$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: k9d+6/lmr+lArY1zC69jw4K7WiAdyvMezBQde6WZuI8= Subject key identifier: C4:78:2F:1D:46:A6:8D:D6:52:46:C4:37:26:8B:0B:D1:CB:A8:49:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51CFF6BE5E7B06D583A1C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:cf:f6:be:5e:7b:06:d5:83:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=b4615a6f-cae2-402a-9ba1-232dca8adef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:34:81:9a:1d:67:0f:8f:00:e9:aa:0e:17: 39:fd:6c:60:89:e5:8a:00:ca:18:44:dd:90:7d:8e: 8f:d3:f3:40:ee:d3:d8:92:28:ff:56:f3:d8:18:b9: 66:86:0c:f8:ac:55:df:91:7b:ed:46:fb:8b:c9:08: 3c:48:14:7c:2d:34:f5:05:10:82:30:9b:50:e6:4f: c7:82:c0:c1:72:17:2c:04:80:f4:cb:8f:c2:ba:f6: b8:27:5b:65:20:f9:41:98:94:b4:6e:27:7f:ae:79: 7e:83:a6:88:0b:fa:5b:d0:4d:3f:0d:b6:1a:e2:f8: 6e:75:f5:61:d5:43:ae:69:d7:32:35:55:c6:0e:00: 8b:97:82:1b:b7:f5:cd:09:9d:af:53:eb:c9:b4:87: 42:ea:e2:cc:37:9e:8b:0a:8d:1a:3b:32:4f:b2:dd: d1:83:c1:c4:c1:75:cb:71:b6:e7:76:f6:5c:7b:56: 69:aa:0a:b1:2c:eb:5c:fc:20:c3:d6:bb:c8:5a:99: 01:09:7b:19:fa:55:a3:5a:81:20:1b:8a:6a:21:6e: 47:f4:90:ca:6c:0c:2d:6c:f7:a0:33:a8:95:9e:87: 3c:7a:bf:2a:68:43:ec:f1:f9:b2:c5:db:a9:2b:c4: cf:e9:ac:d8:df:f3:26:00:d6:90:be:66:98:8e:a4: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:2F:1D:46:A6:8D:D6:52:46:C4:37:26:8B:0B:D1:CB:A8:49:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d1:fa:13:6e:7f:5e:f8:27:2a:c8:c0:aa:d7:cb:d8:72:e9: 1b:ea:fa:5d:5e:a2:ce:10:d2:b4:f7:ef:ce:10:ab:95:43:36: 1e:ef:81:4d:fd:30:5d:17:4b:62:8a:c5:1f:9c:88:34:19:83: 64:47:3e:19:75:dc:eb:01:a0:b2:a1:34:8e:6c:5f:d6:db:62: 30:a2:88:c6:2e:9e:9c:7c:d8:bd:28:83:bf:2f:0a:9b:d3:d1: 7f:d3:bd:96:cf:74:ee:52:76:48:17:01:d0:3f:75:47:a4:ae: 81:59:f1:fd:7a:20:e1:75:8c:5e:b5:bb:55:a3:2f:22:65:f2: db:1d:d5:33:23:9e:b2:17:41:22:64:b7:a6:fc:e8:04:6d:ed: b7:06:a7:28:19:ea:8c:bd:f3:47:eb:50:1c:9f:f0:c8:16:fa: 2a:f9:49:4e:3c:26:a8:9f:1f:07:7d:25:bc:b5:50:69:58:25: 3a:f6:3c:a5:2a:67:a2:42:0f:96:13:81:16:10:32:30:c3:25: 63:14:c1:66:80:d4:d5:a3:70:6c:cd:7e:b7:ed:86:24:c9:a7: 69:7b:a5:3b:47:c7:95:cf:5c:97:10:33:27:f5:9b:58:68:74: 5b:94:b3:51:cc:48:fc:d0:6d:e8:b7:3c:49:4f:f2:c5:a6:60: 0a:4a:d8:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUc/2vl57BtWDocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk YjQ2MTVhNmYtY2FlMi00MDJhLTliYTEtMjMyZGNhOGFkZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9w0gZodZw+PAOmqDhc5/WxgieWKAMoYRN2Q fY6P0/NA7tPYkij/VvPYGLlmhgz4rFXfkXvtRvuLyQg8SBR8LTT1BRCCMJtQ5k/H gsDBchcsBID0y4/Cuva4J1tlIPlBmJS0bid/rnl+g6aIC/pb0E0/DbYa4vhudfVh 1UOuadcyNVXGDgCLl4Ibt/XNCZ2vU+vJtIdC6uLMN56LCo0aOzJPst3Rg8HEwXXL cbbndvZce1ZpqgqxLOtc/CDD1rvIWpkBCXsZ+lWjWoEgG4pqIW5H9JDKbAwtbPeg M6iVnoc8er8qaEPs8fmyxdupK8TP6azY3/MmANaQvmaYjqQ+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR4Lx1Gpo3WUkbENyaLC9HLqEkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHR+hNuf174JyrIwKrXy9hy6Rvq+l1eos4Q0rT3784Qq5VDNh7vgU39 MF0XS2KKxR+ciDQZg2RHPhl13OsBoLKhNI5sX9bbYjCiiMYunpx82L0og78vCpvT 0X/TvZbPdO5SdkgXAdA/dUekroFZ8f16IOF1jF61u1WjLyJl8tsd1TMjnrIXQSJk t6b86ARt7bcGpygZ6oy980frUByf8MgW+ir5SU48JqifHwd9Jby1UGlYJTr2PKUq Z6JCD5YTgRYQMjDDJWMUwWaA1NWjcGzNfrfthiTJp2l7pTtHx5XPXJcQMyf1m1ho dFuUs1HMSPzQbei3PElP8sWmYApK2Ik= -----END CERTIFICATE-----Generated at Sat Aug 8 02:54:03 2026 by rpki-client