$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33820425-9c2c-3550-8b95-cacae3126460.roa File: 33820425-9c2c-3550-8b95-cacae3126460.roa (raw, json) Hash identifier: IHd8IzM1/66LcTDSAQznM/rWzCPJADYKkhq5WZqS5qk= Subject key identifier: 3B:9A:C4:85:9E:45:40:AE:9F:41:72:DD:C9:A1:29:52:E6:AE:FD:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA709D283A885C81AD5F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33820425-9c2c-3550-8b95-cacae3126460.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19527 IP address blocks: 34.191.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:70:9d:28:3a:88:5c:81:ad:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=cd9f3580-4098-4c70-8f19-3d6a1f90ee93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:70:e7:c1:8c:f5:30:83:d7:18:ab:40:da:d7: 77:4c:06:f4:6a:a7:22:50:5c:3c:1e:44:8a:f0:5e: 60:cf:10:b9:a9:ec:c3:81:21:7d:2a:a3:2a:00:96: 30:ce:38:0e:af:e0:13:d3:39:7b:70:2a:8a:84:54: ce:05:4f:e7:cc:73:15:be:78:58:de:9e:fa:13:9d: 83:24:aa:f3:58:33:03:40:ea:08:fd:06:37:eb:84: 2a:20:ed:92:fc:02:e3:ab:35:5d:c3:1b:ce:3e:42: b1:a0:13:61:f2:b4:e7:5d:1f:38:66:49:c7:1f:de: 3e:dc:c1:17:69:ea:4a:c4:d0:76:6f:21:eb:32:22: 0e:a0:7d:f5:82:c5:f2:51:16:fe:55:84:d6:97:a6: ca:27:8e:83:21:7c:bc:ae:e8:a3:b3:93:c4:92:ac: 35:54:6f:74:d6:1f:ea:82:bf:ba:66:1a:12:68:d8: 30:84:af:cb:8d:1d:3f:ab:2d:ed:20:d0:5e:01:a2: b3:46:21:18:fa:2a:09:b9:8d:c2:d0:20:f5:a2:67: b4:b7:6b:cb:e9:f5:05:6a:98:6b:81:77:41:fa:11: 55:83:e7:35:7a:18:0a:3d:a2:21:6c:c0:99:93:9b: c6:93:4e:8f:8e:a3:44:25:bb:18:53:c8:78:49:97: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:C4:85:9E:45:40:AE:9F:41:72:DD:C9:A1:29:52:E6:AE:FD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33820425-9c2c-3550-8b95-cacae3126460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:df:68:a6:88:b9:7d:ba:b2:cf:ff:bb:0f:c2:ed:5a:72:0e: a0:f3:9a:39:7d:c5:a4:68:ae:15:61:d3:60:64:52:5d:5a:84: 58:ff:1a:5a:97:0b:20:ec:85:78:8b:63:fe:b8:48:dc:26:92: aa:65:95:9b:5e:db:eb:5a:ec:34:dc:7e:97:de:f2:3d:c0:ff: c3:e2:8a:82:ca:02:68:d1:a7:05:96:fa:9a:cc:ab:c7:0a:e2: 94:a1:dc:72:f9:dd:58:11:0d:9d:f0:3e:27:56:39:b3:1e:f3: fb:4a:2d:bd:44:ec:62:01:94:e5:49:ce:c0:ca:44:49:83:74: e1:e6:f5:73:2b:e9:26:e5:03:c6:a2:8e:3d:bc:ff:55:8b:04: c1:82:87:c6:f1:87:9f:b6:37:81:8c:d5:a4:dc:80:b9:10:1e: 58:1b:9e:fe:ce:c7:9b:f4:61:58:9d:9d:36:0d:6a:14:96:8b: 38:07:0a:95:55:69:68:ca:65:69:84:83:e6:e3:5e:73:2d:44: ed:ad:a4:3d:59:2a:d3:f1:1a:15:f9:87:2f:6b:9b:81:94:0e: ca:ab:cc:56:c2:52:b6:bf:22:11:36:ae:86:94:bb:7d:55:e2: 41:8b:68:cf:1e:c3:2f:4f:e7:fb:52:8a:70:02:8e:57:24:06: 32:21:f5:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nCdKDqIXIGtXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2Q5ZjM1ODAtNDA5OC00YzcwLThmMTktM2Q2YTFmOTBlZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3DnwYz1MIPXGKtA2td3TAb0aqciUFw8HkSK 8F5gzxC5qezDgSF9KqMqAJYwzjgOr+AT0zl7cCqKhFTOBU/nzHMVvnhY3p76E52D JKrzWDMDQOoI/QY364QqIO2S/ALjqzVdwxvOPkKxoBNh8rTnXR84ZknHH94+3MEX aepKxNB2byHrMiIOoH31gsXyURb+VYTWl6bKJ46DIXy8ruijs5PEkqw1VG901h/q gr+6ZhoSaNgwhK/LjR0/qy3tINBeAaKzRiEY+ioJuY3C0CD1ome0t2vL6fUFaphr gXdB+hFVg+c1ehgKPaIhbMCZk5vGk06PjqNEJbsYU8h4SZdooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuaxIWeRUCun0Fy3cmhKVLmrv3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzM4MjA0MjUtOWMyYy0z NTUwLThiOTUtY2FjYWUzMTI2NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr84MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7faKaIuX26ss//uw/C7VpyDqDzmjl9xaRorhVh02BkUl1ahFj/GlqX CyDshXiLY/64SNwmkqpllZte2+ta7DTcfpfe8j3A/8PiioLKAmjRpwWW+prMq8cK 4pSh3HL53VgRDZ3wPidWObMe8/tKLb1E7GIBlOVJzsDKREmDdOHm9XMr6SblA8ai jj28/1WLBMGCh8bxh5+2N4GM1aTcgLkQHlgbnv7Ox5v0YVidnTYNahSWizgHCpVV aWjKZWmEg+bjXnMtRO2tpD1ZKtPxGhX5hy9rm4GUDsqrzFbCUra/IhE2roaUu31V 4kGLaM8ewy9P5/tSinACjlckBjIh9VI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:56 2026 by rpki-client