$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22f69b62-757a-35ba-9d2e-13581fc74a90.roa File: 22f69b62-757a-35ba-9d2e-13581fc74a90.roa (raw, json) Hash identifier: CbHd4HYVUfyil0ExpP9aeabA+7ucdFORQ567+dojsDM= Subject key identifier: A3:2A:20:6C:00:E5:FB:53:F0:41:07:BE:00:6F:78:9E:77:8C:E1:66 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA7485501F90C08A477900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22f69b62-757a-35ba-9d2e-13581fc74a90.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19527 IP address blocks: 34.190.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:74:85:50:1f:90:c0:8a:47:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=e406fd25-4412-4da2-891a-e68f3b91464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:37:e3:22:a8:e0:70:b5:7f:90:f8:0a:5a:3a: 3d:2e:0c:98:d7:88:08:05:90:0f:fd:f3:61:85:b7: 04:80:2c:be:55:2f:bf:34:37:45:ad:3c:62:32:ee: 04:40:58:fe:0c:d4:7b:14:ab:a4:77:cc:2c:a3:70: 79:cb:16:99:b9:40:77:6d:27:d8:3b:70:42:5c:18: 8f:ac:a2:03:60:24:03:99:be:ed:39:61:3a:5a:c3: 1e:88:70:d6:8c:10:db:16:9c:8c:61:d5:d6:50:7b: 1a:2f:2b:bb:8b:cf:0d:d0:c1:8c:cf:42:6f:51:b1: 3c:4e:5a:9b:95:be:98:9b:eb:41:7c:ec:1b:4e:87: b4:1f:b7:8f:29:69:a3:ae:28:18:87:2f:a9:5f:31: 71:78:17:5a:ef:4c:c1:13:39:cb:a2:c2:dc:a3:a0: 8e:61:46:74:46:4b:54:b2:e0:5a:5c:9e:7b:00:9a: 9b:ed:1d:3e:3e:cb:a7:b1:70:0d:95:53:f0:b4:a0: 3a:8c:f4:10:29:09:0b:c7:d0:1c:43:eb:8d:dc:b6: 2d:6e:63:fc:37:7a:21:bb:94:c4:40:cc:37:fb:69: ce:c6:9b:cd:d2:2a:5e:44:fe:ff:4d:41:85:88:69: e1:c1:80:4c:fa:38:e6:22:8d:da:2a:ef:6b:61:7b: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:20:6C:00:E5:FB:53:F0:41:07:BE:00:6F:78:9E:77:8C:E1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22f69b62-757a-35ba-9d2e-13581fc74a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:40:d1:16:5c:79:8c:91:39:2f:63:ca:51:08:81:43:ec:d9: ea:43:d5:fb:74:6d:54:8b:c8:f4:52:8e:99:f1:e7:aa:19:55: 33:d2:da:e5:37:f9:3c:91:78:72:15:93:8b:da:ad:10:f5:c1: a3:1a:08:d8:74:2e:44:72:a9:54:c2:dc:56:ca:74:2a:55:0f: e3:64:a8:4e:18:fc:6e:74:8e:e9:2f:a5:76:6d:21:51:4c:b6: 98:2a:c9:7c:bb:bd:65:7e:81:2f:5f:92:f9:ce:7b:6c:e3:a3: ab:63:64:e2:3e:7b:10:56:e7:71:f4:d8:fb:53:bc:cf:cc:1c: 25:f2:d3:07:50:50:f8:bb:69:0d:7e:7c:51:43:7c:fa:cf:b8: e0:31:c4:76:e6:f1:23:0d:f7:e4:e9:4f:b1:62:d9:04:88:81: 2c:de:33:56:65:a4:45:c1:d6:8f:4c:ae:ed:25:7f:e3:c5:02: bd:a2:3e:ff:90:f0:b4:01:c0:05:8b:05:bc:ef:e9:36:03:13: 22:4b:de:20:48:fc:54:92:e2:2a:c5:73:e9:72:30:af:45:ff: f1:5a:7b:91:8e:29:9e:a2:41:ce:2b:d9:a9:7a:a3:0b:f2:91: 9d:83:57:52:7f:45:e8:fe:28:bd:f5:3e:4a:d0:5e:20:c2:78: 6d:e2:25:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nSFUB+QwIpHeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZTQwNmZkMjUtNDQxMi00ZGEyLTg5MWEtZTY4ZjNiOTE0NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjfjIqjgcLV/kPgKWjo9LgyY14gIBZAP/fNh hbcEgCy+VS+/NDdFrTxiMu4EQFj+DNR7FKukd8wso3B5yxaZuUB3bSfYO3BCXBiP rKIDYCQDmb7tOWE6WsMeiHDWjBDbFpyMYdXWUHsaLyu7i88N0MGMz0JvUbE8Tlqb lb6Ym+tBfOwbToe0H7ePKWmjrigYhy+pXzFxeBda70zBEznLosLco6COYUZ0RktU suBaXJ57AJqb7R0+PsunsXANlVPwtKA6jPQQKQkLx9AcQ+uN3LYtbmP8N3ohu5TE QMw3+2nOxpvN0ipeRP7/TUGFiGnhwYBM+jjmIo3aKu9rYXtjuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMqIGwA5ftT8EEHvgBveJ53jOFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjJmNjliNjItNzU3YS0z NWJhLTlkMmUtMTM1ODFmYzc0YTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZA0RZceYyROS9jylEIgUPs2epD1ft0bVSLyPRSjpnx56oZVTPS2uU3 +TyReHIVk4varRD1waMaCNh0LkRyqVTC3FbKdCpVD+NkqE4Y/G50jukvpXZtIVFM tpgqyXy7vWV+gS9fkvnOe2zjo6tjZOI+exBW53H02PtTvM/MHCXy0wdQUPi7aQ1+ fFFDfPrPuOAxxHbm8SMN9+TpT7Fi2QSIgSzeM1ZlpEXB1o9Mru0lf+PFAr2iPv+Q 8LQBwAWLBbzv6TYDEyJL3iBI/FSS4irFc+lyMK9F//Fae5GOKZ6iQc4r2al6owvy kZ2DV1J/Rej+KL31PkrQXiDCeG3iJcU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:47:08 2026 by rpki-client