$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa File: d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa (raw, json) Hash identifier: MKWbeFC1SK3m2LpfJsSwd+3toVlc7eTgG+rtULgr7hc= Subject key identifier: 9D:FC:87:B6:8B:81:62:0E:F3:98:86:E4:8D:25:AC:3A:5A:C7:BA:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787B880058E339B40192780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.191.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:b8:80:05:8e:33:9b:40:19:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2fc670f3-ef76-480c-901b-2c9b4c285924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:e5:cf:0e:8c:e0:58:a8:bb:f2:cf:17:0f: 92:fc:51:a1:02:9d:10:6d:33:6e:81:26:7a:9a:a1: 11:6d:57:66:cb:84:54:19:db:f4:bc:a4:2f:5a:3c: 59:f2:47:8c:07:86:fb:86:3c:b6:04:ef:b6:a3:e7: e5:42:b6:1f:c7:73:42:f9:bd:d6:17:da:43:80:19: 3a:66:d2:04:64:60:86:02:dd:d0:81:43:88:81:da: 53:0f:ae:37:7e:44:45:86:36:db:12:fc:8d:b0:7e: 71:cd:7d:e2:eb:69:f9:5c:b3:f5:64:54:86:be:36: f6:86:7b:3f:b8:a7:a9:9f:43:43:b1:b1:3d:37:11: f9:dc:11:b8:17:c6:2a:41:4a:75:20:61:a7:ce:e9: a2:0f:b2:81:b1:f7:fa:41:15:3f:6a:13:74:23:36: a7:4f:75:ce:9f:22:46:45:ef:24:e2:c7:63:48:c2: 82:1d:08:52:39:5e:d7:3d:54:ad:67:e2:ae:fc:ff: df:d8:2a:9d:21:7c:75:f0:76:cb:93:68:15:8f:e2: f3:78:7a:62:33:da:48:11:d9:ff:a8:bd:7c:66:2b: c0:b0:90:13:07:85:30:0c:93:fb:e1:e3:c9:28:51: 78:d9:09:9c:e8:2e:df:cf:d7:9b:31:25:26:ec:29: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FC:87:B6:8B:81:62:0E:F3:98:86:E4:8D:25:AC:3A:5A:C7:BA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df7b25-93e1-36f0-abfa-8ac8bf28f7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ae:15:e6:86:3f:4b:21:2e:67:0c:bd:d4:82:26:e7:76:6e: 1c:a8:c5:12:8b:b3:28:4a:0c:31:80:79:a7:c1:0c:dd:7d:61: cf:d7:4d:f4:45:84:6f:01:a1:a9:3a:41:3b:d4:37:54:56:d4: c1:90:99:10:4f:b9:24:13:99:9d:49:ba:b2:5b:65:e0:a9:a2: 39:d5:a0:eb:87:a9:58:7d:fc:f0:d0:10:05:92:ca:b7:b6:08: 91:24:4f:dc:75:4a:47:19:2c:4d:8d:69:8a:1a:18:90:59:0b: 34:c2:0d:28:94:e6:7e:b9:9e:e3:53:f2:28:76:1d:c9:5d:28: 55:13:c2:40:27:b2:d4:ed:41:68:25:a7:48:41:76:cf:72:53: b1:9e:2d:1e:22:3b:be:36:2f:87:9e:e0:36:e8:a6:72:25:71: b0:10:26:27:55:50:d3:73:7a:8b:61:5e:ae:88:b5:de:f4:b4: 9f:bc:90:61:b5:87:6a:e0:e2:97:6a:bc:74:f2:86:10:3e:91: dc:a4:b0:87:03:6d:9c:4b:48:c4:68:17:1b:76:02:7b:7e:f3: 5e:96:32:c9:66:bc:d5:34:b1:91:a0:34:09:d8:61:29:16:68: 3a:30:56:c4:b3:65:10:b8:46:b8:f7:d2:ee:4e:0b:53:43:7a: df:66:86:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7iABY4zm0AZJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmZjNjcwZjMtZWY3Ni00ODBjLTkwMWItMmM5YjRjMjg1OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdvlzw6M4Fiou/LPFw+S/FGhAp0QbTNugSZ6 mqERbVdmy4RUGdv0vKQvWjxZ8keMB4b7hjy2BO+2o+flQrYfx3NC+b3WF9pDgBk6 ZtIEZGCGAt3QgUOIgdpTD643fkRFhjbbEvyNsH5xzX3i62n5XLP1ZFSGvjb2hns/ uKepn0NDsbE9NxH53BG4F8YqQUp1IGGnzumiD7KBsff6QRU/ahN0IzanT3XOnyJG Re8k4sdjSMKCHQhSOV7XPVStZ+Ku/P/f2CqdIXx18HbLk2gVj+LzeHpiM9pIEdn/ qL18ZivAsJATB4UwDJP74ePJKFF42Qmc6C7fz9ebMSUm7CkDNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ38h7aLgWIO85iG5I0lrDpax7qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDlkZjdiMjUtOTNlMS0z NmYwLWFiZmEtOGFjOGJmMjhmN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKuFeaGP0shLmcMvdSCJud2bhyoxRKLsyhKDDGAeafBDN19Yc/XTfRF hG8Boak6QTvUN1RW1MGQmRBPuSQTmZ1JurJbZeCpojnVoOuHqVh9/PDQEAWSyre2 CJEkT9x1SkcZLE2NaYoaGJBZCzTCDSiU5n65nuNT8ih2HcldKFUTwkAnstTtQWgl p0hBds9yU7GeLR4iO742L4ee4DbopnIlcbAQJidVUNNzeothXq6Itd70tJ+8kGG1 h2rg4pdqvHTyhhA+kdyksIcDbZxLSMRoFxt2Ant+816WMslmvNU0sZGgNAnYYSkW aDowVsSzZRC4Rrj30u5OC1NDet9mhiw= -----END CERTIFICATE-----Generated at Wed Jul 29 16:33:22 2026 by rpki-client