$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04aef7f1-9e13-3f53-afb8-23e6d74d9e99.roa File: 04aef7f1-9e13-3f53-afb8-23e6d74d9e99.roa (raw, json) Hash identifier: 4rkDv0PgflfqvVC5/qQgRkeOESFeIb2ODRdTC7d9Kd8= Subject key identifier: F1:66:F1:12:DA:23:17:1F:8D:40:6E:78:CB:D5:0A:C1:D9:A9:FE:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787B4892FBE6DBC2C353AC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04aef7f1-9e13-3f53-afb8-23e6d74d9e99.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.3.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:b4:89:2f:be:6d:bc:2c:35:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9ca145f4-ee97-4e63-9b59-b9f1eddd952e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:22:21:a2:5f:93:2c:20:43:34:89:41:5d: d0:9a:ae:d1:2c:89:23:3d:d3:2c:08:c7:9a:44:cc: 92:b6:08:9f:87:ca:42:cb:1f:4a:09:48:30:62:f5: 24:8c:9b:18:62:3d:be:f3:3f:f7:13:a9:e2:52:52: 7b:9a:30:4a:4c:ca:8f:79:3b:f3:6a:ad:e0:75:c2: 19:5e:a1:5b:42:73:d2:41:30:89:4a:56:87:20:57: e1:3f:e9:02:f8:51:a1:15:66:90:15:ad:6b:44:f2: f4:ec:2e:e6:79:39:5e:a7:1c:b2:e9:f3:cd:25:bc: e3:b8:a0:c0:d7:f2:2e:1f:ef:a4:1d:0b:07:67:23: 22:15:25:b6:e3:6c:d1:08:d7:ab:31:e7:22:ad:cf: 81:cf:88:c5:9b:b1:3f:ef:42:53:cf:75:4d:f8:28: 2c:fc:31:79:21:61:e0:c0:0a:bf:34:0d:0f:69:4a: e1:ad:10:47:5d:44:4a:43:2c:39:6f:3d:7b:eb:ad: c7:c0:2a:cb:4c:13:1f:30:d1:23:03:66:e1:9d:14: 84:9d:86:02:ee:f8:56:6b:57:b5:be:60:d7:76:59: fa:d8:75:2f:03:5a:40:76:30:b7:35:37:04:7f:52: 76:72:04:13:35:b6:a4:f1:b8:76:06:13:93:aa:fd: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:66:F1:12:DA:23:17:1F:8D:40:6E:78:CB:D5:0A:C1:D9:A9:FE:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04aef7f1-9e13-3f53-afb8-23e6d74d9e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a3:e0:57:eb:b9:23:ce:0a:76:43:0e:bf:fc:0e:7a:76:5c: 6f:c7:4c:0e:75:d6:f6:6f:41:84:75:68:11:92:ad:6e:1e:b4: d5:f4:73:e9:1a:ff:2b:7a:15:f7:d7:3a:55:94:95:7c:63:29: bd:e6:92:23:e0:42:68:14:86:95:7d:97:ac:34:c8:b5:a3:3e: 9c:61:93:3f:95:af:37:c0:4f:a3:6c:3f:50:0e:f4:c3:76:20: 71:c1:07:9c:36:a9:09:19:4d:f4:38:0a:ce:e3:76:fc:94:49: 42:ca:77:b5:43:4e:d4:1a:ca:e2:af:0f:26:42:0b:55:9b:77: 35:23:46:26:ff:cd:d6:3d:2a:29:35:eb:ea:fa:4c:74:ba:96: 92:c0:47:90:00:2c:35:13:ab:52:49:45:87:73:ae:5e:bf:73: 9b:11:78:a1:a2:b1:07:11:bc:39:4f:39:2e:07:86:94:55:e2: da:61:99:69:41:45:db:bd:c3:3d:a6:70:f6:0c:f5:c5:d3:f5: 7a:15:54:44:69:82:9f:e4:eb:22:64:2c:51:a1:c7:2a:4d:f8: de:07:e8:7c:f2:ac:01:11:9f:9b:61:cf:1d:32:f4:95:40:40: 5e:48:19:5f:b1:4b:ce:80:30:69:2b:d1:e0:18:b4:41:15:24: 3f:eb:db:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7SJL75tvCw1OsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWNhMTQ1ZjQtZWU5Ny00ZTYzLTliNTktYjlmMWVkZGQ5NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfQiIaJfkywgQzSJQV3Qmq7RLIkjPdMsCMea RMyStgifh8pCyx9KCUgwYvUkjJsYYj2+8z/3E6niUlJ7mjBKTMqPeTvzaq3gdcIZ XqFbQnPSQTCJSlaHIFfhP+kC+FGhFWaQFa1rRPL07C7meTlepxyy6fPNJbzjuKDA 1/IuH++kHQsHZyMiFSW242zRCNerMecirc+Bz4jFm7E/70JTz3VN+Cgs/DF5IWHg wAq/NA0PaUrhrRBHXURKQyw5bz17663HwCrLTBMfMNEjA2bhnRSEnYYC7vhWa1e1 vmDXdln62HUvA1pAdjC3NTcEf1J2cgQTNbak8bh2BhOTqv2x4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFm8RLaIxcfjUBueMvVCsHZqf6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDRhZWY3ZjEtOWUxMy0z ZjUzLWFmYjgtMjNlNmQ3NGQ5ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCj4FfruSPOCnZDDr/8Dnp2XG/HTA511vZvQYR1aBGSrW4etNX0c+ka /yt6FffXOlWUlXxjKb3mkiPgQmgUhpV9l6w0yLWjPpxhkz+VrzfAT6NsP1AO9MN2 IHHBB5w2qQkZTfQ4Cs7jdvyUSULKd7VDTtQayuKvDyZCC1WbdzUjRib/zdY9Kik1 6+r6THS6lpLAR5AALDUTq1JJRYdzrl6/c5sReKGisQcRvDlPOS4HhpRV4tphmWlB Rdu9wz2mcPYM9cXT9XoVVERpgp/k6yJkLFGhxypN+N4H6HzyrAERn5thzx0y9JVA QF5IGV+xS86AMGkr0eAYtEEVJD/r29Y= -----END CERTIFICATE-----Generated at Wed Jul 29 15:24:15 2026 by rpki-client