$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa File: ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa (raw, json) Hash identifier: mFVs3DCrZc3x59gV4GhU1Ysmqphg5shpYt1ZPg8Mb20= Subject key identifier: 96:6B:F7:2A:1A:A5:36:5C:99:A8:67:0A:B9:68:1E:4F:BE:19:A5:BD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E561A0A742893FA1CFB681200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 396982 IP address blocks: 34.12.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:0a:74:28:93:fa:1c:fb:68:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=f1223651-4c0d-40df-b7f7-d9d81cfad67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:47:2c:45:36:5b:05:3d:40:40:49:d7:6a: d6:1f:74:2f:8f:55:64:99:8d:d3:91:2a:38:3c:87: db:cc:6d:6e:1b:c4:60:66:d3:f1:d1:46:9c:64:3a: 97:7a:65:96:53:ca:46:47:93:93:a1:6e:25:ab:3b: c7:fb:94:55:9b:23:44:86:dc:e2:2f:fb:77:21:64: 7d:b6:35:ed:a6:04:60:52:a3:bb:43:2c:17:18:2b: 4c:e5:ee:c4:fb:e1:94:4d:5a:d9:4f:38:9d:97:ec: 7f:91:d5:11:8e:cf:26:56:d7:e7:cc:f9:ec:67:a4: 5b:3f:e8:b7:7d:d1:99:a6:df:ec:5a:69:e5:85:57: d2:3d:09:0b:02:05:e2:f2:a4:80:3b:1c:05:13:51: c1:0e:6d:31:cc:87:69:de:61:3a:5e:42:8b:82:a1: 00:d6:8c:e2:e2:f0:43:ee:59:ab:43:76:9b:8a:87: 82:a5:6a:2a:98:97:cb:e1:5f:ea:1e:b2:78:3a:1d: 94:de:6e:56:87:b9:2a:1e:df:00:44:ed:dd:c1:41: 72:45:4c:af:b4:ab:69:0d:f8:b3:8b:da:3f:ac:1f: 11:e9:61:dc:94:2f:3a:84:d0:d6:b2:73:31:12:1d: 7d:f6:76:3b:b5:00:5b:88:78:c0:f9:4d:6d:72:73: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6B:F7:2A:1A:A5:36:5C:99:A8:67:0A:B9:68:1E:4F:BE:19:A5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:90:1e:3e:3c:a0:d4:07:a2:f5:27:8a:64:b4:f8:73:b8:35: 1a:2d:a4:d4:c8:d8:f7:d8:a8:46:dc:57:c7:c7:bb:be:a4:36: 7e:25:f8:63:fc:02:21:c1:12:50:d6:47:47:e1:26:cc:4b:c2: 4c:36:77:de:c3:d6:89:03:c4:79:3a:27:0d:63:06:f8:5f:82: 0f:57:ba:88:18:c8:74:f9:0b:2d:94:0b:a0:56:17:7a:3a:42: 3e:a3:d3:36:a4:92:a4:62:3b:b4:0a:72:ae:67:a6:75:9f:30: 9b:40:24:cd:6a:17:40:ee:49:0d:89:8f:ac:f5:42:74:6e:98: 3b:d2:d4:ad:50:42:f3:0d:a7:b4:a7:a3:27:62:94:4a:61:f2: 2c:03:da:6e:1f:f5:b6:74:de:00:3a:3a:d9:c9:cc:83:8d:d8: f9:31:95:ba:cf:81:ef:ec:8a:2f:d1:c4:aa:fb:2b:ae:71:5c: 24:3a:3c:2c:58:59:d8:a5:31:48:59:88:36:0d:3d:c1:7b:c1: ca:87:6c:ac:21:84:f1:5f:94:02:ff:3e:a6:8d:af:f9:c5:5d: 8b:a2:9d:dd:88:0e:ee:e8:d7:c5:22:d0:a3:93:f5:8b:ab:14: 01:be:99:6a:4a:87:02:55:a3:cb:d3:b4:4d:f0:c9:17:53:1e: 46:7e:08:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGgp0KJP6HPtoEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjEyMjM2NTEtNGMwZC00MGRmLWI3ZjctZDlkODFjZmFkNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUNHLEU2WwU9QEBJ12rWH3Qvj1VkmY3TkSo4 PIfbzG1uG8RgZtPx0UacZDqXemWWU8pGR5OToW4lqzvH+5RVmyNEhtziL/t3IWR9 tjXtpgRgUqO7QywXGCtM5e7E++GUTVrZTzidl+x/kdURjs8mVtfnzPnsZ6RbP+i3 fdGZpt/sWmnlhVfSPQkLAgXi8qSAOxwFE1HBDm0xzIdp3mE6XkKLgqEA1ozi4vBD 7lmrQ3abioeCpWoqmJfL4V/qHrJ4Oh2U3m5Wh7kqHt8ARO3dwUFyRUyvtKtpDfiz i9o/rB8R6WHclC86hNDWsnMxEh199nY7tQBbiHjA+U1tcnMsrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZr9yoapTZcmahnCrloHk++GaW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE5ZTI4YzctMjdhMS0z MGY5LWJhMzgtOGUxZmZjNzViNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWQHj48oNQHovUnimS0+HO4NRotpNTI2PfYqEbcV8fHu76kNn4l+GP8 AiHBElDWR0fhJsxLwkw2d97D1okDxHk6Jw1jBvhfgg9XuogYyHT5Cy2UC6BWF3o6 Qj6j0zakkqRiO7QKcq5npnWfMJtAJM1qF0DuSQ2Jj6z1QnRumDvS1K1QQvMNp7Sn oydilEph8iwD2m4f9bZ03gA6OtnJzION2PkxlbrPge/sii/RxKr7K65xXCQ6PCxY WdilMUhZiDYNPcF7wcqHbKwhhPFflAL/PqaNr/nFXYuind2IDu7o18Ui0KOT9Yur FAG+mWpKhwJVo8vTtE3wyRdTHkZ+CNQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:58:10 2026 by rpki-client