$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa File: dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa (raw, json) Hash identifier: KNOLcnW+sCnkLM1KRZnfG/5Qr9sbHl26HKbBHBuqTgA= Subject key identifier: E1:53:56:FA:AD:34:68:21:9B:F7:3B:B2:4C:63:3D:BE:10:47:9E:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA79E9E01980994274970B180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.121.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:9e:01:98:09:94:27:49:70:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ff572866-2cc1-4295-861a-277ea1b8f0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:33:cc:90:64:6e:46:cd:10:c6:2b:b0:f4:52: c2:e7:d7:85:90:33:34:25:96:2a:2c:8e:9a:92:28: fe:6b:31:93:44:0f:f6:1e:fb:1d:66:a8:f1:9d:76: 5d:e1:ff:31:ee:19:e2:d1:fc:dc:6f:a3:0a:95:36: e3:27:7b:7c:4f:22:62:00:43:ff:ce:d5:95:1b:00: c4:cd:aa:4a:28:cc:d1:68:48:67:d2:df:61:28:cd: 59:ba:46:85:5c:20:a2:67:e9:a7:bf:9c:45:45:59: cc:46:81:11:1d:ea:a6:c0:dd:bf:80:c5:82:f3:b5: 5d:9a:55:4b:6b:39:3e:b3:a8:8f:5b:ef:e4:94:d3: e2:cd:b0:bb:86:ce:98:34:63:83:4a:f5:ba:9a:86: ed:a2:58:ad:19:47:8c:22:fb:be:bb:a0:49:33:72: 62:5d:b9:5b:c0:2a:a7:03:8c:10:9a:a1:07:3c:b4: 5b:50:c8:cc:6b:d7:20:6c:3c:7b:92:d3:77:54:54: 05:59:39:fd:72:8d:61:05:de:63:50:23:4e:a9:a5: df:c0:88:6b:ae:81:83:ce:8c:25:c8:b2:d9:14:84: 61:c0:b1:38:26:d7:32:cc:e4:41:1a:c7:ca:69:aa: 26:28:d3:c6:25:62:2b:0e:a5:8b:52:1e:db:26:ca: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:53:56:FA:AD:34:68:21:9B:F7:3B:B2:4C:63:3D:BE:10:47:9E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd9149ee-46bc-3b26-9f3f-6893f40ab509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a5:2e:46:b2:d6:d4:8e:f8:4c:ac:ab:ce:d6:59:53:31:7b: 74:59:45:f9:17:e9:55:30:5b:03:0a:8d:18:92:26:5f:ad:34: 1f:5b:81:67:9b:ca:5a:10:c4:41:d2:1f:ea:f0:a1:48:fc:70: 89:31:5b:a3:c9:d3:7e:44:76:aa:11:63:00:60:f0:1b:a1:4a: b8:f1:de:8a:c5:52:8c:6e:40:24:e2:c7:4b:a3:5d:49:4d:6a: 1a:6b:ea:39:a8:5d:a0:74:7f:64:e4:ab:79:d2:cc:66:f1:89: 2a:be:a7:18:75:66:eb:bc:93:df:62:0e:b7:f3:10:1d:cf:ea: d7:29:42:4d:09:20:47:bb:95:88:da:de:14:53:7e:a6:d9:b6: b0:02:c4:86:4f:2c:58:6a:34:e3:2f:c4:fe:43:f4:3d:19:5a: f2:d5:d5:52:83:84:cb:5a:88:43:49:29:8b:e1:74:3d:d0:68: 5c:c4:d3:26:0a:4c:2c:2d:6d:24:83:12:d1:43:47:23:a5:2e: 1e:9f:6c:eb:d2:de:bd:93:e9:10:f8:a5:c7:a1:37:02:ac:74: b0:52:aa:8e:e2:fe:eb:fc:45:52:c9:03:d1:e3:5a:84:25:26: 26:eb:67:0c:d6:10:0f:57:7f:27:9f:a0:50:e4:c9:93:e7:36: 63:38:71:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnp4BmAmUJ0lwsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmY1NzI4NjYtMmNjMS00Mjk1LTg2MWEtMjc3ZWExYjhmMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizPMkGRuRs0Qxiuw9FLC59eFkDM0JZYqLI6a kij+azGTRA/2HvsdZqjxnXZd4f8x7hni0fzcb6MKlTbjJ3t8TyJiAEP/ztWVGwDE zapKKMzRaEhn0t9hKM1ZukaFXCCiZ+mnv5xFRVnMRoERHeqmwN2/gMWC87VdmlVL azk+s6iPW+/klNPizbC7hs6YNGODSvW6mobtolitGUeMIvu+u6BJM3JiXblbwCqn A4wQmqEHPLRbUMjMa9cgbDx7ktN3VFQFWTn9co1hBd5jUCNOqaXfwIhrroGDzowl yLLZFIRhwLE4JtcyzORBGsfKaaomKNPGJWIrDqWLUh7bJsqZlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFTVvqtNGghm/c7skxjPb4QR55nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ5MTQ5ZWUtNDZiYy0z YjI2LTlmM2YtNjg5M2Y0MGFiNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHylLkay1tSO+Eysq87WWVMxe3RZRfkX6VUwWwMKjRiSJl+tNB9bgWeb yloQxEHSH+rwoUj8cIkxW6PJ035EdqoRYwBg8BuhSrjx3orFUoxuQCTix0ujXUlN ahpr6jmoXaB0f2Tkq3nSzGbxiSq+pxh1Zuu8k99iDrfzEB3P6tcpQk0JIEe7lYja 3hRTfqbZtrACxIZPLFhqNOMvxP5D9D0ZWvLV1VKDhMtaiENJKYvhdD3QaFzE0yYK TCwtbSSDEtFDRyOlLh6fbOvS3r2T6RD4pcehNwKsdLBSqo7i/uv8RVLJA9HjWoQl JibrZwzWEA9XfyefoFDkyZPnNmM4cYQ= -----END CERTIFICATE-----Generated at Wed Jul 29 15:26:08 2026 by rpki-client