$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa File: d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa (raw, json) Hash identifier: ZeEK6SftE+ntvKxrUMpfP4PTgaKZJyoyP2o4ZB5EwTQ= Subject key identifier: 58:C4:52:EC:A1:E8:CD:A5:11:C9:44:F3:8E:C5:3B:D0:5B:C6:5E:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51C9AF6B7B7F6E0F906F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 34.128.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:c9:af:6b:7b:7f:6e:0f:90:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=2276fd2d-38c7-42ca-a611-1b70b25749db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:2a:a8:f2:cc:8d:14:91:57:7f:52:19:3f: 96:5b:7f:ed:93:88:7c:e7:6e:cb:ec:15:45:2c:7f: fb:3f:6b:fe:0d:0e:53:29:88:8c:8c:31:da:2f:4d: b6:05:54:f4:4b:35:24:7f:fd:a7:01:da:a5:2d:1a: 78:ef:0b:de:a5:6e:de:3f:89:e1:e0:bf:8d:72:17: 5c:b8:97:2b:e3:40:e1:e0:f0:7e:29:bc:0e:78:05: 76:63:a4:3c:7e:30:0e:4d:3d:81:26:69:96:1d:5c: ff:c0:eb:58:77:8a:ef:dc:70:9d:3c:55:15:71:17: 1c:f7:cb:97:52:af:a6:d0:de:86:14:55:cb:cd:55: c1:6a:a2:ad:67:ff:14:47:c4:95:58:4c:ef:87:cb: c3:c8:41:99:ad:9a:75:0b:87:6a:45:8a:3b:aa:29: b2:39:61:3c:f5:0d:c0:e3:b3:aa:79:33:3b:0d:e8: cc:da:8e:01:65:30:a2:a8:e5:c8:e2:bf:95:90:77: d6:85:44:ce:6a:17:48:54:40:37:47:94:0d:2c:52: 3f:dd:f5:3b:b6:15:6f:08:3e:0d:77:ac:1b:74:44: 64:c9:95:46:9f:c2:0b:fe:63:5d:2b:33:3f:09:00: eb:f4:6b:9b:82:f8:70:27:68:0c:44:f0:7a:66:d7: a2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C4:52:EC:A1:E8:CD:A5:11:C9:44:F3:8E:C5:3B:D0:5B:C6:5E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4b:4b:74:24:6d:45:fd:fe:b3:92:40:da:e1:2f:68:06:e0: 1a:f3:3d:93:b0:9e:ae:f9:03:32:8d:b4:d9:82:18:e2:79:95: 5c:fb:e8:ad:47:0a:a2:7d:e8:72:2d:50:ab:1f:b7:13:ea:fe: 05:77:6c:b9:03:5d:46:0e:2c:12:97:d0:4c:42:dc:37:96:fb: fc:1e:b0:de:9c:7a:48:f8:56:f3:4b:d8:df:a3:f3:44:8d:d1: 4b:77:94:22:6d:7d:b1:55:e1:73:3c:73:97:80:38:6b:25:f4: 03:34:70:1a:20:fb:45:c4:f7:b1:d0:8a:f1:cf:9b:83:67:63: 65:73:8e:27:7b:db:66:6f:a5:5e:0a:66:f7:c8:c0:20:71:01: fe:e1:54:23:18:0f:63:4a:e5:df:37:6e:82:9c:06:b2:6c:ec: 6e:42:ee:69:64:79:42:f0:5a:86:3a:ef:75:ea:10:ab:9e:26: 0b:02:37:f7:95:f1:00:27:27:e0:8d:73:fa:ad:24:c0:44:4b: 05:79:3a:b8:f7:b2:77:fb:cf:8e:b2:30:91:d2:22:49:79:0a: 74:a9:fd:df:9a:62:4b:3f:31:a1:87:9c:a4:d1:54:84:dd:0e: 2a:a7:b2:96:f8:4b:5b:57:6d:46:a5:de:6a:81:5e:7b:62:58: 68:1e:b3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUcmva3t/bg+Qb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk MjI3NmZkMmQtMzhjNy00MmNhLWE2MTEtMWI3MGIyNTc0OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBMqqPLMjRSRV39SGT+WW3/tk4h8527L7BVF LH/7P2v+DQ5TKYiMjDHaL022BVT0SzUkf/2nAdqlLRp47wvepW7eP4nh4L+Nchdc uJcr40Dh4PB+KbwOeAV2Y6Q8fjAOTT2BJmmWHVz/wOtYd4rv3HCdPFUVcRcc98uX Uq+m0N6GFFXLzVXBaqKtZ/8UR8SVWEzvh8vDyEGZrZp1C4dqRYo7qimyOWE89Q3A 47OqeTM7DejM2o4BZTCiqOXI4r+VkHfWhUTOahdIVEA3R5QNLFI/3fU7thVvCD4N d6wbdERkyZVGn8IL/mNdKzM/CQDr9GubgvhwJ2gMRPB6ZteihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjEUuyh6M2lEclE847FO9Bbxl5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDVkYWMxNzMtOTE1OS0z YTI1LTgxMzctMGZkOGNmMWY2YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNLS3QkbUX9/rOSQNrhL2gG4BrzPZOwnq75AzKNtNmCGOJ5lVz76K1H CqJ96HItUKsftxPq/gV3bLkDXUYOLBKX0ExC3DeW+/wesN6cekj4VvNL2N+j80SN 0Ut3lCJtfbFV4XM8c5eAOGsl9AM0cBog+0XE97HQivHPm4NnY2Vzjid722ZvpV4K ZvfIwCBxAf7hVCMYD2NK5d83boKcBrJs7G5C7mlkeULwWoY673XqEKueJgsCN/eV 8QAnJ+CNc/qtJMBESwV5Orj3snf7z46yMJHSIkl5CnSp/d+aYks/MaGHnKTRVITd Diqnspb4S1tXbUal3mqBXntiWGges3E= -----END CERTIFICATE-----Generated at Sat Aug 8 01:53:44 2026 by rpki-client