$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a3db440-fa40-352a-90db-ceb8517a9d84.roa File: 1a3db440-fa40-352a-90db-ceb8517a9d84.roa (raw, json) Hash identifier: KGNVC63FDWO9Cgk5nA/ltVfMXS1b6RdmS7H2x9Z74IA= Subject key identifier: 19:CC:97:4F:A3:34:25:C6:AC:D3:97:87:FE:1F:FA:2C:36:77:BB:91 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA7032E7BD15CA61F49880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a3db440-fa40-352a-90db-ceb8517a9d84.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 15169 IP address blocks: 34.190.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:70:32:e7:bd:15:ca:61:f4:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=99ca102a-5a23-4726-8c98-b68fdfc36c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:74:39:e3:96:1b:61:82:33:7d:c4:b9:f3: 10:b9:a9:cf:b3:a2:fc:67:ab:8d:50:c4:6f:e1:aa: dd:37:d9:5e:e2:f2:0c:f8:8d:a7:10:f6:de:a9:47: 3e:97:bc:59:11:33:17:e8:0b:d7:17:c2:c3:16:a1: 5f:03:b0:e0:ca:2e:3b:be:b6:47:08:33:8e:06:d5: 31:7f:05:d9:b7:3b:43:87:6e:8c:42:a5:f6:af:b7: b4:0c:36:4d:f3:04:85:ee:f0:f9:33:21:b7:59:80: 1a:bf:e8:de:0b:64:95:0c:5e:77:60:20:93:ec:b2: ff:ab:b7:f2:8f:d6:46:42:30:74:5b:e2:5a:9e:b9: 9f:60:ec:41:1e:e1:89:5e:8d:d0:13:29:e0:bb:d8: fa:e2:33:40:f8:a7:1f:90:d5:9f:94:76:06:6c:8c: e1:9b:cd:f8:69:42:86:39:6f:69:f6:09:61:24:b9: 56:82:83:1e:2a:6f:2d:04:d5:8f:34:56:f7:c6:7b: 9c:0f:79:48:72:b4:85:29:77:6a:27:7c:c2:7c:e3: b5:5b:37:56:15:53:fc:b4:61:ce:a8:de:96:20:39: c1:7b:ef:4a:a1:7d:d7:70:25:e4:e3:6a:ba:d3:94: 32:a8:8a:6d:20:3d:64:b9:b1:78:89:38:05:53:41: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CC:97:4F:A3:34:25:C6:AC:D3:97:87:FE:1F:FA:2C:36:77:BB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a3db440-fa40-352a-90db-ceb8517a9d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cf:8c:06:da:ee:e7:74:c1:b3:fe:0e:15:86:1b:65:b5:f1: 6e:52:ad:99:fa:03:58:b2:15:5b:2e:87:6b:d0:47:33:5a:b5: 1b:92:c7:2a:3c:52:fc:31:fa:f4:fb:e1:0a:32:64:71:c1:81: 93:a1:12:10:01:cb:3d:97:1b:30:78:58:03:37:23:79:aa:f5: ba:d2:6d:90:96:13:f0:b9:b8:f2:80:30:f5:68:be:b0:d3:c9: c2:93:7f:d2:b4:73:c9:88:67:0a:40:b1:56:17:d5:6f:c9:0c: a9:8a:53:66:c4:17:99:9c:19:f3:5e:04:f7:28:3d:67:07:a7: 7b:66:42:4c:ab:1c:6a:7d:f6:47:7a:b7:aa:27:c5:b2:00:6c: 03:1e:f8:e6:11:75:37:a6:8a:49:7e:84:1a:c8:7e:6e:96:37: bd:26:f1:e6:49:d7:d9:ba:6e:bb:b8:e5:32:25:6f:95:e1:41: c5:69:e3:77:32:3b:55:fb:43:02:71:7e:b7:61:a2:c2:2d:91: 3c:fd:fa:0b:a9:d5:08:8f:c9:ff:e1:ad:b9:14:69:27:c0:2d: 12:1b:29:5a:14:43:74:5c:64:79:aa:ab:a8:1a:79:fd:b5:8a: b5:aa:35:4e:16:2a:5f:fe:c6:69:94:32:2c:29:60:4a:27:94: 7d:57:47:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nAy570VymH0mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTljYTEwMmEtNWEyMy00NzI2LThjOTgtYjY4ZmRmYzM2YzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW50OeOWG2GCM33EufMQuanPs6L8Z6uNUMRv 4ardN9le4vIM+I2nEPbeqUc+l7xZETMX6AvXF8LDFqFfA7Dgyi47vrZHCDOOBtUx fwXZtztDh26MQqX2r7e0DDZN8wSF7vD5MyG3WYAav+jeC2SVDF53YCCT7LL/q7fy j9ZGQjB0W+JanrmfYOxBHuGJXo3QEyngu9j64jNA+KcfkNWflHYGbIzhm834aUKG OW9p9glhJLlWgoMeKm8tBNWPNFb3xnucD3lIcrSFKXdqJ3zCfOO1WzdWFVP8tGHO qN6WIDnBe+9KoX3XcCXk42q605QyqIptID1kubF4iTgFU0HbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnMl0+jNCXGrNOXh/4f+iw2d7uRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWEzZGI0NDAtZmE0MC0z NTJhLTkwZGItY2ViODUxN2E5ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/PjAba7ud0wbP+DhWGG2W18W5SrZn6A1iyFVsuh2vQRzNatRuSxyo8 Uvwx+vT74QoyZHHBgZOhEhAByz2XGzB4WAM3I3mq9brSbZCWE/C5uPKAMPVovrDT ycKTf9K0c8mIZwpAsVYX1W/JDKmKU2bEF5mcGfNeBPcoPWcHp3tmQkyrHGp99kd6 t6onxbIAbAMe+OYRdTemikl+hBrIfm6WN70m8eZJ19m6bru45TIlb5XhQcVp43cy O1X7QwJxfrdhosItkTz9+gup1QiPyf/hrbkUaSfALRIbKVoUQ3RcZHmqq6gaef21 irWqNU4WKl/+xmmUMiwpYEonlH1XR3I= -----END CERTIFICATE-----Generated at Thu Mar 26 17:05:58 2026 by rpki-client