$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/405fcc96-c1d5-329e-b5fc-eb174f26c299.roa File: 405fcc96-c1d5-329e-b5fc-eb174f26c299.roa (raw, json) Hash identifier: g9xfhE4TinQ0RNlgJja/yrlHkn05dHPWndqNlT3m4wU= Subject key identifier: 1D:43:EA:DC:B2:B4:80:96:E4:0A:54:BF:0E:5C:A0:42:90:A3:CE:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF64E22907E81A6B2BBE1BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/405fcc96-c1d5-329e-b5fc-eb174f26c299.roa Signing time: Tue 12 May 2026 14:57:10 +0000 ROA not before: Tue 12 May 2026 14:57:10 +0000 ROA not after: Mon 10 Aug 2026 14:57:10 +0000 asID: 396982 IP address blocks: 34.191.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:64:e2:29:07:e8:1a:6b:2b:be:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:57:10 2026 GMT Not After : Aug 10 14:57:10 2026 GMT Subject: CN=b33f78a8-76e4-4fbd-80be-d4e0352d0e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:83:c2:95:6c:d1:04:89:33:2a:0d:98:e1:f7: 56:38:3f:da:58:27:03:6b:b3:0e:05:42:cb:00:5b: 7d:d1:39:8f:79:68:a4:ae:f3:6d:c3:9f:93:7c:41: d5:8f:5a:20:80:42:24:7c:63:0e:23:b1:af:b0:4d: 4c:3b:0f:c6:b2:50:a0:13:f8:0b:5b:80:50:86:4b: 78:ad:e0:0a:b7:4c:53:3e:33:3a:61:c2:f0:5a:6f: 00:39:07:94:47:a2:6e:dc:de:4e:15:a4:a7:12:a3: 40:1e:d1:15:b1:f5:ef:36:85:04:48:b9:cc:d4:78: c4:28:70:c1:16:57:73:00:7a:68:ed:44:13:14:dd: aa:de:76:bb:94:e1:d0:77:18:db:03:f0:5b:26:99: ac:9d:49:c5:cf:53:f2:d5:23:47:19:2e:76:cb:e6: 0e:6b:6d:9d:1e:1b:49:72:0e:60:71:7d:ed:f8:8f: ef:c2:dc:b7:61:fa:a4:3e:84:e1:20:21:7a:a0:1a: 53:bf:37:5e:20:29:60:9a:84:13:31:ae:cf:64:de: b7:df:c1:5b:36:d3:d7:72:00:5b:84:ac:30:33:20: 81:1e:28:fe:c6:5a:5e:be:00:07:87:85:fd:2e:d9: 4b:ad:d9:7a:63:6f:21:d1:3f:ef:e7:c3:83:a9:5f: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:43:EA:DC:B2:B4:80:96:E4:0A:54:BF:0E:5C:A0:42:90:A3:CE:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/405fcc96-c1d5-329e-b5fc-eb174f26c299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:59:b9:e3:79:45:83:ab:13:e9:1c:6e:9d:f4:d7:b7:23:1b: 9a:2f:b0:12:eb:e9:4e:de:2e:5c:01:6d:00:64:bc:13:d6:75: 4d:04:a7:87:8f:dd:ef:0b:2b:bd:3c:6f:ae:b5:ec:c7:ab:97: 99:a1:78:e2:cf:13:c1:65:b1:ed:28:fd:f9:74:47:cd:29:e1: 45:12:5b:9f:c1:98:56:88:ba:62:a8:15:a9:06:3b:10:95:7f: 11:84:3c:a9:24:d9:8d:15:13:40:85:f3:a3:10:b7:a2:78:47: 7f:a6:a4:e3:fe:11:68:ce:7b:cd:76:93:a0:06:e7:95:79:94: f7:97:97:5c:d0:3d:dc:a0:c4:19:9b:97:cd:30:df:bb:e5:24: 21:bd:f2:b7:21:6f:a5:0e:16:22:0f:6d:50:14:36:bf:d6:11: 00:a3:ea:cc:8e:35:dd:db:6c:21:81:79:7d:ea:02:2a:c9:e2: e9:31:d1:62:9a:d3:4f:25:f2:c5:67:0c:c1:6f:d4:a7:72:ec: 1c:b4:36:3e:14:6a:e5:e2:c3:5d:9a:f9:3e:aa:a0:5f:78:9d: 52:c7:63:05:c6:09:c8:89:f6:d8:22:d4:3a:49:09:22:d0:30: e5:ce:4e:aa:c3:0a:88:8d:00:56:0f:22:f5:5d:e4:09:0d:2d: 5d:e3:13:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PZOIpB+gaayu+G8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTcxMFoXDTI2MDgxMDE0NTcxMFowLzEtMCsGA1UEAxMk YjMzZjc4YTgtNzZlNC00ZmJkLTgwYmUtZDRlMDM1MmQwZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoPClWzRBIkzKg2Y4fdWOD/aWCcDa7MOBULL AFt90TmPeWikrvNtw5+TfEHVj1oggEIkfGMOI7GvsE1MOw/GslCgE/gLW4BQhkt4 reAKt0xTPjM6YcLwWm8AOQeUR6Ju3N5OFaSnEqNAHtEVsfXvNoUESLnM1HjEKHDB FldzAHpo7UQTFN2q3na7lOHQdxjbA/BbJpmsnUnFz1Py1SNHGS52y+YOa22dHhtJ cg5gcX3t+I/vwty3YfqkPoThICF6oBpTvzdeIClgmoQTMa7PZN6338FbNtPXcgBb hKwwMyCBHij+xlpevgAHh4X9LtlLrdl6Y28h0T/v58ODqV9QWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1D6tyytICW5ApUvw5coEKQo85fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA1ZmNjOTYtYzFkNS0z MjllLWI1ZmMtZWIxNzRmMjZjMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdZueN5RYOrE+kcbp3017cjG5ovsBLr6U7eLlwBbQBkvBPWdU0Ep4eP 3e8LK708b6617Merl5mheOLPE8Flse0o/fl0R80p4UUSW5/BmFaIumKoFakGOxCV fxGEPKkk2Y0VE0CF86MQt6J4R3+mpOP+EWjOe812k6AG55V5lPeXl1zQPdygxBmb l80w37vlJCG98rchb6UOFiIPbVAUNr/WEQCj6syONd3bbCGBeX3qAirJ4ukx0WKa 008l8sVnDMFv1Kdy7By0Nj4UauXiw12a+T6qoF94nVLHYwXGCciJ9tgi1DpJCSLQ MOXOTqrDCoiNAFYPIvVd5AkNLV3jEyc= -----END CERTIFICATE-----Generated at Wed May 13 14:13:58 2026 by rpki-client