$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/406d73de-99a0-3063-a1b8-55eaac44030a.roa File: 406d73de-99a0-3063-a1b8-55eaac44030a.roa (raw, json) Hash identifier: beZ6qxvSPCKwUIAEFk9spW5OQBzweyRrfPgHwkB6y1E= Subject key identifier: 3D:AB:BB:98:B5:31:34:1A:74:D6:68:4C:3D:7F:6D:8F:18:53:33:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787BD5E447E827F6E8D135C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/406d73de-99a0-3063-a1b8-55eaac44030a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 43515 IP address blocks: 34.191.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:bd:5e:44:7e:82:7f:6e:8d:13:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eb2a76d7-a290-4f96-be79-d027228308c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:3a:b6:d9:c9:d4:73:00:33:cd:f9:e1:b0: e1:33:12:c4:e2:d7:5b:e9:0c:d0:0f:9c:3e:7b:ed: 62:c8:26:c1:f9:fc:26:4e:ea:a2:72:74:ae:b0:59: ce:c0:54:c8:98:8c:cd:c3:7e:89:54:27:02:f6:f1: 47:de:3b:86:a0:73:46:d6:ca:42:a7:db:f6:b7:16: 1a:6a:d3:1c:9d:e0:9d:95:9d:5d:72:6c:4e:d9:2e: 1d:09:03:e2:a0:ce:d5:54:85:d1:83:1f:b8:4e:66: f5:4f:cd:05:c6:a3:ee:3c:76:4d:f3:d2:c2:3a:c2: 60:06:ef:6b:37:d2:68:13:95:dc:f1:d1:cc:72:ef: a2:f2:d4:31:6b:2e:22:0d:d2:92:68:03:bb:52:61: 1c:80:6a:81:b6:14:5e:db:17:30:78:e1:c2:a7:c9: bc:e3:aa:88:6c:48:15:a2:d3:e0:57:9f:de:4b:be: 38:68:e3:0c:75:2b:03:6d:9f:4b:7e:49:13:8a:46: 1c:d1:c1:9e:33:f7:de:89:1a:16:b5:ea:ed:30:bc: bc:ec:a8:96:86:45:f7:cd:b7:68:3b:26:92:4b:a4: 3d:8f:1a:af:04:73:3b:2e:2b:02:96:33:bf:4a:cc: 95:29:b7:bc:59:71:88:fd:95:c9:d7:f5:46:47:da: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:BB:98:B5:31:34:1A:74:D6:68:4C:3D:7F:6D:8F:18:53:33:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/406d73de-99a0-3063-a1b8-55eaac44030a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:69:d0:31:1c:e8:8d:3e:88:dc:b7:32:b4:72:ff:10:76:98: b7:c3:d2:c7:69:30:5a:71:1e:58:9b:bc:60:95:d6:be:9a:ed: da:22:c0:67:c3:00:d3:96:39:96:ed:0e:43:a7:0b:f0:29:18: 4e:6c:fa:48:18:c7:a7:e4:30:a5:bb:bc:95:a1:ff:ab:75:0d: da:7a:9d:73:b9:44:1d:ae:ba:0c:cf:d7:3f:c6:2e:c3:9a:40: 1a:66:b9:12:0f:66:bc:4a:53:1a:47:6b:4a:c8:df:0d:c1:ef: ae:41:08:ed:e6:28:81:e8:1a:e1:28:1e:1f:cf:17:84:f6:bd: 39:4b:22:97:1f:65:81:65:88:a2:02:e5:3f:38:bb:c9:81:85: c0:3d:e3:4f:60:f3:30:b3:a7:0d:4b:63:f0:89:f4:c5:78:ab: 29:d6:06:c6:45:54:41:ec:98:69:41:5b:45:6e:6f:76:38:ea: 92:be:ed:98:ab:87:86:4a:fd:b4:a5:5d:93:03:0e:16:21:44: 76:33:91:29:23:f8:74:69:4e:25:4f:04:d7:44:3f:52:f0:36: d4:57:49:be:f3:5e:0d:84:e7:48:f0:72:c0:df:0a:b8:f6:d4: 3d:32:7a:53:54:56:b0:7d:17:52:27:e4:6e:45:2b:f0:99:a2: 02:26:41:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh71eRH6Cf26NE1wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWIyYTc2ZDctYTI5MC00Zjk2LWJlNzktZDAyNzIyODMwOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOI6ttnJ1HMAM8354bDhMxLE4tdb6QzQD5w+ e+1iyCbB+fwmTuqicnSusFnOwFTImIzNw36JVCcC9vFH3juGoHNG1spCp9v2txYa atMcneCdlZ1dcmxO2S4dCQPioM7VVIXRgx+4Tmb1T80FxqPuPHZN89LCOsJgBu9r N9JoE5Xc8dHMcu+i8tQxay4iDdKSaAO7UmEcgGqBthRe2xcweOHCp8m846qIbEgV otPgV5/eS744aOMMdSsDbZ9LfkkTikYc0cGeM/feiRoWtertMLy87KiWhkX3zbdo OyaSS6Q9jxqvBHM7LisCljO/SsyVKbe8WXGI/ZXJ1/VGR9r2HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2ru5i1MTQadNZoTD1/bY8YUzOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA2ZDczZGUtOTlhMC0z MDYzLWExYjgtNTVlYWFjNDQwMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNp0DEc6I0+iNy3MrRy/xB2mLfD0sdpMFpxHlibvGCV1r6a7doiwGfD ANOWOZbtDkOnC/ApGE5s+kgYx6fkMKW7vJWh/6t1Ddp6nXO5RB2uugzP1z/GLsOa QBpmuRIPZrxKUxpHa0rI3w3B765BCO3mKIHoGuEoHh/PF4T2vTlLIpcfZYFliKIC 5T84u8mBhcA9409g8zCzpw1LY/CJ9MV4qynWBsZFVEHsmGlBW0Vub3Y46pK+7Zir h4ZK/bSlXZMDDhYhRHYzkSkj+HRpTiVPBNdEP1LwNtRXSb7zXg2E50jwcsDfCrj2 1D0yelNUVrB9F1In5G5FK/CZogImQRA= -----END CERTIFICATE-----Generated at Wed Jul 29 07:43:02 2026 by rpki-client