$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa File: d1298af5-c68f-32c2-8389-932d2088da4a.roa (raw, json) Hash identifier: 7qW5n/B9TCb1u6P03J70b9fka1/HeeNf4gRHLHPDOUM= Subject key identifier: C2:00:32:2B:B3:6E:C6:6D:A8:A1:47:67:56:7C:06:9A:29:FC:38:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EC7A1E9C9A16A34559C27E9A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 15169 IP address blocks: 34.190.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e9:c9:a1:6a:34:55:9c:27:e9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=ca3ffdbe-f63f-415c-9c8a-e78116d642ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:b5:37:25:11:df:d9:e4:24:3d:e7:2b:a8: 0e:ad:10:6b:e9:2f:0c:12:cd:3b:a4:2c:b9:c6:92: 2d:9e:6f:9b:dc:ec:54:6d:87:4a:39:a8:c9:49:1c: a1:ea:ea:5c:8f:c8:87:b5:d1:1f:3d:f9:4b:c0:a9: 68:a1:e3:b0:ba:bc:e0:f7:8d:9c:08:9e:af:8c:e6: fd:96:04:fe:17:b8:18:c0:07:71:26:0e:46:42:b7: 3d:a4:10:bf:20:fb:97:f3:63:1a:ef:36:a2:bd:41: be:e4:e9:9d:f2:6e:24:4f:11:b5:d1:1b:04:be:73: 40:85:17:f8:17:e7:ee:ae:b3:7b:f5:b2:fa:93:04: c4:10:d4:98:1a:f1:a1:ca:24:cb:a7:af:ef:98:89: 96:72:bc:c3:73:eb:e5:7c:42:22:1c:ec:38:ba:df: 05:d9:92:da:5f:be:e8:3a:c9:f0:78:16:69:07:ac: 5e:74:2b:60:94:fd:a0:e8:24:82:ec:24:55:d7:7a: 93:9d:8a:53:05:9a:f5:c0:75:d0:82:91:b7:78:85: b6:23:35:de:f1:2e:e8:70:1f:d7:35:4c:a5:36:0f: f7:99:15:e5:9c:45:55:ad:4b:8b:1b:d0:52:38:19: 50:c6:aa:c8:8b:74:e0:90:85:89:cc:0c:88:85:87: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:32:2B:B3:6E:C6:6D:A8:A1:47:67:56:7C:06:9A:29:FC:38:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e2:09:0e:a2:53:ea:15:35:13:00:ec:a7:1a:5c:27:cd:bd: 05:1d:48:64:57:bc:81:e4:90:a4:d8:b6:5a:d0:a3:a3:df:3b: ce:50:5d:f5:5d:b3:9b:8b:a6:95:d2:ce:0f:8e:b2:62:c7:62: 25:6a:79:40:76:9b:21:20:9d:2b:56:90:90:40:7a:0b:97:c0: 1b:75:48:c3:c0:a1:40:cc:88:8a:a1:45:ec:73:49:48:67:af: 76:0e:fc:40:c2:c4:48:10:c3:d1:ed:77:77:bb:9e:bc:45:c0: 19:2d:23:b0:c4:5b:13:b3:1a:38:40:49:ea:ec:12:63:87:0b: 8a:fd:a0:5c:68:cb:03:2c:70:98:8a:e0:91:88:4d:94:f6:23: 32:47:89:13:50:2a:67:10:0c:29:c5:c6:64:0e:54:87:3d:a3: 11:eb:4e:60:ee:df:b1:a2:10:63:31:56:e5:ba:9a:15:a3:85: ef:24:e1:5b:9f:49:f7:ad:55:8d:f2:1a:37:f5:6c:5c:64:2b: 1a:0d:25:83:33:da:5c:bb:57:6a:e9:58:cb:61:6d:3e:29:0e: 8a:bb:4d:1e:62:87:27:50:82:77:8f:47:79:f4:58:b5:c2:b8: 27:c4:b4:71:fa:dd:68:79:33:9e:8b:63:37:40:aa:7e:fc:91: 83:4d:61:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoenJoWo0VZwn6aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk Y2EzZmZkYmUtZjYzZi00MTVjLTljOGEtZTc4MTE2ZDY0MmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKy1NyUR39nkJD3nK6gOrRBr6S8MEs07pCy5 xpItnm+b3OxUbYdKOajJSRyh6upcj8iHtdEfPflLwKlooeOwurzg942cCJ6vjOb9 lgT+F7gYwAdxJg5GQrc9pBC/IPuX82Ma7zaivUG+5Omd8m4kTxG10RsEvnNAhRf4 F+furrN79bL6kwTEENSYGvGhyiTLp6/vmImWcrzDc+vlfEIiHOw4ut8F2ZLaX77o OsnweBZpB6xedCtglP2g6CSC7CRV13qTnYpTBZr1wHXQgpG3eIW2IzXe8S7ocB/X NUylNg/3mRXlnEVVrUuLG9BSOBlQxqrIi3TgkIWJzAyIhYccOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIAMiuzbsZtqKFHZ1Z8Bpop/DhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEyOThhZjUtYzY4Zi0z MmMyLTgzODktOTMyZDIwODhkYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPiCQ6iU+oVNRMA7KcaXCfNvQUdSGRXvIHkkKTYtlrQo6PfO85QXfVd s5uLppXSzg+OsmLHYiVqeUB2myEgnStWkJBAeguXwBt1SMPAoUDMiIqhRexzSUhn r3YO/EDCxEgQw9Htd3e7nrxFwBktI7DEWxOzGjhASersEmOHC4r9oFxoywMscJiK 4JGITZT2IzJHiRNQKmcQDCnFxmQOVIc9oxHrTmDu37GiEGMxVuW6mhWjhe8k4Vuf SfetVY3yGjf1bFxkKxoNJYMz2ly7V2rpWMthbT4pDoq7TR5ihydQgnePR3n0WLXC uCfEtHH63Wh5M56LYzdAqn78kYNNYZw= -----END CERTIFICATE-----Generated at Mon Sep 28 23:04:15 2026 by rpki-client