$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa File: 1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa (raw, json) Hash identifier: UGl9CRqk3Fy11NvDKwWE8gzlv7d9ylosrV1U/LAbE3w= Subject key identifier: CF:D2:8D:9B:68:6C:C6:0C:76:2E:9F:F8:12:E5:3B:3A:6F:8E:FB:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA79A92C1953C11F9E2582E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 104.198.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:92:c1:95:3c:11:f9:e2:58:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a343a26d-dc3b-4b4f-b6b8-835c60a2ae69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:24:b1:44:a5:28:c1:5d:a8:46:60:d0:dd: 0d:36:18:eb:38:f3:52:07:b5:61:47:00:39:a2:0a: 26:3b:94:04:61:df:11:d7:3c:85:e5:a1:c7:ab:cc: 0b:b0:28:13:47:a3:de:42:e3:23:d9:01:6f:6f:e0: 81:82:be:5a:f6:41:b6:53:da:db:00:de:f6:61:0c: 6a:c5:06:5a:e3:2d:2c:95:5a:b0:f2:fb:79:0e:9f: 60:69:5c:17:43:ff:cf:c6:07:ec:1b:7f:49:d7:10: 5e:80:ad:cd:80:c1:8f:7c:92:6d:e5:3d:92:f7:17: 85:67:66:c9:3e:e7:7b:ea:5a:f1:5d:c3:d0:e3:ba: f0:63:6c:1a:63:3a:50:44:04:95:a2:d1:6d:67:89: af:cc:4d:ad:37:b3:58:04:75:73:0a:40:60:f4:2f: 06:bf:a1:06:92:2f:d3:3a:8c:43:00:50:31:cc:b6: d4:1a:90:c4:c0:c0:4d:52:6e:68:f0:8f:b4:bb:1c: c6:3f:4f:72:66:65:7d:51:55:38:ff:a5:5a:8e:ad: 71:9b:f2:42:c4:d1:e1:dc:fa:36:45:a5:45:5f:1f: 26:6c:ed:50:9c:8c:04:bf:79:c1:31:40:a7:73:e8: 43:0e:df:00:fb:1e:89:d9:6b:d7:fc:75:f6:bf:5e: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D2:8D:9B:68:6C:C6:0C:76:2E:9F:F8:12:E5:3B:3A:6F:8E:FB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1a:e0:9a:0b:ab:cc:cc:a5:3c:4b:52:ae:4b:34:55:32:d6: 58:a4:0c:01:30:7b:bf:c9:62:38:6e:ea:a7:71:71:08:b2:b6: c1:93:3a:11:32:7e:84:6b:4d:d8:dd:d7:a9:dc:85:b9:f8:50: d2:1a:6a:83:1c:32:c7:61:98:da:a8:33:13:4d:11:99:43:7d: b1:d5:d0:3d:d6:9f:6d:40:c0:13:49:ef:8f:8e:9c:b7:05:6b: 14:65:84:80:e0:74:c2:cd:80:71:49:95:b0:b5:7d:92:01:55: c4:35:8f:e4:54:7c:47:49:64:98:bd:bd:58:6f:a1:fc:b7:6b: 22:e3:18:d8:3c:ec:8d:77:67:03:51:0d:23:47:2c:9b:70:f6: ae:18:12:29:fd:9a:cf:04:e3:b2:be:99:db:d9:62:bf:0b:c1: 42:1b:b7:bc:db:91:b7:9a:5f:19:46:33:63:93:24:4d:e5:bd: 5c:a5:16:97:74:e7:b3:49:31:72:32:29:62:59:0d:ec:51:ca: 6d:83:34:9b:67:37:4e:09:0b:9b:4d:61:40:43:9c:44:6a:ae: 9d:c6:41:87:a5:de:31:b8:9e:ec:19:4c:9a:7e:6f:3b:f3:6d: 62:01:0a:9f:d0:0d:59:45:7f:8b:ad:b4:83:2f:b9:12:cf:fd: 83:0b:24:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmpLBlTwR+eJYLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTM0M2EyNmQtZGMzYi00YjRmLWI2YjgtODM1YzYwYTJhZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGkksUSlKMFdqEZg0N0NNhjrOPNSB7VhRwA5 ogomO5QEYd8R1zyF5aHHq8wLsCgTR6PeQuMj2QFvb+CBgr5a9kG2U9rbAN72YQxq xQZa4y0slVqw8vt5Dp9gaVwXQ//PxgfsG39J1xBegK3NgMGPfJJt5T2S9xeFZ2bJ Pud76lrxXcPQ47rwY2waYzpQRASVotFtZ4mvzE2tN7NYBHVzCkBg9C8Gv6EGki/T OoxDAFAxzLbUGpDEwMBNUm5o8I+0uxzGP09yZmV9UVU4/6Vajq1xm/JCxNHh3Po2 RaVFXx8mbO1QnIwEv3nBMUCnc+hDDt8A+x6J2WvX/HX2v177KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/SjZtobMYMdi6f+BLlOzpvjvsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIyMWE2YmQtMzkzYS0z NzU4LWI2ZjgtOGJmMDBjYzk2NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAa4JoLq8zMpTxLUq5LNFUy1likDAEwe7/JYjhu6qdxcQiytsGTOhEy foRrTdjd16nchbn4UNIaaoMcMsdhmNqoMxNNEZlDfbHV0D3Wn21AwBNJ74+OnLcF axRlhIDgdMLNgHFJlbC1fZIBVcQ1j+RUfEdJZJi9vVhvofy3ayLjGNg87I13ZwNR DSNHLJtw9q4YEin9ms8E47K+mdvZYr8LwUIbt7zbkbeaXxlGM2OTJE3lvVylFpd0 57NJMXIyKWJZDexRym2DNJtnN04JC5tNYUBDnERqrp3GQYel3jG4nuwZTJp+bzvz bWIBCp/QDVlFf4uttIMvuRLP/YMLJPA= -----END CERTIFICATE-----Generated at Wed Jul 29 15:27:47 2026 by rpki-client