$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c86d6d3a-9c02-3818-b3aa-7a47eda6ee04.roa File: c86d6d3a-9c02-3818-b3aa-7a47eda6ee04.roa (raw, json) Hash identifier: M8yk5fuVxytNeDeB/VWzMZAXxbGoRTXXrFcxN5mAYCU= Subject key identifier: 01:B3:BD:43:5E:2E:67:C9:BB:79:5C:B2:98:B8:0F:3F:09:14:A3:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4974BD80F53A1BE6CD6A82C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c86d6d3a-9c02-3818-b3aa-7a47eda6ee04.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.4.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:bd:80:f5:3a:1b:e6:cd:6a:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c4bfa22b-6134-4f8b-a5e1-ccca7da497fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:63:70:ae:3c:ff:c4:91:19:c0:b9:f6:1f: e5:eb:b0:cd:01:73:91:da:13:1a:ba:36:64:b8:3d: 4b:b6:c7:aa:f7:03:5b:e7:19:42:39:31:d6:4f:8d: 32:5e:08:2e:15:47:dc:64:d7:8d:eb:db:00:28:2b: 62:71:81:d4:91:f5:44:f2:87:17:d0:12:43:11:68: bf:bf:a8:e9:8a:87:99:04:22:28:45:7b:f1:67:b6: 8f:fa:d7:0b:df:56:ac:ae:83:51:77:ee:06:18:98: e7:4a:5d:28:61:2c:7e:c3:dd:f3:e9:2f:b7:57:0f: a8:48:bf:02:f0:78:36:d6:43:9b:96:4f:14:85:d1: 80:84:95:53:41:d1:d4:40:ff:7c:58:ec:d0:78:07: a8:30:e0:94:ee:94:a0:c1:c8:cd:d5:18:e0:0e:f7: b6:98:6b:1b:51:c1:95:30:13:5b:e2:80:14:57:91: 53:2d:a5:3b:03:eb:55:6d:fd:3e:ff:c8:f0:0f:df: 9c:3b:a7:2a:3d:f4:fa:30:26:f6:4c:7e:15:b1:67: d1:4f:4d:d7:08:85:6a:16:38:d3:e2:04:a4:04:fc: 42:13:74:49:63:91:bc:3c:15:ee:1f:17:e7:d6:49: be:d0:dd:98:67:92:83:41:98:0a:b1:b9:f3:54:7c: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:BD:43:5E:2E:67:C9:BB:79:5C:B2:98:B8:0F:3F:09:14:A3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c86d6d3a-9c02-3818-b3aa-7a47eda6ee04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:69:89:2d:e6:00:fa:84:5d:1f:a5:e8:f3:ea:a2:a1:0b:94: 7c:6e:5e:a7:c0:19:16:33:37:f9:17:6e:c5:d4:98:64:b3:74: 00:7f:bc:34:cd:38:83:f0:72:ac:47:2e:1d:13:32:77:e9:95: f3:30:09:88:b7:97:16:af:fa:5d:d8:8d:27:26:82:23:01:ac: 8f:a7:23:44:62:4a:46:ce:2c:8e:e6:4f:21:58:65:16:15:c7: e3:dd:fb:ba:07:39:9b:2e:1d:7b:2b:0f:93:8c:94:ae:57:a9: f4:aa:57:88:cb:4a:b6:b2:f2:db:d5:45:8c:05:34:ee:ce:33: d9:20:6e:20:f7:ae:12:38:87:39:40:ab:eb:f0:aa:0c:d8:99: 3f:9a:73:96:de:26:c8:94:1b:51:49:63:9e:5b:76:4a:f3:2e: b0:24:9c:5d:d3:7d:02:e9:ad:bc:f7:86:72:98:b1:d5:3c:36: a7:3d:d0:c7:a1:f3:8f:88:05:17:13:c2:77:f9:66:3a:53:f2: 48:40:b6:bb:1c:60:6c:f9:06:18:58:c8:65:13:7f:6f:17:56: 31:b3:e5:18:14:86:50:27:6a:21:e6:25:93:40:c9:18:99:fc: 7a:a0:24:d3:56:9f:4a:22:11:ae:5f:ec:99:5e:d6:e5:6c:f2: f4:45:93:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdL2A9Tob5s1qgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzRiZmEyMmItNjEzNC00ZjhiLWE1ZTEtY2NjYTdkYTQ5N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEBjcK48/8SRGcC59h/l67DNAXOR2hMaujZk uD1Ltseq9wNb5xlCOTHWT40yXgguFUfcZNeN69sAKCticYHUkfVE8ocX0BJDEWi/ v6jpioeZBCIoRXvxZ7aP+tcL31asroNRd+4GGJjnSl0oYSx+w93z6S+3Vw+oSL8C 8Hg21kOblk8UhdGAhJVTQdHUQP98WOzQeAeoMOCU7pSgwcjN1RjgDve2mGsbUcGV MBNb4oAUV5FTLaU7A+tVbf0+/8jwD9+cO6cqPfT6MCb2TH4VsWfRT03XCIVqFjjT 4gSkBPxCE3RJY5G8PBXuHxfn1km+0N2YZ5KDQZgKsbnzVHw+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGzvUNeLmfJu3lcspi4Dz8JFKPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzg2ZDZkM2EtOWMwMi0z ODE4LWIzYWEtN2E0N2VkYTZlZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxpiS3mAPqEXR+l6PPqoqELlHxuXqfAGRYzN/kXbsXUmGSzdAB/vDTN OIPwcqxHLh0TMnfplfMwCYi3lxav+l3YjScmgiMBrI+nI0RiSkbOLI7mTyFYZRYV x+Pd+7oHOZsuHXsrD5OMlK5XqfSqV4jLSray8tvVRYwFNO7OM9kgbiD3rhI4hzlA q+vwqgzYmT+ac5beJsiUG1FJY55bdkrzLrAknF3TfQLprbz3hnKYsdU8Nqc90Meh 84+IBRcTwnf5ZjpT8khAtrscYGz5BhhYyGUTf28XVjGz5RgUhlAnaiHmJZNAyRiZ /HqgJNNWn0oiEa5f7Jle1uVs8vRFkyw= -----END CERTIFICATE-----Generated at Thu Oct 8 08:43:11 2026 by rpki-client