$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f064239c-48df-38c1-9117-0aea54f254c7.roa File: f064239c-48df-38c1-9117-0aea54f254c7.roa (raw, json) Hash identifier: 1MGx4t+lWxkKhI9HZvwBclMomAcQAmSPiOJ0GCRp1eA= Subject key identifier: 58:00:3A:4B:01:3D:BD:BE:59:CA:EB:4B:E0:47:7F:0F:E0:CC:BC:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA78FC3FD19387E872ABDF880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f064239c-48df-38c1-9117-0aea54f254c7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36040 IP address blocks: 34.158.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:c3:fd:19:38:7e:87:2a:bd:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=71fc838a-71d9-407d-a851-f94caaac21ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:77:dd:42:d7:b5:97:af:00:1c:04:30:a9: 07:53:e7:97:bd:45:ef:1a:5b:69:7f:27:58:b9:0a: 5f:64:e0:77:b2:76:84:ba:4c:3e:20:de:dc:31:7d: cc:ec:b4:52:df:3e:d7:77:d4:0d:ee:bd:98:2a:2c: 0d:ad:70:7a:7d:cc:6c:35:b2:08:c7:a5:49:59:87: 14:5d:12:21:92:06:69:50:ac:ad:01:a7:7b:84:dc: 51:4f:a1:42:01:63:8a:c2:66:ad:49:6f:ae:1a:73: b2:bf:26:cc:ab:16:0a:fd:fc:d0:f2:cb:f4:1f:9a: 01:f6:a3:ed:18:d5:6c:99:cf:21:ab:fd:eb:86:9d: d8:bd:db:c9:0a:c7:03:5b:e5:1f:65:36:9f:b3:05: c4:c7:56:a2:95:33:4f:cf:97:dd:22:6b:1a:71:4e: 64:6a:10:77:c6:cd:a2:ad:75:be:68:c3:ee:35:7c: f9:bf:cf:a7:aa:57:d7:19:81:9b:60:7e:31:1a:43: 99:01:66:7d:79:05:b8:1d:41:08:06:90:0d:5f:65: de:cd:e1:41:59:4f:6d:85:64:0a:3a:dd:d5:50:c0: cf:89:ff:38:b3:6c:87:40:18:c5:92:2d:17:e4:bd: 42:1f:c9:a8:64:68:9a:ed:64:fb:8b:75:ae:fb:ce: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:00:3A:4B:01:3D:BD:BE:59:CA:EB:4B:E0:47:7F:0F:E0:CC:BC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f064239c-48df-38c1-9117-0aea54f254c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6f:65:4a:81:de:6a:d7:c9:6f:bc:d6:86:d4:86:4b:08:26: 20:4a:80:7e:3f:b8:cc:d7:da:26:0f:d9:58:ab:15:4e:40:c2: 87:e8:7b:16:0e:c6:8a:f2:ff:24:f2:99:0a:63:d3:6e:e8:3e: eb:ca:8a:e3:92:d0:a1:9c:99:79:13:ba:88:6a:ea:ce:f3:9c: 1b:26:cd:79:a0:f6:eb:7a:30:d8:3b:cd:68:55:23:ec:c2:b5: 91:ee:48:39:b9:e2:aa:5d:c0:7f:28:f1:9f:ae:bc:3f:3d:54: 4f:e1:31:a3:b6:67:fa:85:58:83:3f:51:ed:a7:3d:ee:79:b4: a8:cf:b3:3c:3b:2c:1f:d7:5a:92:dc:f4:7e:cb:c2:02:dd:7d: 5f:2b:61:63:f2:f9:ed:29:7b:41:57:65:f2:81:e3:8b:bb:f5: 2e:34:0e:d4:b5:78:0c:7b:55:91:d4:c2:74:a0:53:6d:49:8f: 73:43:94:c6:cb:ee:fe:9e:6a:72:7e:2a:a3:83:a4:39:7e:0f: 2b:f9:0a:44:85:b8:28:1d:c4:ce:aa:c4:e5:57:99:9d:a2:aa: 3a:d2:0b:7f:fa:c4:89:e5:d4:df:cd:0a:0e:ac:53:54:8a:32: 66:fd:b4:0e:92:8a:d7:6c:e8:1c:b3:7b:c2:a4:fa:ce:eb:e3: 92:f3:d8:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj8P9GTh+hyq9+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzFmYzgzOGEtNzFkOS00MDdkLWE4NTEtZjk0Y2FhYWMyMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMB33ULXtZevABwEMKkHU+eXvUXvGltpfydY uQpfZOB3snaEukw+IN7cMX3M7LRS3z7Xd9QN7r2YKiwNrXB6fcxsNbIIx6VJWYcU XRIhkgZpUKytAad7hNxRT6FCAWOKwmatSW+uGnOyvybMqxYK/fzQ8sv0H5oB9qPt GNVsmc8hq/3rhp3YvdvJCscDW+UfZTafswXEx1ailTNPz5fdImsacU5kahB3xs2i rXW+aMPuNXz5v8+nqlfXGYGbYH4xGkOZAWZ9eQW4HUEIBpANX2XezeFBWU9thWQK Ot3VUMDPif84s2yHQBjFki0X5L1CH8moZGia7WT7i3Wu+84OXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgAOksBPb2+WcrrS+BHfw/gzLxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA2NDIzOWMtNDhkZi0z OGMxLTkxMTctMGFlYTU0ZjI1NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIp74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpvZUqB3mrXyW+81obUhksIJiBKgH4/uMzX2iYP2VirFU5AwofoexYO xory/yTymQpj027oPuvKiuOS0KGcmXkTuohq6s7znBsmzXmg9ut6MNg7zWhVI+zC tZHuSDm54qpdwH8o8Z+uvD89VE/hMaO2Z/qFWIM/Ue2nPe55tKjPszw7LB/XWpLc 9H7LwgLdfV8rYWPy+e0pe0FXZfKB44u79S40DtS1eAx7VZHUwnSgU21Jj3NDlMbL 7v6eanJ+KqODpDl+Dyv5CkSFuCgdxM6qxOVXmZ2iqjrSC3/6xInl1N/NCg6sU1SK Mmb9tA6Sitds6Byze8Kk+s7r45Lz2Og= -----END CERTIFICATE-----Generated at Wed Jul 29 15:27:54 2026 by rpki-client