$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa File: 28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa (raw, json) Hash identifier: rLf3bRmxi59ajkwYSNfjt4GnrcNxEZG7XlTgH8J5Uok= Subject key identifier: AA:8F:E8:35:52:15:0A:22:AB:31:50:00:53:90:73:1F:8B:B7:36:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787BC56D0AE773D6E391E60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 43515 IP address blocks: 34.190.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:bc:56:d0:ae:77:3d:6e:39:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6c2817b9-9330-4503-95b2-f5832e6650f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1d:dd:6b:0c:70:bc:71:1b:5d:41:79:b7:33: d0:a6:76:e9:fd:79:49:a6:01:60:3a:1a:1a:43:10: c8:39:4d:86:d4:e6:c0:3b:c7:1f:25:75:63:7e:e7: 14:38:e8:28:82:bf:37:4d:48:43:91:df:8c:7f:66: bb:ec:62:c7:20:cb:41:d4:32:b3:34:4e:34:31:a0: 3d:fa:fc:5d:6f:f8:a9:e6:13:e6:7d:a2:51:5e:86: 2f:12:7f:40:41:64:b6:b3:c4:89:90:18:53:61:b8: 16:61:02:d3:fb:fc:b7:33:e6:ac:24:10:6f:0b:7f: 4c:ba:af:bd:68:5e:05:06:60:0c:f5:36:7c:9d:51: 26:19:40:df:5f:a4:4d:4c:8f:0e:8d:28:4a:14:34: a7:63:18:71:24:1a:3a:7f:6c:fd:04:ba:ba:ea:24: 40:72:ac:28:41:29:e9:23:55:99:2c:9e:93:e6:1a: 7c:6e:ab:d7:cf:8f:43:23:e4:74:68:89:4a:40:78: e7:92:8f:45:81:9b:74:53:14:ab:01:5e:d5:57:30: 18:38:c9:ec:fb:be:f1:a8:c7:f3:b7:e5:42:94:6d: 0a:fe:75:5b:38:91:17:84:2c:4c:06:af:04:19:ce: 7f:f7:5f:de:02:6f:bf:da:9b:d1:a6:8b:46:1e:a6: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8F:E8:35:52:15:0A:22:AB:31:50:00:53:90:73:1F:8B:B7:36:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:87:aa:09:28:80:e7:6b:ef:d8:af:d5:b9:8d:38:05:c8:3f: d6:c3:e7:6a:a8:4f:87:43:f2:b0:de:66:4e:9f:92:5d:67:15: 84:85:7c:c0:32:ee:2d:eb:a9:d6:6b:98:78:cf:96:ee:71:cf: 53:af:e9:7d:d9:7a:4f:d4:34:07:8b:39:68:4d:6a:aa:cc:a7: 8d:22:73:45:0a:34:ba:81:eb:05:7e:10:bb:73:bf:27:15:38: 18:9b:20:ca:71:c1:1c:c2:63:a7:ed:0c:9c:5a:84:06:fc:2e: 44:80:f3:19:10:dc:6c:a0:f9:ca:80:d2:17:e9:e5:ee:bb:6b: c4:0b:b1:ec:7a:9d:36:be:c1:41:3b:25:bf:b4:6a:37:56:26: a8:e9:8a:8d:ba:6f:02:57:d2:83:91:a4:37:e5:55:e0:14:c1: 6a:55:4e:70:58:a4:57:78:4c:bd:4b:59:32:b6:a5:0a:36:8e: 7a:6e:04:32:25:0b:7c:76:32:4e:94:35:b2:79:65:a2:dc:e5: 30:63:b6:0b:99:53:a5:4e:ab:45:52:c2:87:e6:2b:75:43:80: f9:b3:b6:5e:67:09:fe:1f:72:0e:79:34:57:62:e3:61:51:39: 95:db:e7:68:ae:a7:f1:97:0b:7d:57:65:a0:b4:e2:bb:6a:b6: 2e:44:a2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7xW0K53PW45HmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmMyODE3YjktOTMzMC00NTAzLTk1YjItZjU4MzJlNjY1MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx3dawxwvHEbXUF5tzPQpnbp/XlJpgFgOhoa QxDIOU2G1ObAO8cfJXVjfucUOOgogr83TUhDkd+Mf2a77GLHIMtB1DKzNE40MaA9 +vxdb/ip5hPmfaJRXoYvEn9AQWS2s8SJkBhTYbgWYQLT+/y3M+asJBBvC39Muq+9 aF4FBmAM9TZ8nVEmGUDfX6RNTI8OjShKFDSnYxhxJBo6f2z9BLq66iRAcqwoQSnp I1WZLJ6T5hp8bqvXz49DI+R0aIlKQHjnko9FgZt0UxSrAV7VVzAYOMns+77xqMfz t+VClG0K/nVbOJEXhCxMBq8EGc5/91/eAm+/2pvRpotGHqYCYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqP6DVSFQoiqzFQAFOQcx+LtzbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhlN2JmMmItOWUzYS0z Y2E0LWEyOWEtMTcwZjY4ZDVjYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICHqgkogOdr79iv1bmNOAXIP9bD52qoT4dD8rDeZk6fkl1nFYSFfMAy 7i3rqdZrmHjPlu5xz1Ov6X3Zek/UNAeLOWhNaqrMp40ic0UKNLqB6wV+ELtzvycV OBibIMpxwRzCY6ftDJxahAb8LkSA8xkQ3Gyg+cqA0hfp5e67a8QLsex6nTa+wUE7 Jb+0ajdWJqjpio26bwJX0oORpDflVeAUwWpVTnBYpFd4TL1LWTK2pQo2jnpuBDIl C3x2Mk6UNbJ5ZaLc5TBjtguZU6VOq0VSwofmK3VDgPmztl5nCf4fcg55NFdi42FR OZXb52iup/GXC31XZaC04rtqti5EomI= -----END CERTIFICATE-----Generated at Wed Jul 29 08:23:20 2026 by rpki-client