$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa File: 9baeeff1-275e-3c98-a3ea-85555542d7e8.roa (raw, json) Hash identifier: g0RPJRMlegboz4ySFkQNS4EurWvzO+Dwq5KTtH6QU1A= Subject key identifier: BB:E0:C8:11:02:EB:E3:E9:25:E9:BC:66:B1:13:D1:8F:58:4A:3E:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA79B05C7F5E7650DA33C7100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 104.197.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:05:c7:f5:e7:65:0d:a3:3c:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=17cfde06-c37d-4a05-a291-bb3a67c228a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:4d:da:e3:aa:6f:0b:8f:95:55:cf:a0:67: e5:cd:8c:f6:4f:f7:fc:bb:e0:5a:80:3f:46:9c:d9: b2:53:01:6c:e7:89:74:65:e8:30:9c:94:1e:13:f2: 4a:d5:e0:5e:0a:6e:e3:68:e9:4a:9e:8b:72:d2:a5: 7a:4b:6f:f9:a2:0f:c6:98:6d:1b:eb:7a:fe:68:3e: c9:1a:35:fd:1d:9e:8c:a6:13:14:11:93:91:b7:09: 1b:a0:e1:39:64:4b:68:3e:21:68:71:85:a7:c0:91: f5:16:a5:8c:19:46:5f:89:9f:93:cd:84:be:a9:2d: a5:cd:0f:78:a9:52:0d:0d:0b:2e:ce:fe:ff:62:98: 94:30:9d:5b:4a:95:fa:38:e5:ac:e9:a1:52:6e:41: 40:e7:45:81:4f:74:41:0b:4d:d5:24:82:be:a4:d2: 2a:ab:d0:cb:9c:d8:9b:f4:c3:e7:0f:c4:13:24:18: 49:bb:7f:00:91:45:ff:41:f6:c7:84:83:36:62:bb: 4d:19:91:03:76:fd:11:19:83:ea:a5:84:c6:7e:d6: 81:5c:9a:54:9f:02:11:80:07:c2:e0:48:bf:ce:18: 3b:6f:6f:55:51:50:ab:3c:61:8c:7c:86:36:d9:ab: 97:be:ef:a3:3b:ac:b1:b1:29:38:f4:5c:7c:33:1e: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:C8:11:02:EB:E3:E9:25:E9:BC:66:B1:13:D1:8F:58:4A:3E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:35:4b:4d:3d:9e:51:4a:6b:b1:3e:39:9c:22:84:5a:b1:30: 35:18:b2:df:09:5a:65:61:87:e9:90:17:72:ab:a6:e8:a6:94: 58:cb:46:09:af:39:25:af:5c:56:2c:a6:1d:33:a7:ac:4d:0d: c6:b9:1d:6f:1f:5f:00:ac:f8:e1:3d:99:65:94:ce:03:aa:a6: 2e:b5:6a:3b:72:5f:6a:9d:fd:45:1a:4e:b0:90:5b:23:e1:0c: 09:e1:71:fc:36:19:a2:18:ef:23:a9:c1:2f:b7:18:20:dd:6d: f0:40:d0:39:33:31:80:cb:11:f1:a3:56:ec:83:cc:67:92:e9: 56:4d:e9:8d:2f:46:76:ed:b2:18:07:b6:2c:10:e3:76:03:da: d3:ec:50:a3:03:9c:be:3b:f6:f9:a7:4c:10:5d:03:db:06:78: 04:9f:26:cb:89:9b:5e:8b:19:dd:27:94:c8:0c:0f:28:64:5b: 2a:2f:da:e8:6c:ff:6a:32:52:b0:9f:5b:0a:4f:c6:48:78:33: 56:d8:05:d7:10:8e:d8:8f:a7:57:20:f4:4e:6e:3e:da:b0:d1: f8:5d:bb:d1:c1:54:59:1e:61:aa:17:e1:a1:59:46:3d:3b:61: d3:77:1b:6f:c1:0e:78:f6:90:3c:32:80:82:2c:7c:3d:91:b2: e4:b5:9b:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmwXH9edlDaM8cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTdjZmRlMDYtYzM3ZC00YTA1LWEyOTEtYmIzYTY3YzIyOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1ZN2uOqbwuPlVXPoGflzYz2T/f8u+BagD9G nNmyUwFs54l0ZegwnJQeE/JK1eBeCm7jaOlKnoty0qV6S2/5og/GmG0b63r+aD7J GjX9HZ6MphMUEZORtwkboOE5ZEtoPiFocYWnwJH1FqWMGUZfiZ+TzYS+qS2lzQ94 qVINDQsuzv7/YpiUMJ1bSpX6OOWs6aFSbkFA50WBT3RBC03VJIK+pNIqq9DLnNib 9MPnD8QTJBhJu38AkUX/QfbHhIM2YrtNGZEDdv0RGYPqpYTGftaBXJpUnwIRgAfC 4Ei/zhg7b29VUVCrPGGMfIY22auXvu+jO6yxsSk49Fx8Mx7t2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvgyBEC6+PpJem8ZrET0Y9YSj6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJhZWVmZjEtMjc1ZS0z Yzk4LWEzZWEtODU1NTU1NDJkN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ41S009nlFKa7E+OZwihFqxMDUYst8JWmVhh+mQF3KrpuimlFjLRgmv OSWvXFYsph0zp6xNDca5HW8fXwCs+OE9mWWUzgOqpi61ajtyX2qd/UUaTrCQWyPh DAnhcfw2GaIY7yOpwS+3GCDdbfBA0DkzMYDLEfGjVuyDzGeS6VZN6Y0vRnbtshgH tiwQ43YD2tPsUKMDnL479vmnTBBdA9sGeASfJsuJm16LGd0nlMgMDyhkWyov2uhs /2oyUrCfWwpPxkh4M1bYBdcQjtiPp1cg9E5uPtqw0fhdu9HBVFkeYaoX4aFZRj07 YdN3G2/BDnj2kDwygIIsfD2RsuS1m7A= -----END CERTIFICATE-----Generated at Wed Jul 29 15:24:45 2026 by rpki-client