$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f722031-6760-36e4-b1ea-aaafd5b881dd.roa File: 1f722031-6760-36e4-b1ea-aaafd5b881dd.roa (raw, json) Hash identifier: lTtwW0ihZKZpkknSbA15m3wqb+VocpE4Vr/F9pTCcVQ= Subject key identifier: AF:68:D6:E0:55:C0:CA:1C:16:5A:D7:F0:A3:B7:2B:65:44:CD:C7:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF5DA0225EA43727E5C3AF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f722031-6760-36e4-b1ea-aaafd5b881dd.roa Signing time: Tue 12 May 2026 14:42:33 +0000 ROA not before: Tue 12 May 2026 14:42:33 +0000 ROA not after: Mon 10 Aug 2026 14:42:33 +0000 asID: 396982 IP address blocks: 34.190.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:5d:a0:22:5e:a4:37:27:e5:c3:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:42:33 2026 GMT Not After : Aug 10 14:42:33 2026 GMT Subject: CN=4bda4510-00d4-4ad9-a298-ee1ee7c3df14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:10:4d:50:7a:31:7c:01:05:cb:6e:da:1a: 81:c0:0b:37:c1:ea:31:c7:ea:48:e1:b7:ea:19:84: 70:64:80:48:cf:ac:c2:6a:38:7a:bb:24:89:b2:fa: 32:49:1f:e7:4e:fb:c7:0b:89:77:a0:e9:c5:e1:d9: 76:7a:fa:83:5c:ee:08:b3:2d:c1:81:45:5b:af:75: 05:f4:2b:cb:ca:fe:89:3b:27:af:f9:d1:15:66:71: 2d:bd:35:1f:91:f6:ba:bd:b1:5b:4a:42:5a:b1:2a: e4:34:8f:cf:27:d0:81:c3:7e:2b:d3:2e:4d:23:ae: c4:ac:ed:37:d7:06:7e:38:ab:24:1c:8b:ca:13:06: 4a:34:de:87:0e:16:7f:69:d1:e2:cc:ce:2b:8c:2e: c2:f1:5f:87:60:52:49:e7:c9:cc:b9:47:5b:db:c7: 16:5f:12:4c:c4:b7:bc:d1:bb:26:70:ae:a9:26:d1: 82:6f:bf:ab:68:ed:11:be:9b:d8:c3:fa:7d:91:92: 3f:55:61:83:d0:ce:7e:7e:81:1c:16:14:2c:1a:83: b0:51:61:7c:9f:2c:7c:0c:18:d4:84:58:bc:dd:61: 0d:75:5b:88:d4:97:92:8a:b1:9c:1e:b5:74:9a:a1: e8:b7:cb:56:af:64:55:b7:1b:51:33:35:b2:db:b9: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:68:D6:E0:55:C0:CA:1C:16:5A:D7:F0:A3:B7:2B:65:44:CD:C7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f722031-6760-36e4-b1ea-aaafd5b881dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:24:0f:2b:63:b5:30:a7:b7:da:31:2c:7c:c7:cf:e9:17:62: fa:a3:05:62:7c:39:31:a1:1d:fc:f2:c9:c2:88:f3:3e:20:d2: 43:a6:51:0d:93:56:55:de:f6:f8:8d:7d:0d:34:2d:7c:1b:d0: d4:71:be:c6:bf:e5:e0:49:1c:b1:f5:eb:9d:37:f2:5f:0d:4a: c7:87:e6:a7:7e:e1:14:66:81:fd:a6:75:e2:ae:c5:f7:df:46: 9a:bb:1c:da:cb:2b:06:c9:80:fb:86:de:b1:03:c9:c5:f3:c2: 2f:1d:4c:b2:92:8a:2a:5d:da:54:07:89:f0:53:9d:6d:05:b2: 67:b7:86:a9:6b:6e:f9:da:81:30:e3:ca:e4:93:eb:6c:4e:14: 7a:2e:e8:d9:2c:28:7e:6a:64:59:79:90:eb:6b:78:1b:71:83: 22:88:2e:f7:b5:21:06:01:a3:73:ad:17:2f:92:5d:82:b8:78: 37:28:13:7a:97:44:2c:aa:09:68:3a:22:b0:a2:26:12:34:50: 43:6b:55:b2:d8:e7:97:91:54:37:e3:87:89:8e:bb:71:b2:76: 80:69:3f:fb:ed:74:b4:b5:29:b1:e7:62:da:88:28:45:f7:3c: 5a:d2:9e:e7:ec:66:33:ca:21:37:0b:66:88:d1:0b:d5:c9:e5: 97:28:98:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PXaAiXqQ3J+XDr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NDIzM1oXDTI2MDgxMDE0NDIzM1owLzEtMCsGA1UEAxMk NGJkYTQ1MTAtMDBkNC00YWQ5LWEyOTgtZWUxZWU3YzNkZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWoQTVB6MXwBBctu2hqBwAs3weoxx+pI4bfq GYRwZIBIz6zCajh6uySJsvoySR/nTvvHC4l3oOnF4dl2evqDXO4Isy3BgUVbr3UF 9CvLyv6JOyev+dEVZnEtvTUfkfa6vbFbSkJasSrkNI/PJ9CBw34r0y5NI67ErO03 1wZ+OKskHIvKEwZKNN6HDhZ/adHizM4rjC7C8V+HYFJJ58nMuUdb28cWXxJMxLe8 0bsmcK6pJtGCb7+raO0RvpvYw/p9kZI/VWGD0M5+foEcFhQsGoOwUWF8nyx8DBjU hFi83WENdVuI1JeSirGcHrV0mqHot8tWr2RVtxtRMzWy27kxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9o1uBVwMocFlrX8KO3K2VEzceoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWY3MjIwMzEtNjc2MC0z NmU0LWIxZWEtYWFhZmQ1Yjg4MWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgkDytjtTCnt9oxLHzHz+kXYvqjBWJ8OTGhHfzyycKI8z4g0kOmUQ2T VlXe9viNfQ00LXwb0NRxvsa/5eBJHLH165038l8NSseH5qd+4RRmgf2mdeKuxfff Rpq7HNrLKwbJgPuG3rEDycXzwi8dTLKSiipd2lQHifBTnW0Fsme3hqlrbvnagTDj yuST62xOFHou6NksKH5qZFl5kOtreBtxgyKILve1IQYBo3OtFy+SXYK4eDcoE3qX RCyqCWg6IrCiJhI0UENrVbLY55eRVDfjh4mOu3GydoBpP/vtdLS1KbHnYtqIKEX3 PFrSnufsZjPKITcLZojRC9XJ5ZcomHU= -----END CERTIFICATE-----Generated at Wed May 13 14:47:20 2026 by rpki-client