz/HL/uA 47FOMHalAVUC+0V9NhRk1olFxsrNx1zvDWHfpJVuTg/mgaqKwS2Ta76HmYORKLN4 GwhKF/XeCxP4uFcLn1MBghX/wlqb7Cmr3lvn8O5SpUUUo3f8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxwQLVbRHljo4UP/o1O21AD+uv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGZkZDdkNjEtNjVjMS0z YjY1LTg4NDctMjYzMmVkOTlmZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhQjGIujXBl457gKqKnWRDvP+xaZ5St7XcqVOIMD2CYk1jqeDDfLEyj yIgVZBQFGqE/7n1z13DFkNuuvir6GsE5G+Qo71oYeP18mDIaabdn3/6WKTuA3D5+ zGZk3jI6ImDPs9Gc5PfctLFkrQXrAVfKy1nQ1TBh1CKp0XaDXMhA1ihYV8rTlJOo kHCBAEY4ZvMz0Cynjm7TmOuuP/Z5/6XMgzQ83Lqk5j5WK+kVJb+Y+RESCdxhzEHO TFGfT5ncpajXUul4QquvX0TO8xrtI/QrSISB6z+alHCz6v4GP12YXW2HkUu9vIIj xadxoPee/g1uc20S7/jniadcC8+D1X4= -----END CERTIFICATE-----Generated at Mon Oct 12 23:59:53 2026 by rpki-client