$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9860a67e-5371-308c-8b50-2d39009ceea6.roa File: 9860a67e-5371-308c-8b50-2d39009ceea6.roa (raw, json) Hash identifier: 9ZcORB+LZcZ3HNmln4HdeVH3u4l+a0DnJqx2MItGvFA= Subject key identifier: FA:CD:7F:6C:A8:46:A6:13:B4:22:6B:21:C7:A4:7C:88:0B:97:C9:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E5084A4FB04F32642BBBD7D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9860a67e-5371-308c-8b50-2d39009ceea6.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 396982 IP address blocks: 34.128.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a4:fb:04:f3:26:42:bb:bd:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=bd2cfb2b-144b-44b7-9e24-7840075ff1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:d3:f8:91:1f:06:c8:23:dd:d2:b3:2d:a6: 92:a9:f3:96:cf:60:8e:e1:12:1a:a0:1d:55:e2:8a: fa:12:4b:9c:3a:b3:5f:57:f1:d5:b7:1d:65:0c:fe: 4c:2f:5f:4b:8a:72:6b:89:4f:c1:72:f7:2c:bd:69: 2f:a1:96:5f:e4:aa:db:66:2c:0f:87:ff:8f:08:a6: 76:3e:2e:ca:a2:e9:75:95:45:4b:70:8e:ce:b7:6a: 66:c6:5d:46:86:ed:6a:d7:6b:0b:e5:e2:6b:c1:af: f9:6c:47:0c:b8:80:a4:80:74:5e:25:a7:84:9d:1c: a6:7f:d1:81:71:bd:23:d4:a9:e8:80:fe:88:92:86: dd:12:56:66:8f:ba:3b:54:57:5c:b1:f3:f9:96:43: f4:23:50:84:8e:84:f3:93:e9:17:c3:73:6b:4a:f2: 45:c9:ec:a1:33:be:a1:4f:39:61:8e:ca:82:56:a2: 8d:1b:9b:16:ce:b5:33:78:12:14:07:24:9f:e7:29: e9:fa:f7:1b:ef:e2:9d:86:21:d7:aa:1a:3b:7c:d9: 55:0d:9f:2a:73:62:1e:8a:47:b6:c3:6d:98:ee:09: b4:e0:37:a1:e1:f0:33:1d:5e:7f:69:ec:2f:14:2f: 24:06:52:88:d2:ef:bd:d2:71:9b:a5:1f:e0:4e:90: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:7F:6C:A8:46:A6:13:B4:22:6B:21:C7:A4:7C:88:0B:97:C9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9860a67e-5371-308c-8b50-2d39009ceea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4d:af:71:61:a3:cb:c8:4b:be:b2:28:3f:95:cc:41:74:aa: fd:93:07:1f:42:2e:d0:4a:b7:0d:16:f1:6c:b7:4e:0a:6a:c7: c0:41:dd:02:a7:43:ac:5d:a6:e5:f1:a0:c8:77:5e:ab:43:08: 1a:bc:bf:7f:49:b1:88:d0:a5:d7:d2:9a:c3:90:bb:82:ca:07: 6c:01:16:30:3b:e3:c9:33:0f:14:ca:e8:f8:47:d1:97:a6:0d: 2f:48:74:11:78:ca:0b:da:43:8f:d7:14:f4:6e:47:67:10:8a: 33:67:35:5c:71:b3:2f:b6:16:8f:e1:96:9f:68:63:58:9e:58: 62:44:47:3f:fc:28:5d:f8:0f:c1:d9:e8:ca:69:51:bd:d7:64: 6a:b6:7e:77:be:20:b8:b4:d9:2a:26:60:21:26:9f:43:47:f5: d1:14:64:0a:1b:d9:35:d9:93:ca:8e:78:91:4d:d4:5b:59:34: 62:72:09:8e:f6:b6:6a:a2:4f:96:c3:bb:76:5e:f4:ab:b1:f6: 8f:01:35:92:20:31:43:1b:14:9a:f0:86:29:9e:67:16:b6:9b: b8:4a:bb:26:48:6d:b3:34:2c:98:be:47:26:ee:8a:b3:59:39: ab:6d:34:40:ec:5a:1f:90:bf:29:3e:d0:ae:6a:d9:d0:cb:df: 99:0d:28:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKT7BPMmQru9fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk YmQyY2ZiMmItMTQ0Yi00NGI3LTllMjQtNzg0MDA3NWZmMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohHT+JEfBsgj3dKzLaaSqfOWz2CO4RIaoB1V 4or6EkucOrNfV/HVtx1lDP5ML19LinJriU/BcvcsvWkvoZZf5KrbZiwPh/+PCKZ2 Pi7Koul1lUVLcI7Ot2pmxl1Ghu1q12sL5eJrwa/5bEcMuICkgHReJaeEnRymf9GB cb0j1KnogP6IkobdElZmj7o7VFdcsfP5lkP0I1CEjoTzk+kXw3NrSvJFyeyhM76h TzlhjsqCVqKNG5sWzrUzeBIUBySf5ynp+vcb7+KdhiHXqho7fNlVDZ8qc2Ieike2 w22Y7gm04Deh4fAzHV5/aewvFC8kBlKI0u+90nGbpR/gTpCU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrNf2yoRqYTtCJrIcekfIgLl8nuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTg2MGE2N2UtNTM3MS0z MDhjLThiNTAtMmQzOTAwOWNlZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIoDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpNr3Fho8vIS76yKD+VzEF0qv2TBx9CLtBKtw0W8Wy3Tgpqx8BB3QKn Q6xdpuXxoMh3XqtDCBq8v39JsYjQpdfSmsOQu4LKB2wBFjA748kzDxTK6PhH0Zem DS9IdBF4ygvaQ4/XFPRuR2cQijNnNVxxsy+2Fo/hlp9oY1ieWGJERz/8KF34D8HZ 6MppUb3XZGq2fne+ILi02SomYCEmn0NH9dEUZAob2TXZk8qOeJFN1FtZNGJyCY72 tmqiT5bDu3Ze9Kux9o8BNZIgMUMbFJrwhimeZxa2m7hKuyZIbbM0LJi+RybuirNZ OattNEDsWh+Qvyk+0K5q2dDL35kNKAc= -----END CERTIFICATE-----Generated at Wed Jul 8 17:38:19 2026 by rpki-client