$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa File: 3fb55c58-0b19-35cf-a572-501263f0b63e.roa (raw, json) Hash identifier: tkL/Bq++LlCP+4Gtw+ASrGEj5LH+P7QgOay2pbv46SY= Subject key identifier: 85:47:3A:30:42:87:07:E2:0E:16:B4:AE:43:0C:ED:B8:19:2D:8B:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787C690AA2934696EE7A300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:c6:90:aa:29:34:69:6e:e7:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5743ee5f-46eb-45fd-a2f9-045acdeb6410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:c3:64:87:30:35:95:0c:5b:87:ed:aa:38: 85:4a:90:09:41:26:98:58:79:79:7b:8e:47:c0:3e: f9:7d:fe:9f:47:d1:88:80:3e:8c:87:34:eb:76:81: 8c:94:5d:f0:fc:51:c7:14:03:ea:c5:ec:83:14:a5: 6a:ca:d3:98:9e:01:bc:af:17:50:cc:c3:a5:44:ab: 32:45:51:f0:03:cf:80:53:6c:e1:2a:bf:8f:9f:c5: bf:3c:d0:d2:9a:47:bc:18:f8:ae:87:10:6d:2c:59: e6:73:3b:6e:ef:45:f8:84:7a:27:14:da:74:ec:d4: c0:02:cb:87:44:d2:38:a9:20:8b:74:c3:d5:52:33: bc:cb:4e:5b:48:75:f2:9f:a9:37:e1:a6:a8:03:a4: 69:6e:eb:17:1c:73:e5:f1:14:bf:84:9b:53:41:bb: 6d:42:2a:40:31:dd:d1:ac:90:b3:7b:97:d6:ba:d1: 0f:0a:3b:cb:5c:c9:05:8a:9d:02:23:ef:1a:89:60: b9:f7:3c:23:51:8e:6b:61:89:df:ea:70:cc:12:94: 50:71:8d:03:a7:68:d3:38:88:76:84:f1:cd:af:79: 53:0b:de:29:c3:0d:0e:d9:d9:8a:8b:48:e6:cd:40: 61:3d:bd:de:7a:db:74:47:d6:92:80:f8:5b:ca:38: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:47:3A:30:42:87:07:E2:0E:16:B4:AE:43:0C:ED:B8:19:2D:8B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ea:ac:20:2e:00:31:5f:18:b3:31:dd:2e:9a:cc:68:2a:4d: c4:c2:a4:36:e2:f8:c3:4d:53:22:50:85:fb:b9:3d:76:d8:f4: 6c:de:d0:49:08:3a:c9:53:b3:cf:39:05:ac:54:cc:76:18:dc: cf:4e:97:0e:d1:fe:36:39:75:30:6d:e9:f7:2a:09:9c:3d:23: 34:a8:31:e4:d5:b9:b3:36:4f:96:dd:dd:9a:3e:1c:0a:68:33: 30:82:a6:7f:3b:71:e4:2c:5e:71:52:38:26:51:59:42:35:aa: bd:95:46:16:b8:78:1d:0d:97:b1:fc:5f:0a:91:fc:ba:61:e9: 45:d3:26:ba:cd:36:85:59:3d:28:7f:90:b2:21:25:c3:62:58: 36:2a:a6:d4:88:c4:98:72:24:77:30:f8:a8:fc:be:47:ec:13: 37:4e:8e:4b:9d:2a:bd:f7:c2:2e:a4:3b:1b:16:a8:1a:60:2c: ca:09:b2:d1:7a:4f:13:93:5e:79:1c:eb:86:39:6c:ae:81:b1: 7d:6d:0a:eb:18:0f:5b:a2:f2:85:36:19:f3:9c:9b:2c:5f:be: d2:60:53:2d:f4:c4:fd:4d:45:e7:0c:d2:99:49:7e:5b:ca:82: ac:ff:da:8e:65:1a:8d:59:f6:63:88:24:a0:b5:f2:10:95:a9: 20:b3:1c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh8aQqik0aW7nowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTc0M2VlNWYtNDZlYi00NWZkLWEyZjktMDQ1YWNkZWI2NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocbDZIcwNZUMW4ftqjiFSpAJQSaYWHl5e45H wD75ff6fR9GIgD6MhzTrdoGMlF3w/FHHFAPqxeyDFKVqytOYngG8rxdQzMOlRKsy RVHwA8+AU2zhKr+Pn8W/PNDSmke8GPiuhxBtLFnmcztu70X4hHonFNp07NTAAsuH RNI4qSCLdMPVUjO8y05bSHXyn6k34aaoA6RpbusXHHPl8RS/hJtTQbttQipAMd3R rJCze5fWutEPCjvLXMkFip0CI+8aiWC59zwjUY5rYYnf6nDMEpRQcY0Dp2jTOIh2 hPHNr3lTC94pww0O2dmKi0jmzUBhPb3eett0R9aSgPhbyjh6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVHOjBChwfiDha0rkMM7bgZLYuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiNTVjNTgtMGIxOS0z NWNmLWE1NzItNTAxMjYzZjBiNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALqrCAuADFfGLMx3S6azGgqTcTCpDbi+MNNUyJQhfu5PXbY9Gze0EkI OslTs885BaxUzHYY3M9Olw7R/jY5dTBt6fcqCZw9IzSoMeTVubM2T5bd3Zo+HApo MzCCpn87ceQsXnFSOCZRWUI1qr2VRha4eB0Nl7H8XwqR/Lph6UXTJrrNNoVZPSh/ kLIhJcNiWDYqptSIxJhyJHcw+Kj8vkfsEzdOjkudKr33wi6kOxsWqBpgLMoJstF6 TxOTXnkc64Y5bK6BsX1tCusYD1ui8oU2GfOcmyxfvtJgUy30xP1NRecM0plJflvK gqz/2o5lGo1Z9mOIJKC18hCVqSCzHLE= -----END CERTIFICATE-----Generated at Wed Jul 29 15:25:47 2026 by rpki-client