$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa File: 20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa (raw, json) Hash identifier: 3g/2xE+qihwVB8U4CF63S5f9jw3FmUy5sDOIM7ZOywM= Subject key identifier: 42:BE:55:B5:F7:2C:4B:A9:C8:E2:AD:8C:CC:3E:F4:8D:0E:49:85:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF65A9AB9F256E57AE1568C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa Signing time: Tue 12 May 2026 14:58:44 +0000 ROA not before: Tue 12 May 2026 14:58:44 +0000 ROA not after: Mon 10 Aug 2026 14:58:44 +0000 asID: 43515 IP address blocks: 34.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:65:a9:ab:9f:25:6e:57:ae:15:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:58:44 2026 GMT Not After : Aug 10 14:58:44 2026 GMT Subject: CN=88528fb6-a02c-4325-b513-531c7d75e400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:a4:a5:43:b2:ee:06:19:db:3c:ea:a2:cf: 7b:8d:49:37:1e:81:42:16:99:38:be:84:95:36:f4: be:62:95:95:bb:36:f1:61:e8:be:f7:61:a9:80:ec: bc:f7:79:a5:4a:c6:83:1f:aa:a6:12:02:b5:3d:0b: 49:ba:88:48:e3:70:f2:f8:32:96:a1:c0:bf:80:c5: d2:78:22:e6:7b:22:36:1a:6e:03:57:b5:17:a5:7f: a5:92:28:97:9f:28:9c:8b:95:2c:3b:fc:14:0e:2c: 33:c2:f9:08:14:a4:f9:6f:ce:b1:3a:a7:64:5a:87: bd:63:e0:13:19:eb:fd:6b:e1:8c:3f:a9:1e:3c:b2: 83:fb:9a:7c:ec:26:7b:70:57:cf:26:80:40:99:74: 58:a0:b9:f0:32:7e:04:88:30:8e:8d:3e:d1:2a:8c: f8:e3:f6:cc:cb:f9:5b:bd:58:92:e6:6e:9b:11:18: 79:d5:08:3d:50:d4:1b:cb:73:7d:e5:5e:54:ee:7c: be:d2:b8:c2:81:26:62:57:07:bc:51:de:3a:46:42: 94:c3:27:4a:25:7d:77:68:62:75:98:38:e0:59:95: 87:05:62:f0:a0:af:56:1e:76:2f:34:06:31:b7:d3: 31:df:f8:24:78:86:94:00:c8:59:10:72:11:a7:e9: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BE:55:B5:F7:2C:4B:A9:C8:E2:AD:8C:CC:3E:F4:8D:0E:49:85:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:07:54:60:b8:46:28:8f:50:6e:15:d2:17:5a:e6:56:c1:68: b4:65:ce:c2:25:35:7f:6b:67:8c:75:4a:fa:d9:ee:a8:93:e3: 7b:e1:0d:a8:84:c1:72:6d:95:69:a2:d3:65:d6:0e:9c:b5:34: c1:4e:7f:0d:72:b3:c7:8a:ef:b9:7e:26:dc:63:d7:cf:e9:32: 47:2a:67:db:5a:fb:f5:44:c2:15:f3:1a:98:37:0a:e0:c7:9f: c0:88:df:09:2c:21:4b:96:f0:d9:41:13:9a:b8:19:47:a2:b1: 28:69:39:79:c8:6c:b7:0c:a6:da:37:dc:1a:2c:9d:97:91:59: 6b:f2:f4:55:11:21:b9:01:84:22:7d:98:a5:d3:2a:89:90:bb: 05:f1:77:d0:16:4e:25:3c:08:6f:fa:95:9e:86:f9:6e:39:70: f2:c6:ca:b2:37:c3:53:c4:91:ca:75:5e:17:d8:89:db:7f:b9: 53:3e:7f:df:fb:e2:40:af:c0:0e:d9:ef:31:b9:3a:53:5b:80: 4f:d8:9d:96:d3:41:da:10:06:ac:a7:01:73:c8:12:78:2f:b0: b2:93:86:ae:63:28:e0:25:93:44:b3:79:c9:e2:9b:0d:02:34: b6:8c:66:7d:1d:77:2a:b3:84:2d:37:d4:04:c7:34:17:d0:71: cb:9a:51:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PZamrnyVuV64VaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTg0NFoXDTI2MDgxMDE0NTg0NFowLzEtMCsGA1UEAxMk ODg1MjhmYjYtYTAyYy00MzI1LWI1MTMtNTMxYzdkNzVlNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKmkpUOy7gYZ2zzqos97jUk3HoFCFpk4voSV NvS+YpWVuzbxYei+92GpgOy893mlSsaDH6qmEgK1PQtJuohI43Dy+DKWocC/gMXS eCLmeyI2Gm4DV7UXpX+lkiiXnyici5UsO/wUDiwzwvkIFKT5b86xOqdkWoe9Y+AT Gev9a+GMP6kePLKD+5p87CZ7cFfPJoBAmXRYoLnwMn4EiDCOjT7RKoz44/bMy/lb vViS5m6bERh51Qg9UNQby3N95V5U7ny+0rjCgSZiVwe8Ud46RkKUwydKJX13aGJ1 mDjgWZWHBWLwoK9WHnYvNAYxt9Mx3/gkeIaUAMhZEHIRp+l98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK+VbX3LEupyOKtjMw+9I0OSYU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBhMjU2ZmMtNDBlMS0z M2UxLWJlYmQtYjBiNmU5NGE5MWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAHVGC4RiiPUG4V0hda5lbBaLRlzsIlNX9rZ4x1SvrZ7qiT43vhDaiE wXJtlWmi02XWDpy1NMFOfw1ys8eK77l+Jtxj18/pMkcqZ9ta+/VEwhXzGpg3CuDH n8CI3wksIUuW8NlBE5q4GUeisShpOXnIbLcMpto33BosnZeRWWvy9FURIbkBhCJ9 mKXTKomQuwXxd9AWTiU8CG/6lZ6G+W45cPLGyrI3w1PEkcp1XhfYidt/uVM+f9/7 4kCvwA7Z7zG5OlNbgE/YnZbTQdoQBqynAXPIEngvsLKThq5jKOAlk0Szecnimw0C NLaMZn0ddyqzhC031ATHNBfQccuaUUc= -----END CERTIFICATE-----Generated at Wed May 13 12:20:57 2026 by rpki-client