$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89d3ecbc-70e7-3ec4-a054-d093304fdd81.roa File: 89d3ecbc-70e7-3ec4-a054-d093304fdd81.roa (raw, json) Hash identifier: Licgpt2smSi3qW+VG/Ee6nRLs7S4PfDu5ZCdnZX8Uwo= Subject key identifier: 11:7A:F6:38:D5:DA:7D:6B:FF:CC:5B:82:F3:21:10:EC:7B:FB:40:72 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E61EC48C8E44798C603A07140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89d3ecbc-70e7-3ec4-a054-d093304fdd81.roa Signing time: Sat 04 Jul 2026 02:38:00 +0000 ROA not before: Sat 04 Jul 2026 02:38:00 +0000 ROA not after: Fri 02 Oct 2026 02:38:00 +0000 asID: 396982 IP address blocks: 8.234.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:ec:48:c8:e4:47:98:c6:03:a0:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 4 02:38:00 2026 GMT Not After : Oct 2 02:38:00 2026 GMT Subject: CN=982a57a1-979e-42ee-807a-0660f5615bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:25:c0:e0:7f:69:03:27:24:3c:07:0f:67: 07:82:82:6e:5d:27:60:1f:48:71:1a:88:36:59:19: ec:b9:a3:dc:86:2d:65:5c:2c:a9:60:06:d6:0d:18: 9b:bc:e9:a7:aa:57:4b:9f:f5:d4:54:13:6e:ac:cf: 3f:d2:10:6e:99:f3:60:05:70:45:7c:93:ba:b5:7a: c3:83:9d:92:65:3c:63:3f:c2:d7:62:4b:e1:af:05: 0b:97:24:c8:f1:e3:a9:6a:10:74:28:c9:3b:71:8a: 88:fb:62:32:79:99:a4:88:cc:51:ed:58:cf:ae:cc: 45:80:83:76:7d:69:28:1b:84:43:67:ae:a2:20:eb: 21:2e:b0:cf:72:48:58:9b:7c:f3:1e:8b:69:99:1f: b8:43:60:dd:df:79:c4:2b:6a:50:84:9c:f3:66:bb: 01:67:32:ec:c9:d3:45:d0:48:0a:61:81:b1:39:f7: 20:92:7c:9d:59:f5:fc:42:f4:87:8d:2f:48:86:de: 51:1d:ae:59:a2:cc:7f:bb:19:b0:a5:0e:40:5d:ca: 6d:9d:da:d3:e8:ce:51:44:75:56:46:f1:94:04:78: 01:4f:ab:80:4a:97:83:cb:7d:5d:0d:05:cf:13:3d: 3a:0a:e1:3f:71:f7:f8:04:1c:e4:5c:5e:54:ed:88: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7A:F6:38:D5:DA:7D:6B:FF:CC:5B:82:F3:21:10:EC:7B:FB:40:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89d3ecbc-70e7-3ec4-a054-d093304fdd81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 8.234.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:69:97:de:4e:5f:9f:2e:11:24:7b:bf:bd:de:2d:29:b2:01: bf:14:65:e5:0b:26:30:da:da:38:a4:9b:ae:37:38:7f:95:c9: ca:e1:31:c2:02:c1:05:96:78:11:4c:68:27:cf:15:66:9c:54: 60:36:3a:57:c7:f6:f5:a5:47:e2:75:05:75:5f:f0:18:07:d3: 70:50:88:42:05:d8:38:28:8f:11:cf:1d:de:53:cf:69:be:5d: 11:a7:5e:83:5a:a6:15:8d:b7:5a:d2:ca:ca:5b:68:36:26:85: 4b:1c:c0:70:b8:70:08:cf:d4:69:e8:0a:e7:a9:e6:7e:70:53: 19:07:43:80:78:01:97:9b:dd:07:77:0a:96:3a:72:d7:b4:ea: ac:64:e0:c5:63:c4:0d:28:71:d7:34:24:cb:44:fe:9a:aa:8e: 54:d3:4e:c3:74:57:b6:17:04:66:f9:74:24:99:76:c8:fb:6d: 7f:26:9a:38:96:40:5e:60:90:c7:a5:07:e5:f0:30:01:12:51: 8a:03:5e:49:5f:03:70:63:60:b6:27:51:1d:08:44:f0:aa:ba: 6b:32:7e:2c:0f:7a:3d:a9:b7:b0:a5:7a:b5:25:15:4c:db:3f: 80:14:1d:a7:cd:32:7c:a8:71:3a:3e:ff:ff:89:1a:f9:1c:cb: cd:78:d1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5h7EjI5EeYxgOgcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcwNDAyMzgwMFoXDTI2MTAwMjAyMzgwMFowLzEtMCsGA1UEAxMk OTgyYTU3YTEtOTc5ZS00MmVlLTgwN2EtMDY2MGY1NjE1YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn0lwOB/aQMnJDwHD2cHgoJuXSdgH0hxGog2 WRnsuaPchi1lXCypYAbWDRibvOmnqldLn/XUVBNurM8/0hBumfNgBXBFfJO6tXrD g52SZTxjP8LXYkvhrwULlyTI8eOpahB0KMk7cYqI+2IyeZmkiMxR7VjPrsxFgIN2 fWkoG4RDZ66iIOshLrDPckhYm3zzHotpmR+4Q2Dd33nEK2pQhJzzZrsBZzLsydNF 0EgKYYGxOfcgknydWfX8QvSHjS9Iht5RHa5Zosx/uxmwpQ5AXcptndrT6M5RRHVW RvGUBHgBT6uASpeDy31dDQXPEz06CuE/cff4BBzkXF5U7YgnQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF69jjV2n1r/8xbgvMhEOx7+0ByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODlkM2VjYmMtNzBlNy0z ZWM0LWEwNTQtZDA5MzMwNGZkZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCOoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtpl95OX58uESR7v73eLSmyAb8UZeULJjDa2jikm643OH+VycrhMcIC wQWWeBFMaCfPFWacVGA2OlfH9vWlR+J1BXVf8BgH03BQiEIF2DgojxHPHd5Tz2m+ XRGnXoNaphWNt1rSyspbaDYmhUscwHC4cAjP1GnoCuep5n5wUxkHQ4B4AZeb3Qd3 CpY6cte06qxk4MVjxA0ocdc0JMtE/pqqjlTTTsN0V7YXBGb5dCSZdsj7bX8mmjiW QF5gkMelB+XwMAESUYoDXklfA3BjYLYnUR0IRPCqumsyfiwPej2pt7ClerUlFUzb P4AUHafNMnyocTo+//+JGvkcy8140SA= -----END CERTIFICATE-----Generated at Wed Jul 8 17:33:34 2026 by rpki-client