$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21e09e98-93a9-30e2-9161-1c5bd8233094.roa File: 21e09e98-93a9-30e2-9161-1c5bd8233094.roa (raw, json) Hash identifier: BF92U93P5/ZCCkZ+GdGQK4zX/oDX0cfA8qZs7YiZeac= Subject key identifier: 0E:9D:2B:4C:0A:F7:6C:AF:77:1A:17:8E:3C:71:98:E5:82:4D:AC:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA686E752AB33328F78240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21e09e98-93a9-30e2-9161-1c5bd8233094.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19527 IP address blocks: 34.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:68:6e:75:2a:b3:33:28:f7:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8a443899-234f-4fe6-8626-bd14dc45fc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:cf:14:d6:16:11:76:ac:20:ad:86:e9:05: 46:95:1e:8c:1a:92:b5:e6:f3:c8:37:bb:a4:24:56: 29:96:85:ff:7d:fd:18:93:f3:55:01:97:70:5d:bd: 14:2c:8b:7d:f6:d1:3a:d9:95:c3:05:ea:5a:5d:71: 35:ec:47:30:b1:4b:00:d3:c0:ee:3f:6b:3f:a4:20: c7:3d:9b:05:9c:89:08:ae:63:ea:25:f6:f4:ce:69: 82:34:3e:c8:1b:88:aa:22:a9:29:a8:c6:09:63:59: 00:1d:42:e2:c0:2e:1c:4d:0c:b4:5d:6f:4e:d6:74: bd:9f:dd:6b:4d:6a:f3:48:b3:d5:da:b0:4a:d4:4a: f7:86:f4:78:d9:d4:a1:81:46:ac:43:d6:e0:0a:a7: 99:38:53:01:5d:9e:cf:c4:65:77:c3:7c:50:61:47: e2:96:81:c3:f7:64:c8:b5:0a:ab:08:9f:84:fb:e8: 07:e2:2b:82:82:9c:e9:00:af:fa:3f:3e:2a:68:63: 3b:55:a5:38:87:02:06:45:bd:db:20:29:56:5c:74: e6:f7:94:9e:de:0b:e2:9c:9e:ec:e5:d8:f9:fd:26: 48:ed:8a:92:b4:40:bc:09:ff:b4:42:8a:fe:09:11: 06:7d:10:e4:d6:ea:e1:15:6a:9d:20:72:20:29:21: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9D:2B:4C:0A:F7:6C:AF:77:1A:17:8E:3C:71:98:E5:82:4D:AC:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21e09e98-93a9-30e2-9161-1c5bd8233094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d8:12:a0:13:f0:9b:1b:ae:d8:91:0f:ef:79:66:74:0c:4c: 4e:a2:39:71:2a:90:27:1a:d0:1a:70:c6:66:a3:c6:6f:9a:bf: 32:4f:08:59:08:1a:03:87:93:5e:2f:b9:c7:99:11:4a:4f:60: 5e:22:29:87:85:5a:59:65:fa:1b:02:5b:bf:ad:ef:e4:15:5a: b8:58:6f:3a:ec:e1:44:f0:46:06:f2:6f:d2:93:f5:9a:0e:cd: 79:fb:47:94:01:79:3a:17:d3:48:f7:15:4e:5d:c3:8f:00:6d: 34:78:52:89:70:c8:03:88:d9:f0:9e:93:18:41:6e:20:f5:8c: 8d:1c:96:19:94:5a:ec:d4:46:58:d5:af:1c:fc:d0:af:9f:49: 31:1d:6f:e0:3c:de:fb:6d:b5:d8:49:b4:8c:eb:6d:d3:7e:21: e3:97:9a:85:a9:91:44:f3:3e:c6:67:48:a0:00:6b:ff:52:29: ca:ca:57:a8:70:30:08:a8:ac:7d:4b:6e:f0:48:9f:34:25:75: 5b:54:dd:22:41:20:6d:8e:59:1b:42:0e:98:49:6f:3a:51:4d: 10:64:21:f9:5b:ce:4b:cb:ce:07:73:29:56:d3:ce:b3:77:da: bd:87:8e:0c:93:f4:0a:1d:dd:87:93:3f:0b:2a:fd:06:19:98: b4:86:63:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mhudSqzMyj3gkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OGE0NDM4OTktMjM0Zi00ZmU2LTg2MjYtYmQxNGRjNDVmYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzTPFNYWEXasIK2G6QVGlR6MGpK15vPIN7uk JFYploX/ff0Yk/NVAZdwXb0ULIt99tE62ZXDBepaXXE17EcwsUsA08DuP2s/pCDH PZsFnIkIrmPqJfb0zmmCND7IG4iqIqkpqMYJY1kAHULiwC4cTQy0XW9O1nS9n91r TWrzSLPV2rBK1Er3hvR42dShgUasQ9bgCqeZOFMBXZ7PxGV3w3xQYUfiloHD92TI tQqrCJ+E++gH4iuCgpzpAK/6Pz4qaGM7VaU4hwIGRb3bIClWXHTm95Se3gvinJ7s 5dj5/SZI7YqStEC8Cf+0Qor+CREGfRDk1urhFWqdIHIgKSF3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6dK0wK92yvdxoXjjxxmOWCTawzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjFlMDllOTgtOTNhOS0z MGUyLTkxNjEtMWM1YmQ4MjMzMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATYEqAT8JsbrtiRD+95ZnQMTE6iOXEqkCca0Bpwxmajxm+avzJPCFkI GgOHk14vuceZEUpPYF4iKYeFWlll+hsCW7+t7+QVWrhYbzrs4UTwRgbyb9KT9ZoO zXn7R5QBeToX00j3FU5dw48AbTR4UolwyAOI2fCekxhBbiD1jI0clhmUWuzURljV rxz80K+fSTEdb+A83vtttdhJtIzrbdN+IeOXmoWpkUTzPsZnSKAAa/9SKcrKV6hw MAiorH1LbvBInzQldVtU3SJBIG2OWRtCDphJbzpRTRBkIflbzkvLzgdzKVbTzrN3 2r2HjgyT9Aod3YeTPwsq/QYZmLSGY7A= -----END CERTIFICATE-----Generated at Thu Mar 26 20:11:44 2026 by rpki-client