$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa File: 668d5a3e-df97-3fd9-881f-29cee41e2d88.roa (raw, json) Hash identifier: NoaZis+4AFiIGmlCnxHwlLYW//xKyhZwuk73Haa5nj8= Subject key identifier: D8:37:04:FA:69:36:99:15:44:00:29:91:B0:FC:E9:E3:95:93:C0:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584CF42227A4810BE104AC2EB900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 34.1.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:27:a4:81:0b:e1:04:ac:2e:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=46b74a9d-3477-4269-8dab-571628802f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:12:2d:8a:49:73:fd:ed:54:0d:7f:ac:1d:4e: 6b:29:51:7a:99:7b:74:bc:c4:b7:06:ae:b1:3e:7a: 1c:57:92:e0:a7:73:e1:92:71:8e:e2:f3:57:82:a6: 97:f3:e4:c4:6f:96:51:51:be:7d:94:d2:6b:c8:0a: 31:e8:e2:d7:bb:10:e8:e8:d1:19:e2:3e:de:34:dd: 25:a3:41:1e:2f:41:b9:08:72:9a:66:12:14:79:07: fd:31:6a:a3:81:c7:e4:74:26:61:2e:2b:51:ce:78: 14:83:cd:f0:bc:c1:19:8d:37:8a:d6:c3:fd:f9:05: 95:c1:96:d1:7d:8c:ca:bd:a5:88:04:ef:40:4e:2e: ac:85:e1:66:5d:0f:f2:94:08:f6:f5:c6:39:dc:39: a5:7d:4b:3e:54:48:40:bf:86:71:76:66:ce:02:bd: 1c:54:19:c4:ef:15:b5:ce:60:32:56:01:ee:bd:39: da:13:20:ad:c6:62:3e:9d:a1:65:47:2f:1f:5f:39: 2c:a5:68:a8:e1:8a:54:31:94:33:ed:60:69:df:2d: a4:a0:84:66:17:41:6b:69:dc:c0:11:df:28:80:93: cd:53:4d:bd:27:21:46:00:63:31:53:f8:d3:54:09: 36:95:12:21:82:76:87:75:8e:3d:a5:5c:65:da:8c: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:37:04:FA:69:36:99:15:44:00:29:91:B0:FC:E9:E3:95:93:C0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:69:03:0e:66:16:07:67:1e:b8:d7:a2:81:7e:66:d3:b1:1c: 3a:a2:ac:92:76:4f:9d:3c:d1:4b:4f:a9:ce:4a:36:f4:8e:8d: bb:51:74:64:87:3c:7e:83:68:15:19:45:11:39:b4:6e:08:ac: 95:43:cc:45:b5:93:1a:6f:7a:b3:d1:a7:1f:fa:45:7e:74:4e: d8:a6:39:40:c5:54:a0:17:63:02:00:e5:a1:c7:81:2d:58:7d: 0e:b6:42:a4:95:a3:a1:79:d1:d4:ff:e4:50:39:06:63:75:51: d9:3a:63:46:8e:fa:53:c6:8c:da:d2:d0:f6:2a:5d:83:53:e3: 72:be:7b:c0:17:51:37:96:48:b5:b6:97:84:ba:f9:17:7a:05: 38:7f:02:8f:61:79:38:b0:1e:18:5f:51:ca:b5:2b:72:73:b7: be:0b:2a:b9:2f:fe:60:0e:d4:f8:c7:57:9e:34:8e:82:70:40: c9:aa:e5:dc:e4:02:2a:4b:00:9a:f0:b4:ac:e6:aa:8e:2b:3d: d1:3b:fe:8f:fa:89:ae:4e:d1:b3:6e:cd:63:7d:b2:39:e7:73: d9:39:b4:d0:1e:73:58:af:0c:00:22:f1:2e:44:a1:45:04:73: 94:f7:e4:02:a8:1f:f7:5e:a7:5a:f0:88:98:04:56:c2:8f:93: ce:2b:45:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiekgQvhBKwuuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk NDZiNzRhOWQtMzQ3Ny00MjY5LThkYWItNTcxNjI4ODAyZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixItiklz/e1UDX+sHU5rKVF6mXt0vMS3Bq6x PnocV5Lgp3PhknGO4vNXgqaX8+TEb5ZRUb59lNJryAox6OLXuxDo6NEZ4j7eNN0l o0EeL0G5CHKaZhIUeQf9MWqjgcfkdCZhLitRzngUg83wvMEZjTeK1sP9+QWVwZbR fYzKvaWIBO9ATi6sheFmXQ/ylAj29cY53DmlfUs+VEhAv4ZxdmbOAr0cVBnE7xW1 zmAyVgHuvTnaEyCtxmI+naFlRy8fXzkspWio4YpUMZQz7WBp3y2koIRmF0FradzA Ed8ogJPNU029JyFGAGMxU/jTVAk2lRIhgnaHdY49pVxl2oyDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg3BPppNpkVRAApkbD86eOVk8BgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY4ZDVhM2UtZGY5Ny0z ZmQ5LTg4MWYtMjljZWU0MWUyZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtpAw5mFgdnHrjXooF+ZtOxHDqirJJ2T5080UtPqc5KNvSOjbtRdGSH PH6DaBUZRRE5tG4IrJVDzEW1kxpverPRpx/6RX50TtimOUDFVKAXYwIA5aHHgS1Y fQ62QqSVo6F50dT/5FA5BmN1Udk6Y0aO+lPGjNrS0PYqXYNT43K+e8AXUTeWSLW2 l4S6+Rd6BTh/Ao9heTiwHhhfUcq1K3Jzt74LKrkv/mAO1PjHV540joJwQMmq5dzk AipLAJrwtKzmqo4rPdE7/o/6ia5O0bNuzWN9sjnnc9k5tNAec1ivDAAi8S5EoUUE c5T35AKoH/dep1rwiJgEVsKPk84rRaA= -----END CERTIFICATE-----Generated at Mon Mar 2 07:17:11 2026 by rpki-client