$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa File: 3fb55c58-0b19-35cf-a572-501263f0b63e.roa (raw, json) Hash identifier: S+631zsLZW2zXwwnyjNpFSOEI+VEaSSdOg54xmNJKIM= Subject key identifier: E7:57:3F:6A:9C:AE:7F:21:CC:82:98:73:D1:4E:0A:78:3D:FF:C9:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF64A408E4DF641178955700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa Signing time: Tue 12 May 2026 14:56:41 +0000 ROA not before: Tue 12 May 2026 14:56:41 +0000 ROA not after: Mon 10 Aug 2026 14:56:41 +0000 asID: 396982 IP address blocks: 34.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:64:a4:08:e4:df:64:11:78:95:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:56:41 2026 GMT Not After : Aug 10 14:56:41 2026 GMT Subject: CN=a4c50486-b62f-4213-9944-8251dd05e30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:fe:98:a4:68:ba:db:4e:c9:d9:e1:a1:59: c7:0a:6f:67:ab:62:d6:15:bf:32:de:20:c3:14:17: 4d:19:a7:b9:5e:82:f6:46:94:92:29:af:8b:54:70: 48:25:e0:71:f1:42:d6:15:f2:8b:49:75:a0:16:0e: df:20:c9:ce:39:31:89:aa:0b:23:be:aa:eb:52:a1: 60:b5:6a:bb:1a:a3:5e:66:f8:8f:1e:8f:80:e6:06: 44:1a:98:14:57:41:08:8e:7e:1c:f4:cd:13:34:31: df:a3:23:47:f1:4e:56:1b:39:31:f7:e8:bc:68:44: 55:d7:6f:28:15:0c:ab:58:58:8f:6a:88:3a:a1:5e: 2b:18:0e:0a:5d:08:74:49:07:a7:bf:13:9e:fc:e5: 1d:f1:04:8e:8d:dc:73:b7:43:2d:40:7b:e9:2c:05: ad:96:aa:47:04:16:96:42:f3:05:db:40:72:1c:2b: 8c:e0:53:f2:cc:6d:59:5e:bb:f0:64:74:46:60:17: f8:55:62:76:47:de:75:c2:90:fc:21:f6:8a:aa:f9: 9a:df:1c:8a:26:a3:89:73:5d:f5:62:1c:c7:b8:96: 77:d9:64:81:8f:0d:58:a9:59:6e:a6:cc:08:d1:4c: 1b:43:b7:4f:df:c9:49:25:ed:1e:32:ff:1d:1e:f6: b0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:3F:6A:9C:AE:7F:21:CC:82:98:73:D1:4E:0A:78:3D:FF:C9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fc:97:11:4a:ae:db:86:92:da:5c:50:7e:27:fe:ae:fe:32: a4:08:1f:43:c5:c9:5b:6a:27:95:bc:2f:95:14:2b:f2:87:9c: ed:2e:f1:93:17:bf:58:da:64:c2:4d:88:4f:67:12:cb:3a:51: 93:42:a8:99:de:9d:7b:76:dc:f0:71:a9:b6:27:b3:68:5f:ba: 69:4e:fe:4f:68:e3:72:43:2d:a7:6f:6c:c4:76:b6:bc:73:83: 09:8b:2d:8f:03:6d:bc:1a:fd:c9:09:fe:c6:1e:e2:d9:e2:77: 33:97:ac:f2:06:dd:53:93:b7:29:a0:d0:81:60:fc:c2:3a:04: e3:2b:8a:0f:e1:b7:9d:19:a5:20:12:c0:d9:9e:58:da:b3:4b: 16:ce:e8:98:cf:03:b3:3b:f6:6f:6a:11:0b:fc:21:07:6a:29: 1b:9b:23:26:61:22:cb:64:af:1d:75:fc:53:20:c4:28:b0:04: 88:49:65:fb:04:cb:a5:10:3e:64:86:62:b0:44:c3:b5:d7:41: 84:79:1a:c8:23:ea:c6:30:dd:12:b1:80:78:27:6e:9a:88:a7: fa:27:e9:37:fb:79:4c:98:9f:01:4b:da:8f:cc:6b:ff:30:0a: fd:50:d5:f2:a0:35:f6:ea:dd:49:30:2e:c7:2b:00:f0:6c:7d: 01:94:81:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PZKQI5N9kEXiVVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTY0MVoXDTI2MDgxMDE0NTY0MVowLzEtMCsGA1UEAxMk YTRjNTA0ODYtYjYyZi00MjEzLTk5NDQtODI1MWRkMDVlMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilv+mKRouttOydnhoVnHCm9nq2LWFb8y3iDD FBdNGae5XoL2RpSSKa+LVHBIJeBx8ULWFfKLSXWgFg7fIMnOOTGJqgsjvqrrUqFg tWq7GqNeZviPHo+A5gZEGpgUV0EIjn4c9M0TNDHfoyNH8U5WGzkx9+i8aERV128o FQyrWFiPaog6oV4rGA4KXQh0SQenvxOe/OUd8QSOjdxzt0MtQHvpLAWtlqpHBBaW QvMF20ByHCuM4FPyzG1ZXrvwZHRGYBf4VWJ2R951wpD8IfaKqvma3xyKJqOJc131 YhzHuJZ32WSBjw1YqVlupswI0UwbQ7dP38lJJe0eMv8dHvawJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdXP2qcrn8hzIKYc9FOCng9/8kyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiNTVjNTgtMGIxOS0z NWNmLWE1NzItNTAxMjYzZjBiNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn8lxFKrtuGktpcUH4n/q7+MqQIH0PFyVtqJ5W8L5UUK/KHnO0u8ZMX v1jaZMJNiE9nEss6UZNCqJnenXt23PBxqbYns2hfumlO/k9o43JDLadvbMR2trxz gwmLLY8Dbbwa/ckJ/sYe4tnidzOXrPIG3VOTtymg0IFg/MI6BOMrig/ht50ZpSAS wNmeWNqzSxbO6JjPA7M79m9qEQv8IQdqKRubIyZhIstkrx11/FMgxCiwBIhJZfsE y6UQPmSGYrBEw7XXQYR5Gsgj6sYw3RKxgHgnbpqIp/on6Tf7eUyYnwFL2o/Ma/8w Cv1Q1fKgNfbq3UkwLscrAPBsfQGUgaU= -----END CERTIFICATE-----Generated at Wed May 13 13:24:01 2026 by rpki-client