$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a09c2d6-2d15-35a4-a308-507443af452e.roa File: 9a09c2d6-2d15-35a4-a308-507443af452e.roa (raw, json) Hash identifier: G5w1elPe932rQTob0Xj8GeWq3KauQshuVJsxU6nMde4= Subject key identifier: 11:24:4C:22:78:C6:C4:52:62:02:53:80:A8:25:40:F5:9C:54:62:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA7885B32B9101EDDAA901580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a09c2d6-2d15-35a4-a308-507443af452e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.152.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:5b:32:b9:10:1e:dd:aa:90:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=43457321-2fdb-4b6e-a1d9-5348b7f96d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:4a:84:41:76:27:47:c5:4d:1e:04:6a:a5: 16:b5:c8:3b:13:d9:9c:be:28:b5:27:c2:65:fa:d9: 01:91:aa:6f:17:c3:31:17:18:9f:63:3b:64:29:52: 54:c8:7e:60:0e:56:89:f1:53:84:57:67:5f:11:65: 6b:8e:5c:5b:b4:10:5e:56:18:fc:c2:ea:06:8c:ce: 8f:0b:c8:db:a4:5b:05:9d:a5:79:4b:58:dc:e4:30: db:14:c0:31:84:bc:e7:eb:4a:9a:51:cf:5f:6a:dd: 80:29:3e:68:a7:0b:11:84:94:50:f0:65:21:6f:f7: 0a:d8:08:d1:f2:af:f9:d2:85:1f:71:12:7f:b4:bb: 24:6e:50:61:9b:5c:8f:f8:35:63:a3:6c:f1:b2:f2: c5:ff:fc:2a:d1:db:76:43:71:05:8d:c3:ed:50:00: 16:6d:e8:fd:83:77:1a:14:d8:e9:7f:7f:e9:6e:44: fe:22:a9:77:56:12:81:9a:1a:6e:a8:18:e7:81:d7: df:d5:93:c0:23:1b:2c:87:41:19:3b:92:22:4d:b2: 86:fc:09:42:51:66:9b:10:75:f2:0f:a8:97:13:3a: d0:3c:11:b0:b6:6d:88:ac:fe:d9:04:ec:35:39:08: 43:af:04:b4:12:f2:62:23:38:3a:e8:a4:0a:9f:aa: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:24:4C:22:78:C6:C4:52:62:02:53:80:A8:25:40:F5:9C:54:62:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a09c2d6-2d15-35a4-a308-507443af452e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7c:68:73:8c:6f:1a:a1:2c:3d:a4:68:f2:6f:b1:2c:01:0a: 46:cd:68:92:24:cd:b5:f5:87:77:d5:49:e9:5b:01:b7:38:ba: 98:5a:57:1e:75:5e:63:31:5e:7f:65:03:3f:07:a9:fe:90:b0: d1:d2:dc:80:28:c9:56:9e:ca:e2:38:08:34:b0:19:18:58:c0: 8e:a0:44:5b:3c:23:44:5f:4c:18:5d:31:49:87:e3:12:df:db: 75:b2:17:e6:16:ec:bb:5b:fe:ef:e1:71:d2:56:45:23:bb:dc: e6:1d:d8:f1:1f:85:0d:55:33:ae:54:14:69:bf:97:f1:1c:f0: 2a:f1:16:23:ba:3b:e6:1d:0d:92:13:82:56:3c:9c:b0:0e:20: 7d:ca:b1:af:fd:84:91:f9:39:c6:fa:56:3d:fc:97:d4:e5:a8: 9b:b8:05:8c:54:f3:fc:b3:7a:2a:03:ee:c2:c4:f9:9c:22:a3: 05:bb:bb:51:e6:ad:77:53:21:38:50:19:71:63:07:7b:ee:15: bb:e3:6d:45:86:8e:45:12:b6:36:15:0e:99:ab:bf:26:f1:cc: 2d:84:33:e0:55:7d:d5:b8:c7:39:cf:fa:21:1c:22:7c:d9:0d: 0b:0e:2a:23:25:51:50:36:37:ad:97:f6:f8:08:76:a4:cc:a2: 31:39:59:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFsyuRAe3aqQFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDM0NTczMjEtMmZkYi00YjZlLWExZDktNTM0OGI3Zjk2ZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGlKhEF2J0fFTR4EaqUWtcg7E9mcvii1J8Jl +tkBkapvF8MxFxifYztkKVJUyH5gDlaJ8VOEV2dfEWVrjlxbtBBeVhj8wuoGjM6P C8jbpFsFnaV5S1jc5DDbFMAxhLzn60qaUc9fat2AKT5opwsRhJRQ8GUhb/cK2AjR 8q/50oUfcRJ/tLskblBhm1yP+DVjo2zxsvLF//wq0dt2Q3EFjcPtUAAWbej9g3ca FNjpf3/pbkT+Iql3VhKBmhpuqBjngdff1ZPAIxssh0EZO5IiTbKG/AlCUWabEHXy D6iXEzrQPBGwtm2IrP7ZBOw1OQhDrwS0EvJiIzg66KQKn6p0VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEkTCJ4xsRSYgJTgKglQPWcVGKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEwOWMyZDYtMmQxNS0z NWE0LWEzMDgtNTA3NDQzYWY0NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIphwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ8aHOMbxqhLD2kaPJvsSwBCkbNaJIkzbX1h3fVSelbAbc4uphaVx51 XmMxXn9lAz8Hqf6QsNHS3IAoyVaeyuI4CDSwGRhYwI6gRFs8I0RfTBhdMUmH4xLf 23WyF+YW7Ltb/u/hcdJWRSO73OYd2PEfhQ1VM65UFGm/l/Ec8CrxFiO6O+YdDZIT glY8nLAOIH3Ksa/9hJH5Ocb6Vj38l9TlqJu4BYxU8/yzeioD7sLE+ZwiowW7u1Hm rXdTIThQGXFjB3vuFbvjbUWGjkUStjYVDpmrvybxzC2EM+BVfdW4xznP+iEcInzZ DQsOKiMlUVA2N62X9vgIdqTMojE5Wco= -----END CERTIFICATE-----Generated at Wed Jul 29 16:35:58 2026 by rpki-client