$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa File: 2c91055f-20da-3c23-b862-dcdd076e260e.roa (raw, json) Hash identifier: 2vXvd6sI5zI8WpEBIr2AwDB1ypa9Sqv7Z3NjjRwyOwo= Subject key identifier: 8B:60:69:61:61:FD:C7:9F:30:32:FE:BB:72:46:A0:AE:4D:06:C2:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51FDC128C2583D2E2B3380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.89.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:fd:c1:28:c2:58:3d:2e:2b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=7cd2ef22-144a-42a0-8a20-fcefbe4f0161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cf:2c:8c:f8:be:76:cb:b7:5c:83:25:ec:3f: 9d:c1:6e:cb:bc:0e:bd:d2:d6:c4:fb:7f:ec:62:64: e3:81:35:07:03:a3:1a:28:7e:d2:94:f8:63:9a:98: e3:15:78:fa:21:c9:49:97:92:f1:4f:33:b3:ab:a5: 7d:66:40:18:df:29:ec:54:d2:83:11:f7:e9:de:30: 21:8e:58:99:04:f7:65:05:1b:96:35:31:1f:c1:ea: 9f:8c:57:49:fb:86:a5:0a:4b:5c:f3:38:15:f4:eb: 21:3d:1f:64:26:7b:16:4d:6f:c3:ca:0c:b6:c7:10: a5:6d:0b:05:3a:2a:c4:01:b9:71:08:e9:cc:cd:c6: 33:fb:9c:20:98:7b:3a:d1:06:d2:b5:ca:ab:44:c8: a7:be:19:c9:8f:6a:88:af:6b:4b:ff:3b:f3:ea:47: e8:27:38:1b:61:81:96:a0:f8:90:a8:92:e4:1c:11: df:fb:af:a6:76:70:03:ad:ce:ed:f3:2a:69:75:55: 2a:95:5b:f3:63:86:4c:70:f8:5d:5f:f7:a2:3f:8f: b6:06:f1:e4:b3:7f:65:f3:5c:2a:73:cd:3e:25:8f: 0b:ae:ed:80:58:1a:f9:58:e5:86:fd:e9:6c:5c:eb: f6:22:4d:9c:ab:29:25:3f:e0:ce:91:dc:76:5c:12: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:60:69:61:61:FD:C7:9F:30:32:FE:BB:72:46:A0:AE:4D:06:C2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:72:98:8b:25:0f:fe:98:b1:9e:91:6e:90:94:62:1b:ff:b5: 56:70:4b:e9:82:51:4d:5e:c6:b0:3d:92:1b:0b:57:d7:3c:83: d2:98:9b:02:f9:40:95:86:04:a7:12:a2:5f:14:6e:c3:96:7c: bf:77:0d:f9:d7:3b:0e:a7:42:f1:dd:c9:25:6d:04:b0:e5:b4: 93:c8:39:3b:25:1b:dc:81:0b:d5:6d:48:82:ec:51:99:79:f1: 5c:33:23:44:ec:c6:27:9b:b8:6d:4d:09:43:5b:0c:16:08:92: 01:01:3b:cd:ec:dd:e8:51:42:2f:d6:98:b5:e4:28:5e:07:c3: 8f:58:63:1a:70:fa:ed:c6:3a:a1:97:e6:49:01:06:25:38:f2: d0:d1:dc:fa:2c:ff:3c:b2:a4:c1:c0:5f:ca:91:77:80:1b:76: df:4c:f9:21:a4:04:b6:0c:57:56:c2:d9:fc:dc:e6:51:da:84: 62:99:5b:e9:aa:a0:f4:4e:80:0f:fa:57:0a:c2:eb:8a:4b:35: f1:e7:1f:12:ea:84:23:69:76:85:b6:7f:37:e0:f9:ed:3d:14: 00:d1:ff:32:79:18:24:53:7f:8b:2b:ae:04:f4:71:5e:89:d0: 5c:5a:70:26:0d:64:10:98:16:2c:7a:97:4f:76:68:d0:ff:5a: 1c:a3:b1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUf3BKMJYPS4rM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk N2NkMmVmMjItMTQ0YS00MmEwLThhMjAtZmNlZmJlNGYwMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM8sjPi+dsu3XIMl7D+dwW7LvA690tbE+3/s YmTjgTUHA6MaKH7SlPhjmpjjFXj6IclJl5LxTzOzq6V9ZkAY3ynsVNKDEffp3jAh jliZBPdlBRuWNTEfweqfjFdJ+4alCktc8zgV9OshPR9kJnsWTW/Dygy2xxClbQsF OirEAblxCOnMzcYz+5wgmHs60QbStcqrRMinvhnJj2qIr2tL/zvz6kfoJzgbYYGW oPiQqJLkHBHf+6+mdnADrc7t8yppdVUqlVvzY4ZMcPhdX/eiP4+2BvHks39l81wq c80+JY8Lru2AWBr5WOWG/elsXOv2Ik2cqyklP+DOkdx2XBLxowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItgaWFh/cefMDL+u3JGoK5NBsJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM5MTA1NWYtMjBkYS0z YzIzLWI4NjItZGNkZDA3NmUyNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtymIslD/6YsZ6RbpCUYhv/tVZwS+mCUU1exrA9khsLV9c8g9KYmwL5 QJWGBKcSol8UbsOWfL93DfnXOw6nQvHdySVtBLDltJPIOTslG9yBC9VtSILsUZl5 8VwzI0TsxiebuG1NCUNbDBYIkgEBO83s3ehRQi/WmLXkKF4Hw49YYxpw+u3GOqGX 5kkBBiU48tDR3Pos/zyypMHAX8qRd4Abdt9M+SGkBLYMV1bC2fzc5lHahGKZW+mq oPROgA/6VwrC64pLNfHnHxLqhCNpdoW2fzfg+e09FADR/zJ5GCRTf4srrgT0cV6J 0FxacCYNZBCYFix6l092aND/WhyjsSw= -----END CERTIFICATE-----Generated at Sat Aug 22 19:34:16 2026 by rpki-client