$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa File: 4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa (raw, json) Hash identifier: QlMV00WMa+4BAsSboxgh2IBJdQUckYAlx50KgiVG/sU= Subject key identifier: 30:2B:17:06:40:D6:40:5D:BC:CA:92:6E:5D:18:0E:80:0C:4F:7A:6D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA7A0761B328F2581707D48A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.108.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:76:1b:32:8f:25:81:70:7d:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9a1f5527-fec3-44b8-bfa7-60933c8ad421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:f0:6e:7f:76:2f:bd:f5:7b:fe:68:bc:ad: 12:59:08:2b:30:17:4a:20:46:0d:26:ba:00:6c:86: ac:7e:82:51:1f:4a:70:f8:03:b4:1e:57:f8:27:9f: a3:cb:88:2d:75:ae:7f:e9:f1:d6:23:f7:54:86:ba: 7e:01:65:69:e3:3d:04:73:aa:4e:51:9d:dd:be:5a: dc:50:8b:bb:2a:bf:91:b9:7c:0f:0e:b0:08:98:49: 1f:33:97:cc:bb:af:15:df:08:b8:44:d0:79:50:34: 30:e9:d0:c2:a4:f0:d8:9b:08:53:38:61:89:7a:00: 8a:24:a3:aa:c1:19:7f:ab:b7:32:12:97:a8:8a:1b: 5a:1d:6d:ce:3d:47:e6:6b:ca:67:d5:41:41:67:29: 9b:79:b7:5c:fd:96:30:83:ab:75:0d:a9:c8:3d:ae: e0:17:9b:40:34:b1:0b:5e:b2:c7:6b:fa:46:86:af: 5e:cc:b4:54:aa:a0:3c:71:93:c5:74:62:38:4c:04: 8a:4f:11:5f:b6:22:d7:df:02:9c:b2:45:1c:39:ae: 5a:74:3d:e8:1a:57:1d:03:5b:76:27:12:c5:7e:ec: cb:04:38:c8:78:60:6c:c2:17:ff:55:2b:2a:40:a0: 08:0b:ed:07:23:8f:9d:60:9d:4f:64:2f:ba:cd:af: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2B:17:06:40:D6:40:5D:BC:CA:92:6E:5D:18:0E:80:0C:4F:7A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d9:7c:b2:01:3a:f9:eb:95:7a:13:b6:46:62:5f:33:7c:a6: 59:44:9f:73:ce:1e:22:5f:25:3e:ae:e8:ed:dd:de:74:24:2c: 6f:31:73:56:1a:87:21:23:e1:d9:d5:44:8e:b6:b3:49:c5:1b: 3d:ce:2b:c3:4a:2c:62:96:39:26:12:2b:b5:b9:83:8b:21:16: ff:48:a8:23:0f:51:d2:6e:33:fd:a2:c6:46:d5:3c:e9:34:1f: 36:89:57:87:ad:dd:44:4e:cf:f5:9c:8d:97:06:03:c9:6b:a7: 62:0e:7c:34:bf:ee:c3:17:a5:47:89:29:bb:c0:b0:a0:c0:cf: ce:6f:5a:3e:ec:6d:53:0a:61:88:05:ef:2b:23:88:0d:6b:8f: 8e:4d:98:71:c0:4f:46:b2:44:46:de:db:70:3a:f0:a9:02:b0: f3:57:45:8a:84:ea:3e:3b:4d:fe:32:0c:4e:2f:57:9c:9c:a8: c8:eb:52:2a:1a:9f:db:9a:63:3c:5b:38:33:7f:c6:5a:44:ba: 4d:89:5b:aa:ec:7b:bf:77:d5:e1:b5:1d:5f:5e:d7:d9:0c:98: 1a:02:91:da:02:82:08:a6:19:41:6f:5a:3b:5c:cb:ce:50:bf: 14:90:9a:d0:94:a3:fb:d3:f1:7a:f9:1e:37:32:f8:7e:eb:4f: 34:67:37:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noHYbMo8lgXB9SKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWExZjU1MjctZmVjMy00NGI4LWJmYTctNjA5MzNjOGFkNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaDwbn92L731e/5ovK0SWQgrMBdKIEYNJroA bIasfoJRH0pw+AO0Hlf4J5+jy4gtda5/6fHWI/dUhrp+AWVp4z0Ec6pOUZ3dvlrc UIu7Kr+RuXwPDrAImEkfM5fMu68V3wi4RNB5UDQw6dDCpPDYmwhTOGGJegCKJKOq wRl/q7cyEpeoihtaHW3OPUfma8pn1UFBZymbebdc/ZYwg6t1DanIPa7gF5tANLEL XrLHa/pGhq9ezLRUqqA8cZPFdGI4TASKTxFftiLX3wKcskUcOa5adD3oGlcdA1t2 JxLFfuzLBDjIeGBswhf/VSsqQKAIC+0HI4+dYJ1PZC+6za8xtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDArFwZA1kBdvMqSbl0YDoAMT3ptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRjMjk2MzEtMDY1YS0z NDVhLWE4ZWMtMTRjNmRkMmZhYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHZfLIBOvnrlXoTtkZiXzN8pllEn3POHiJfJT6u6O3d3nQkLG8xc1Ya hyEj4dnVRI62s0nFGz3OK8NKLGKWOSYSK7W5g4shFv9IqCMPUdJuM/2ixkbVPOk0 HzaJV4et3UROz/WcjZcGA8lrp2IOfDS/7sMXpUeJKbvAsKDAz85vWj7sbVMKYYgF 7ysjiA1rj45NmHHAT0ayREbe23A68KkCsPNXRYqE6j47Tf4yDE4vV5ycqMjrUioa n9uaYzxbODN/xlpEuk2JW6rse7931eG1HV9e19kMmBoCkdoCggimGUFvWjtcy85Q vxSQmtCUo/vT8Xr5Hjcy+H7rTzRnN+g= -----END CERTIFICATE-----Generated at Wed Jul 29 15:25:58 2026 by rpki-client