$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fd1ddd2-9b80-397f-a3a5-5c5691763fc1.roa File: 5fd1ddd2-9b80-397f-a3a5-5c5691763fc1.roa (raw, json) Hash identifier: 1x0sOLfi/5LuTO05t8QSQTD0fB6Bwfrzwv+iImvHG60= Subject key identifier: 2C:4A:1A:A2:09:7F:AC:2A:F1:89:CA:DB:27:35:87:E7:15:CC:CE:54 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787C7D92A86512C8B104880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fd1ddd2-9b80-397f-a3a5-5c5691763fc1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 43515 IP address blocks: 34.2.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:c7:d9:2a:86:51:2c:8b:10:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8f1f11a9-b011-4038-9523-e730ebbf13ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:c1:25:5b:28:6c:e6:9f:be:b8:6c:d5:4e: 75:d8:99:3b:05:2f:70:8d:ff:1d:70:a9:06:47:8c: 97:34:39:bb:34:a9:06:4f:11:99:d9:23:1a:98:f3: b2:36:fb:0b:85:a8:1d:ae:fa:b8:80:eb:78:9d:55: ad:d1:9f:f9:10:92:76:5e:68:ae:2c:53:1d:ba:21: 1e:d5:ae:53:43:e3:38:81:69:5b:b7:d0:7a:0c:39: 79:fc:ea:fe:b6:73:a2:33:27:9c:e3:31:28:48:72: 25:3e:b6:cb:5c:72:25:f4:87:23:47:2e:6c:26:09: 9e:da:b9:43:9b:93:2b:72:4c:30:ee:b5:fe:8e:1d: 3c:9b:cf:44:90:f5:9f:d8:a9:04:3c:46:68:83:0f: 1a:4d:60:8a:ba:3f:79:bd:2b:57:a1:45:0e:28:e6: da:20:40:d0:c7:ef:36:82:3c:bd:ce:0d:9e:e3:b5: e0:52:15:82:31:13:a7:0b:46:a7:e4:de:f9:18:3f: 54:e5:e0:07:8e:b0:7d:c0:d0:f3:fe:e8:48:57:39: 59:91:c8:8f:8d:4c:ce:d9:36:f3:75:7c:0a:3b:c1: a8:83:8f:02:6a:23:dd:93:57:09:59:be:ee:64:45: 2b:bd:16:4c:46:91:5b:d1:9f:16:1a:67:8f:f6:2c: 21:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4A:1A:A2:09:7F:AC:2A:F1:89:CA:DB:27:35:87:E7:15:CC:CE:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fd1ddd2-9b80-397f-a3a5-5c5691763fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c0:06:d7:cf:a8:32:89:82:0a:8d:1d:30:b9:66:86:b8:6a: 95:39:4d:84:72:07:84:1e:81:b9:3b:9b:29:9e:09:e5:91:24: 9e:1e:4f:1b:22:9f:5b:b8:98:52:7b:3b:b6:cd:1b:22:15:fa: 0e:a2:29:c4:e8:5f:a8:54:03:48:d2:01:f3:d3:0c:5c:d3:4f: c1:96:4c:b8:5c:b2:39:af:29:2f:97:8c:f3:02:c4:0a:4a:ee: ff:b8:81:f7:fd:9e:04:83:12:02:1a:b2:99:d7:74:58:f1:26: ce:02:5a:ce:84:35:ae:e4:9f:ae:88:72:09:01:0e:97:f7:f9: fa:fc:4e:38:d2:d2:cf:63:04:58:23:2e:a8:4d:ba:28:98:ae: a6:c0:5f:f7:a7:09:f0:ca:72:f6:d2:dc:c5:93:1c:3a:78:56: f5:e8:99:8a:ce:a9:d6:4d:ff:bc:07:e4:75:2d:c8:b9:71:c0: 5e:10:49:e0:2d:af:ce:e7:e9:a1:aa:68:26:df:76:4c:7e:bc: a8:d3:ba:74:c4:3e:0b:2a:2a:82:e5:2e:dc:9f:7b:63:8d:8a: 9c:16:f6:d3:81:60:e7:da:08:7f:62:0d:c9:95:5a:1b:00:b3: 6c:d2:4e:58:d1:73:00:cf:b1:a0:2f:23:4f:b2:44:c7:e8:d1: 38:33:ee:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh8fZKoZRLIsQSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGYxZjExYTktYjAxMS00MDM4LTk1MjMtZTczMGViYmYxM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37fBJVsobOafvrhs1U512Jk7BS9wjf8dcKkG R4yXNDm7NKkGTxGZ2SMamPOyNvsLhagdrvq4gOt4nVWt0Z/5EJJ2XmiuLFMduiEe 1a5TQ+M4gWlbt9B6DDl5/Or+tnOiMyec4zEoSHIlPrbLXHIl9IcjRy5sJgme2rlD m5Mrckww7rX+jh08m89EkPWf2KkEPEZogw8aTWCKuj95vStXoUUOKObaIEDQx+82 gjy9zg2e47XgUhWCMROnC0an5N75GD9U5eAHjrB9wNDz/uhIVzlZkciPjUzO2Tbz dXwKO8Gog48CaiPdk1cJWb7uZEUrvRZMRpFb0Z8WGmeP9iwhHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxKGqIJf6wq8YnK2yc1h+cVzM5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZkMWRkZDItOWI4MC0z OTdmLWEzYTUtNWM1NjkxNzYzZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvABtfPqDKJggqNHTC5Zoa4apU5TYRyB4Qegbk7mymeCeWRJJ4eTxsi n1u4mFJ7O7bNGyIV+g6iKcToX6hUA0jSAfPTDFzTT8GWTLhcsjmvKS+XjPMCxApK 7v+4gff9ngSDEgIaspnXdFjxJs4CWs6ENa7kn66IcgkBDpf3+fr8TjjS0s9jBFgj LqhNuiiYrqbAX/enCfDKcvbS3MWTHDp4VvXomYrOqdZN/7wH5HUtyLlxwF4QSeAt r87n6aGqaCbfdkx+vKjTunTEPgsqKoLlLtyfe2ONipwW9tOBYOfaCH9iDcmVWhsA s2zSTljRcwDPsaAvI0+yRMfo0Tgz7po= -----END CERTIFICATE-----Generated at Wed Jul 29 07:41:54 2026 by rpki-client