$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa File: dd865953-ecca-346e-bd8e-2ad11918a410.roa (raw, json) Hash identifier: 6JClJOyOLfdTF8ES0KRyHQsa0YCwhfCCrcyZH5HvGjU= Subject key identifier: 3A:71:48:ED:63:A1:25:27:2F:37:FC:F5:3A:E5:1E:ED:B4:7B:3D:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E5BAF5D926429D49F9F60CF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 396982 IP address blocks: 34.13.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5d:92:64:29:d4:9f:9f:60:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=bc095a27-9c98-47ec-a993-6326249ae482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:49:ef:e1:c3:3b:6d:f2:5e:b2:4f:e3:c5: 35:9d:06:3a:d3:78:ef:40:39:92:44:37:e7:5c:ce: 7b:53:29:fe:e5:89:34:a5:a7:bc:d2:c0:e7:da:a8: 63:4b:13:b2:5c:35:47:71:f1:96:8f:57:68:68:36: cb:e8:84:59:e6:78:21:eb:6a:b6:7a:4d:09:f4:55: 7a:15:d2:66:60:93:e8:2a:70:78:26:bf:44:67:9b: d6:fa:fa:4a:63:a5:1f:95:06:95:db:00:05:0d:b7: 34:4a:ce:89:d6:4f:31:b3:b3:8f:cf:38:3c:7c:82: 2a:6b:c2:c5:48:3a:62:ae:98:f5:b3:a1:bd:78:31: 5b:3b:a5:42:25:ba:43:a0:1e:b5:dd:68:70:7a:d0: 4e:cd:3d:b4:74:8d:33:63:82:66:aa:8e:5a:e0:44: 74:63:cb:1f:52:f0:c2:55:96:df:94:a4:1d:d6:50: 0e:71:50:11:61:e3:42:78:08:da:e1:ae:cc:16:7b: e7:d9:af:e2:e9:53:a7:8e:c5:b5:5c:6a:1a:63:ac: c2:6d:96:9d:7b:be:17:b7:98:c3:0e:e3:86:36:ff: a5:cc:18:58:24:3a:6b:dd:ec:d9:db:90:b5:e8:f9: 7a:d4:27:89:c4:8f:69:70:77:1f:89:ab:eb:37:ab: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:71:48:ED:63:A1:25:27:2F:37:FC:F5:3A:E5:1E:ED:B4:7B:3D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:cd:11:c6:81:e4:44:72:c3:0a:e2:bb:20:4e:c9:f5:e1:dd: 4e:85:36:b3:4c:6a:3e:8b:f7:6c:15:1b:81:bc:39:fb:99:14: 49:4f:d0:cd:0e:c1:51:92:ae:07:75:bd:40:f3:0d:33:fb:fd: 1c:02:12:d1:7b:69:85:80:a1:3b:9c:89:a5:19:4b:12:e2:be: 4a:2e:03:67:a2:63:93:41:d4:fa:77:f7:47:99:2c:39:de:e3: 49:c5:64:50:8b:1b:41:df:65:79:f7:92:f5:00:57:1c:ba:57: ec:46:f4:6b:47:22:cf:2b:5f:02:e1:53:1e:69:0f:32:3c:13: be:3f:13:47:73:62:75:ec:fe:d7:d8:c9:1d:b7:e8:0f:5b:01: 41:32:65:d9:62:31:9c:7a:8d:69:f8:b8:b9:a0:57:c3:3a:63: 12:35:44:56:22:74:39:cb:4a:13:3b:0a:9d:fb:7e:b1:6c:08: ad:2c:ba:3b:8f:25:21:c7:67:a3:29:79:22:dc:53:83:45:06: 89:01:93:0b:f0:b1:68:4a:a0:26:ce:a8:6c:2d:f0:58:ea:fe: d5:8a:dd:a3:4b:21:db:c7:47:9a:be:f2:c8:76:b7:43:48:a3: 92:8c:50:40:23:85:1f:69:fc:16:28:5d:01:c1:a4:98:08:b5: 3a:af:54:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br12SZCnUn59gz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk YmMwOTVhMjctOWM5OC00N2VjLWE5OTMtNjMyNjI0OWFlNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjklJ7+HDO23yXrJP48U1nQY603jvQDmSRDfn XM57Uyn+5Yk0pae80sDn2qhjSxOyXDVHcfGWj1doaDbL6IRZ5ngh62q2ek0J9FV6 FdJmYJPoKnB4Jr9EZ5vW+vpKY6UflQaV2wAFDbc0Ss6J1k8xs7OPzzg8fIIqa8LF SDpirpj1s6G9eDFbO6VCJbpDoB613WhwetBOzT20dI0zY4Jmqo5a4ER0Y8sfUvDC VZbflKQd1lAOcVARYeNCeAja4a7MFnvn2a/i6VOnjsW1XGoaY6zCbZade74Xt5jD DuOGNv+lzBhYJDpr3ezZ25C16Pl61CeJxI9pcHcfiavrN6uDvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpxSO1joSUnLzf89TrlHu20ez20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ4NjU5NTMtZWNjYS0z NDZlLWJkOGUtMmFkMTE5MThhNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIg2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDNEcaB5ERywwriuyBOyfXh3U6FNrNMaj6L92wVG4G8OfuZFElP0M0O wVGSrgd1vUDzDTP7/RwCEtF7aYWAoTuciaUZSxLivkouA2eiY5NB1Pp390eZLDne 40nFZFCLG0HfZXn3kvUAVxy6V+xG9GtHIs8rXwLhUx5pDzI8E74/E0dzYnXs/tfY yR236A9bAUEyZdliMZx6jWn4uLmgV8M6YxI1RFYidDnLShM7Cp37frFsCK0sujuP JSHHZ6MpeSLcU4NFBokBkwvwsWhKoCbOqGwt8Fjq/tWK3aNLIdvHR5q+8sh2t0NI o5KMUEAjhR9p/BYoXQHBpJgItTqvVEo= -----END CERTIFICATE-----Generated at Fri Jul 24 00:56:46 2026 by rpki-client