$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1c700c9-4653-3ee4-bbf6-ced002b2ce2c.roa File: e1c700c9-4653-3ee4-bbf6-ced002b2ce2c.roa (raw, json) Hash identifier: uqqOiyDYeFicNVE5qM3MZKBlsTchKyqElfKOAXmzlPE= Subject key identifier: 66:09:8F:40:22:9F:F4:AE:2D:C6:12:7B:D8:29:32:B5:80:71:D1:51 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787B20277E5D0A56275D080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1c700c9-4653-3ee4-bbf6-ced002b2ce2c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 43515 IP address blocks: 34.191.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:b2:02:77:e5:d0:a5:62:75:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cac5a1aa-2951-4f90-9d3d-3e9121f84623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:7c:d2:b1:7f:c5:01:78:2f:91:0e:0c:b5: f1:af:6b:86:78:c6:02:d3:09:46:07:b8:8d:9b:f1: f6:1e:ca:7e:83:4d:0a:af:99:a2:74:96:58:7d:67: 6c:2c:fc:5e:94:82:5c:68:6c:0b:07:f4:3e:c2:95: 31:21:e9:54:30:73:c7:a5:d3:97:b4:c4:e4:4e:17: 21:46:fa:c9:e0:5d:d3:38:4a:a7:6b:b5:92:49:3a: 09:52:a5:bb:b0:2c:d8:fd:4a:ab:81:ea:81:86:03: 23:d5:41:82:e5:73:d2:3f:52:17:74:62:4b:d8:27: a7:9f:e4:c5:8c:c0:f0:2f:f5:97:e7:a0:60:0a:46: 9b:ae:34:13:01:44:e2:a5:15:47:98:e2:35:13:de: 10:9a:05:de:c9:13:90:20:c4:96:71:03:3b:80:24: e8:b8:6b:5a:64:ff:54:7e:f9:71:81:df:ec:30:ac: d0:13:8a:64:03:69:1e:c5:6b:ac:27:8a:b5:96:fd: bd:9b:8f:d5:a7:8e:06:3a:f8:ab:77:e3:fd:a7:37: 6f:22:b9:34:ee:60:69:9f:da:46:05:8c:f5:22:42: 06:bd:08:84:d7:da:d8:e9:34:4b:1c:74:e3:f3:03: f3:e0:d1:48:28:76:88:49:a4:02:02:51:3a:b0:90: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:09:8F:40:22:9F:F4:AE:2D:C6:12:7B:D8:29:32:B5:80:71:D1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1c700c9-4653-3ee4-bbf6-ced002b2ce2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:70:91:20:8f:58:88:a3:ad:50:73:e5:ca:ee:b8:a2:b7:30: 09:61:ab:22:a0:4c:04:eb:b4:fb:69:8f:3e:9b:9c:09:49:ff: 5a:ad:85:05:66:31:a4:6a:49:9a:7a:33:ab:a1:8f:96:92:a6: 1a:27:db:ff:2b:85:70:c2:1a:ea:57:b8:23:91:5b:20:30:d8: 3b:df:b1:ee:bc:3d:34:9f:ec:f9:2c:f6:b7:39:3f:b4:7f:d6: f7:68:8d:f2:16:83:e6:70:49:cf:39:d3:26:ba:b3:d4:06:f2: d3:95:f2:c8:f6:7e:ac:7b:7f:4d:3c:69:29:a7:1c:c7:51:7a: 0b:60:35:44:8d:c0:ee:dc:4b:8c:0a:34:41:4c:d2:01:4f:67: 51:6c:b7:48:9d:77:04:23:bd:f7:2f:25:7d:45:f5:3d:23:7a: 20:1a:65:ec:0b:70:94:df:93:6b:b2:27:58:c8:d6:45:0f:1d: b8:ad:60:84:99:78:ef:37:17:64:e9:c8:07:c5:7d:e9:de:79: 50:04:d8:9a:1a:08:a1:b0:8c:45:19:cc:30:71:5e:ba:5b:44: 73:dd:eb:bc:6d:8b:2f:bd:0b:fe:04:53:20:0f:0f:80:0d:ab: c8:cf:59:32:7c:aa:d3:ef:8f:d1:c9:74:ba:40:15:23:25:c0: 10:4f:ae:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7ICd+XQpWJ10IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2FjNWExYWEtMjk1MS00ZjkwLTlkM2QtM2U5MTIxZjg0NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnV80rF/xQF4L5EODLXxr2uGeMYC0wlGB7iN m/H2Hsp+g00Kr5midJZYfWdsLPxelIJcaGwLB/Q+wpUxIelUMHPHpdOXtMTkThch RvrJ4F3TOEqna7WSSToJUqW7sCzY/UqrgeqBhgMj1UGC5XPSP1IXdGJL2Cenn+TF jMDwL/WX56BgCkabrjQTAUTipRVHmOI1E94QmgXeyROQIMSWcQM7gCTouGtaZP9U fvlxgd/sMKzQE4pkA2kexWusJ4q1lv29m4/Vp44GOvird+P9pzdvIrk07mBpn9pG BYz1IkIGvQiE19rY6TRLHHTj8wPz4NFIKHaISaQCAlE6sJBnHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYJj0Ain/SuLcYSe9gpMrWAcdFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTFjNzAwYzktNDY1My0z ZWU0LWJiZjYtY2VkMDAyYjJjZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtwkSCPWIijrVBz5cruuKK3MAlhqyKgTATrtPtpjz6bnAlJ/1qthQVm MaRqSZp6M6uhj5aSphon2/8rhXDCGupXuCORWyAw2Dvfse68PTSf7Pks9rc5P7R/ 1vdojfIWg+ZwSc850ya6s9QG8tOV8sj2fqx7f008aSmnHMdRegtgNUSNwO7cS4wK NEFM0gFPZ1Fst0iddwQjvfcvJX1F9T0jeiAaZewLcJTfk2uyJ1jI1kUPHbitYISZ eO83F2TpyAfFfeneeVAE2JoaCKGwjEUZzDBxXrpbRHPd67xtiy+9C/4EUyAPD4AN q8jPWTJ8qtPvj9HJdLpAFSMlwBBPriA= -----END CERTIFICATE-----Generated at Wed Jul 29 11:45:33 2026 by rpki-client