$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/406d73de-99a0-3063-a1b8-55eaac44030a.roa File: 406d73de-99a0-3063-a1b8-55eaac44030a.roa (raw, json) Hash identifier: dQe0JgJwUlgfxt1V93YVkloiOkD3079shnuUTXuRNLw= Subject key identifier: F9:BD:D3:F2:FB:7E:E0:7F:76:53:BD:00:AF:E1:53:28:80:33:D7:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF61ED2435ED49480CBEC720 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/406d73de-99a0-3063-a1b8-55eaac44030a.roa Signing time: Tue 12 May 2026 14:51:13 +0000 ROA not before: Tue 12 May 2026 14:51:13 +0000 ROA not after: Mon 10 Aug 2026 14:51:13 +0000 asID: 43515 IP address blocks: 34.191.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:61:ed:24:35:ed:49:48:0c:be:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:51:13 2026 GMT Not After : Aug 10 14:51:13 2026 GMT Subject: CN=e475253a-faec-4ef2-beba-d2e8b0ee6b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:f2:f7:c0:21:90:99:42:a1:fe:6f:84:e4: 45:c4:e4:08:32:ca:95:48:85:3b:db:9b:d1:40:9a: 28:84:0e:ed:43:26:29:0b:cd:69:c8:36:1b:ef:b5: e9:44:bd:ab:e1:06:d6:6c:6a:b1:ed:ab:b5:e4:26: b5:ae:94:e5:0f:50:aa:2c:fb:6f:a4:e6:a8:5b:ae: 08:61:af:d7:69:1e:dc:ca:02:9b:f9:3b:94:98:d0: d3:fa:ae:d8:f9:56:f6:fb:10:b1:84:8c:48:40:2e: 34:43:c3:ef:1f:04:1d:17:19:2f:71:9e:e6:30:54: 4f:df:e3:4e:5d:10:96:d0:14:d3:f0:ff:71:a5:77: 35:df:0c:f0:7f:0b:87:be:a2:94:b3:4f:e1:ed:9d: b0:30:c0:0b:60:d1:9c:7c:20:ff:f9:6c:de:b9:0d: fa:da:8c:09:3a:81:d8:e1:d2:e7:36:d9:ce:bd:ad: 39:46:97:34:4e:41:0a:f1:a2:66:f3:c7:62:85:da: 33:37:4a:7b:36:d3:f7:3d:cd:00:f1:60:a6:17:dc: 14:ed:27:59:64:15:43:3b:08:1d:dd:0e:4b:7e:f5: 1a:3e:48:46:25:97:4e:ad:21:28:97:72:6f:2e:29: 02:56:d1:e3:e1:b1:82:c6:35:28:4a:68:33:df:fc: ac:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:D3:F2:FB:7E:E0:7F:76:53:BD:00:AF:E1:53:28:80:33:D7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/406d73de-99a0-3063-a1b8-55eaac44030a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:60:16:14:6e:13:03:2d:d8:0d:e9:e2:bc:d4:c3:2f:22:c4: b4:29:a2:44:42:cf:0e:b7:4a:aa:de:eb:76:25:65:66:60:a3: a4:16:87:d7:ec:72:45:f5:95:02:f5:b5:a1:9d:fe:37:0e:eb: 26:9d:8c:67:20:71:bf:dd:e3:e9:14:9a:fb:36:85:e3:20:c7: 93:e3:50:17:1a:21:ae:ce:0a:9d:e0:eb:a1:ce:f7:e4:e9:5c: 52:a2:90:78:ad:ae:f3:9d:2d:8a:c0:07:c5:45:3d:21:de:ef: 4b:ad:cc:2f:ae:70:77:5e:72:14:db:63:40:22:c2:b6:f5:1a: 9f:1e:81:59:4e:94:1a:7b:96:a3:60:16:1e:ff:13:f5:13:1d: 63:69:d7:22:dc:ef:b1:a4:7d:56:5d:11:8d:7e:0e:95:39:70: 6f:36:34:08:20:ec:25:56:c4:e1:6b:94:08:0f:2f:bd:54:6b: 55:af:5a:a9:23:44:92:b3:63:b9:5b:2a:6b:2f:d4:ca:84:c1: fd:c8:43:91:b6:df:a5:c7:2e:11:31:0d:db:6c:30:44:df:fa: ac:be:12:ab:f6:c5:87:61:fa:b2:20:42:6c:02:84:97:35:0b: 51:7c:a8:cb:6f:2b:2e:d0:93:af:db:60:c7:31:ac:c1:4f:c7: e7:92:74:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYe0kNe1JSAy+xyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTExM1oXDTI2MDgxMDE0NTExM1owLzEtMCsGA1UEAxMk ZTQ3NTI1M2EtZmFlYy00ZWYyLWJlYmEtZDJlOGIwZWU2YjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotfy98AhkJlCof5vhORFxOQIMsqVSIU725vR QJoohA7tQyYpC81pyDYb77XpRL2r4QbWbGqx7au15Ca1rpTlD1CqLPtvpOaoW64I Ya/XaR7cygKb+TuUmNDT+q7Y+Vb2+xCxhIxIQC40Q8PvHwQdFxkvcZ7mMFRP3+NO XRCW0BTT8P9xpXc13wzwfwuHvqKUs0/h7Z2wMMALYNGcfCD/+WzeuQ362owJOoHY 4dLnNtnOva05Rpc0TkEK8aJm88dihdozN0p7NtP3Pc0A8WCmF9wU7SdZZBVDOwgd 3Q5LfvUaPkhGJZdOrSEol3JvLikCVtHj4bGCxjUoSmgz3/ys0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm90/L7fuB/dlO9AK/hUyiAM9epMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA2ZDczZGUtOTlhMC0z MDYzLWExYjgtNTVlYWFjNDQwMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpgFhRuEwMt2A3p4rzUwy8ixLQpokRCzw63Sqre63YlZWZgo6QWh9fs ckX1lQL1taGd/jcO6yadjGcgcb/d4+kUmvs2heMgx5PjUBcaIa7OCp3g66HO9+Tp XFKikHitrvOdLYrAB8VFPSHe70utzC+ucHdechTbY0Aiwrb1Gp8egVlOlBp7lqNg Fh7/E/UTHWNp1yLc77GkfVZdEY1+DpU5cG82NAgg7CVWxOFrlAgPL71Ua1WvWqkj RJKzY7lbKmsv1MqEwf3IQ5G236XHLhExDdtsMETf+qy+Eqv2xYdh+rIgQmwChJc1 C1F8qMtvKy7Qk6/bYMcxrMFPx+eSdJ4= -----END CERTIFICATE-----Generated at Wed May 13 14:10:35 2026 by rpki-client