$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dc63428-9e99-3bb2-9605-72f68d7c3317.roa File: 3dc63428-9e99-3bb2-9605-72f68d7c3317.roa (raw, json) Hash identifier: 8hJW+HUgax41ttNDyuvpP2SgDKgI1gLI1upaX2P9Blw= Subject key identifier: D3:1C:3D:4B:F3:03:F2:BB:52:2A:CF:69:E4:75:7B:F6:30:0E:7B:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF605CC52DF649CE5B8F6880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dc63428-9e99-3bb2-9605-72f68d7c3317.roa Signing time: Tue 12 May 2026 14:48:04 +0000 ROA not before: Tue 12 May 2026 14:48:04 +0000 ROA not after: Mon 10 Aug 2026 14:48:04 +0000 asID: 43515 IP address blocks: 34.2.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:60:5c:c5:2d:f6:49:ce:5b:8f:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:48:04 2026 GMT Not After : Aug 10 14:48:04 2026 GMT Subject: CN=08e743c4-68fc-4782-aed1-f59876372bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:6a:4b:5a:6c:87:aa:e8:75:56:1f:ec:f1: 25:8a:8b:54:9a:0a:8c:64:ec:02:39:ca:fd:0a:b0: 52:46:52:51:31:86:ad:f3:5d:e3:15:9e:e2:b7:d5: 5e:bc:c1:27:60:c4:60:82:f6:a6:29:ad:14:1b:57: 1e:ee:d2:10:0b:2a:3f:89:25:35:6c:75:b5:28:d8: 71:cd:41:d4:79:86:79:c2:f3:c1:2f:09:9b:73:c5: 72:b2:fa:82:e7:ae:06:78:d0:56:b1:da:6c:4c:77: 16:c5:f5:69:4c:1f:69:06:43:2a:41:0a:83:3d:bd: c9:2e:3a:a2:ac:4a:81:5f:01:00:2e:69:13:94:04: 46:f8:7f:b6:1c:42:ee:23:51:9c:d8:48:66:a0:0b: 98:dc:ac:40:65:c3:40:66:34:d7:14:84:63:c6:bc: 4c:ac:0c:8e:f1:6b:40:37:c5:44:f9:b5:87:9e:b6: f7:a6:ed:12:80:1f:5f:be:75:55:c3:1f:e6:7b:1d: cf:24:9b:8d:df:a2:a3:f0:dc:af:cf:b0:8e:c3:98: 2f:5d:65:c4:fb:83:5f:78:db:1d:91:5e:39:d6:6d: 98:e7:d1:1f:a9:36:bb:2e:3c:45:49:b7:ed:04:7b: 2b:58:b7:17:4f:66:59:9f:46:14:23:43:6e:5e:ea: c7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:3D:4B:F3:03:F2:BB:52:2A:CF:69:E4:75:7B:F6:30:0E:7B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dc63428-9e99-3bb2-9605-72f68d7c3317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3b:8a:84:0c:21:b6:4b:39:5e:6e:6b:52:16:b7:75:74:c2: 72:28:95:84:95:80:b6:20:bc:db:42:88:40:20:0a:53:a7:00: ff:bb:d3:0f:e6:90:16:bd:4f:1c:26:a9:01:d4:4f:0d:00:2f: 3d:6f:99:a9:31:6f:62:44:be:fa:09:a6:eb:93:3e:19:81:61: a6:5b:41:aa:d7:d5:b7:fb:e6:0f:8a:f9:e3:75:07:c5:6e:4c: 1c:df:8c:10:50:5f:d2:8b:e9:9e:cb:23:3e:57:15:29:2a:e2: 37:94:73:0e:72:06:2a:de:ef:f9:6e:d7:9a:da:f5:11:3d:ea: b2:b5:97:8e:82:3c:7d:0e:d5:d3:8a:e0:e5:62:c0:f9:57:96: 45:f6:c3:b7:0f:04:ea:8f:e4:68:22:51:6d:71:29:31:d0:a6: 4e:46:6d:5d:94:d8:35:45:10:53:6f:31:a1:6d:ff:b5:c4:84: ee:ef:65:5e:e4:ed:39:41:1e:45:e3:24:52:5a:2a:1a:ec:d1: a2:50:d7:24:05:54:f3:13:d4:24:34:54:29:9d:d0:99:ea:67: ed:1e:c6:6c:1a:78:24:e5:ca:58:d2:f8:f2:9b:05:7e:5f:65: 2a:48:da:d1:2b:32:01:40:ca:8e:2c:c4:b7:c8:57:d9:e9:19: 6b:64:8b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYFzFLfZJzluPaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NDgwNFoXDTI2MDgxMDE0NDgwNFowLzEtMCsGA1UEAxMk MDhlNzQzYzQtNjhmYy00NzgyLWFlZDEtZjU5ODc2MzcyYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl81qS1psh6rodVYf7PEliotUmgqMZOwCOcr9 CrBSRlJRMYat813jFZ7it9VevMEnYMRggvamKa0UG1ce7tIQCyo/iSU1bHW1KNhx zUHUeYZ5wvPBLwmbc8VysvqC564GeNBWsdpsTHcWxfVpTB9pBkMqQQqDPb3JLjqi rEqBXwEALmkTlARG+H+2HELuI1Gc2EhmoAuY3KxAZcNAZjTXFIRjxrxMrAyO8WtA N8VE+bWHnrb3pu0SgB9fvnVVwx/mex3PJJuN36Kj8Nyvz7COw5gvXWXE+4NfeNsd kV451m2Y59EfqTa7LjxFSbftBHsrWLcXT2ZZn0YUI0NuXurHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMcPUvzA/K7UirPaeR1e/YwDntxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2RjNjM0MjgtOWU5OS0z YmIyLTk2MDUtNzJmNjhkN2MzMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY7ioQMIbZLOV5ua1IWt3V0wnIolYSVgLYgvNtCiEAgClOnAP+70w/m kBa9TxwmqQHUTw0ALz1vmakxb2JEvvoJpuuTPhmBYaZbQarX1bf75g+K+eN1B8Vu TBzfjBBQX9KL6Z7LIz5XFSkq4jeUcw5yBire7/lu15ra9RE96rK1l46CPH0O1dOK 4OViwPlXlkX2w7cPBOqP5GgiUW1xKTHQpk5GbV2U2DVFEFNvMaFt/7XEhO7vZV7k 7TlBHkXjJFJaKhrs0aJQ1yQFVPMT1CQ0VCmd0JnqZ+0exmwaeCTlyljS+PKbBX5f ZSpI2tErMgFAyo4sxLfIV9npGWtkiww= -----END CERTIFICATE-----Generated at Wed May 13 13:24:09 2026 by rpki-client