$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa File: 87659ecb-cb7f-3140-a600-f402730776af.roa (raw, json) Hash identifier: ZgI+hUUukGjd6v+4961pSu4TA3RgAKBw2zVBSCWhv+U= Subject key identifier: C0:CA:96:DD:63:68:30:62:04:AE:F6:57:AA:61:4E:D4:2E:43:CE:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA7A073702FF0971F92957E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.108.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:73:70:2f:f0:97:1f:92:95:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d5dc2d97-c4e9-4b3a-8d98-717ffb6d9236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:85:d0:53:f4:cc:b7:7f:09:cd:c8:5b:b0: 33:4c:01:4a:a0:d7:91:20:ba:12:23:f6:17:bf:a4: cb:35:08:eb:ee:83:2c:27:62:0d:15:38:16:e4:99: 9c:2b:9b:df:4d:24:af:8f:dc:0d:00:16:07:31:ac: e3:8d:b0:2a:de:d2:93:8f:fc:38:86:06:2e:74:07: 4e:c0:9a:5a:a7:85:00:5e:3f:f4:ab:ae:40:74:5f: ac:b8:42:b3:eb:20:7b:9c:98:61:75:3f:ca:8f:ed: 11:f7:f0:d6:1a:5e:d7:b9:17:a5:1b:34:ab:ff:a9: b0:f2:ac:c1:78:d0:48:ae:5a:c3:24:d5:33:ba:27: a8:3f:07:ee:59:f5:be:17:09:5b:d2:e7:6c:80:92: 06:a8:cc:a2:dc:43:19:33:d9:f2:06:1d:79:9f:70: 31:0f:64:ec:d6:8f:57:0b:a7:09:4a:cd:76:d9:54: 69:2b:1e:e9:af:16:b9:e6:89:dd:94:29:53:20:c9: 13:90:2e:91:33:10:ec:a2:9f:b6:bc:e9:b2:7c:a6: 39:2f:0d:f0:c7:95:1d:77:d4:b3:85:19:c1:31:b0: ba:ff:c7:40:0a:f3:6a:b7:00:0d:4a:85:03:a6:4f: f1:d2:7c:23:3a:fb:a6:59:dd:58:07:66:ee:44:05: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:96:DD:63:68:30:62:04:AE:F6:57:AA:61:4E:D4:2E:43:CE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:95:f7:0f:7f:d9:9a:0a:af:14:2a:64:a9:3c:2b:14:59:59: 48:c4:63:8d:3a:10:c3:18:26:ae:d2:40:e7:ed:3e:f9:65:75: ad:44:4a:a8:f4:04:52:43:f5:d8:85:c2:09:5b:70:fb:90:c2: 19:4a:84:ba:07:2e:46:3a:b8:fb:76:4f:88:6b:5a:39:8b:4f: 47:5c:c7:16:68:8a:3d:23:fc:52:6d:a5:02:b3:39:d8:44:5c: 0a:1b:d0:85:72:2a:65:5f:27:b1:e3:2d:ca:72:ac:91:a0:27: d5:ee:a0:c0:46:41:69:11:2c:73:2b:8f:73:94:11:82:17:4f: 30:7b:0c:7f:86:e0:8b:2d:bc:14:4c:9e:7a:64:73:5a:ee:03: c1:dd:7d:10:58:13:55:a9:d2:54:19:c6:1f:23:64:85:d2:18: f0:6a:10:3b:61:10:bc:71:b7:15:7d:0e:6e:e3:85:4a:bc:53: 89:61:f9:00:ae:a3:00:dd:48:af:f2:54:ea:3b:d2:89:9b:30: 14:3e:e9:64:7b:95:84:59:fb:2c:99:a8:44:d3:20:33:13:27: 74:7c:15:b0:29:77:9e:89:43:be:62:3f:be:d3:8f:7d:e4:5b: 70:30:f0:26:eb:c7:4a:a3:b8:b4:22:a9:94:5d:45:76:72:7a: 72:f0:02:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noHNwL/CXH5KVfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDVkYzJkOTctYzRlOS00YjNhLThkOTgtNzE3ZmZiNmQ5MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYOF0FP0zLd/Cc3IW7AzTAFKoNeRILoSI/YX v6TLNQjr7oMsJ2INFTgW5JmcK5vfTSSvj9wNABYHMazjjbAq3tKTj/w4hgYudAdO wJpap4UAXj/0q65AdF+suEKz6yB7nJhhdT/Kj+0R9/DWGl7XuRelGzSr/6mw8qzB eNBIrlrDJNUzuieoPwfuWfW+Fwlb0udsgJIGqMyi3EMZM9nyBh15n3AxD2Ts1o9X C6cJSs122VRpKx7prxa55ondlClTIMkTkC6RMxDsop+2vOmyfKY5Lw3wx5Udd9Sz hRnBMbC6/8dACvNqtwANSoUDpk/x0nwjOvumWd1YB2buRAW/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDKlt1jaDBiBK72V6phTtQuQ86CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODc2NTllY2ItY2I3Zi0z MTQwLWE2MDAtZjQwMjczMDc3NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyV9w9/2ZoKrxQqZKk8KxRZWUjEY406EMMYJq7SQOftPvllda1ESqj0 BFJD9diFwglbcPuQwhlKhLoHLkY6uPt2T4hrWjmLT0dcxxZoij0j/FJtpQKzOdhE XAob0IVyKmVfJ7HjLcpyrJGgJ9XuoMBGQWkRLHMrj3OUEYIXTzB7DH+G4IstvBRM nnpkc1ruA8HdfRBYE1Wp0lQZxh8jZIXSGPBqEDthELxxtxV9Dm7jhUq8U4lh+QCu owDdSK/yVOo70ombMBQ+6WR7lYRZ+yyZqETTIDMTJ3R8FbApd56JQ75iP77Tj33k W3Aw8Cbrx0qjuLQiqZRdRXZyenLwAjM= -----END CERTIFICATE-----Generated at Wed Jul 29 15:29:05 2026 by rpki-client