$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c49511-4966-319b-aac9-f48e28f14587.roa File: 50c49511-4966-319b-aac9-f48e28f14587.roa (raw, json) Hash identifier: 9r8oS+OhZ1v/B2Fi4QwJDqoBeRQK121WKfBkpchWht8= Subject key identifier: D2:38:F3:E6:E6:28:59:6C:8B:E3:B9:CD:5F:6E:CA:4A:A4:E2:0E:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA63D8D9F6AA211D94B180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c49511-4966-319b-aac9-f48e28f14587.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 15169 IP address blocks: 34.191.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:63:d8:d9:f6:aa:21:1d:94:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=885b5e01-fdae-413a-ad20-ac23a16040af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:d6:08:2d:6f:40:20:bf:58:78:4c:d2:99: 2e:3e:2e:18:4e:2a:bc:f8:71:bf:39:45:eb:b3:d0: e7:db:5b:d1:ca:91:df:70:cc:b8:01:85:9a:a1:30: 5b:0e:60:a1:e8:9e:b9:60:02:07:de:5a:b5:55:db: bf:8c:cd:0f:bf:16:63:7f:2e:f8:58:65:5b:fb:67: fc:c4:18:0e:b9:12:13:4f:23:0f:c1:80:4e:a1:76: 32:f2:bf:e0:92:a8:26:8b:51:42:38:9a:33:04:1f: 1b:4b:9b:96:94:b4:d8:52:ee:59:69:18:41:10:9a: 7a:4d:d8:44:89:ff:de:07:27:92:5d:94:e6:e8:0e: a9:9e:63:ff:6a:18:15:14:3f:a9:9d:b4:7b:88:5f: 56:5a:c9:15:55:0a:8f:c9:86:18:d9:47:e4:9e:c8: 71:05:29:4c:48:bf:0a:a8:72:8f:bf:ee:5b:3d:d6: 96:93:dc:97:0e:67:e3:0a:4a:75:60:50:78:e0:40: 44:c2:dc:89:cc:26:83:d4:9f:0d:59:34:38:c9:35: f9:76:61:da:48:df:c4:d3:f8:9b:05:18:f0:2b:83: dc:68:1b:0a:ea:07:5f:50:c2:51:fd:6b:2d:22:81: e0:63:90:9c:92:4d:bb:f7:49:5a:63:d4:66:aa:de: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:38:F3:E6:E6:28:59:6C:8B:E3:B9:CD:5F:6E:CA:4A:A4:E2:0E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c49511-4966-319b-aac9-f48e28f14587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b9:8a:43:32:0a:15:70:a5:60:63:50:10:5f:ad:bf:de:d2: 7d:75:c2:64:80:e1:00:4c:bc:f3:e4:a5:8e:ec:b8:28:e6:b9: 31:34:3b:e2:ae:7c:f9:a4:a0:dd:dc:08:44:0d:d8:aa:87:e1: 0b:64:2f:e5:d4:88:b4:48:fd:9f:59:41:96:a7:0c:6e:5c:5b: 9f:5f:8c:c8:23:bf:a8:99:34:1b:81:b9:62:c6:75:f1:19:cd: 9c:58:98:20:f5:59:76:95:e6:70:33:8c:bf:de:1c:74:0c:fc: 12:14:52:3d:3c:f9:72:92:4a:1e:72:0b:93:03:20:74:97:25: 7f:b9:4c:6d:0a:94:ee:0b:44:ae:45:8a:c8:39:d2:f7:20:d4: 36:c0:29:4a:7a:25:15:37:0e:79:d7:b1:01:93:d5:f5:d4:7b: d3:83:5b:01:f4:79:d3:0b:38:cc:86:62:26:1d:fa:d7:77:c8: c9:68:38:a8:cc:28:6e:70:40:24:a5:ee:ec:e7:8e:96:7b:3a: a7:42:c0:9d:a5:a3:82:da:ea:30:7a:b4:02:4a:a5:c9:0d:c1: 29:7c:7c:c2:06:04:95:9d:45:0e:95:fd:06:7b:eb:8d:f1:e9: f7:70:65:dc:8c:35:34:77:5e:36:94:75:9c:cc:42:0b:f3:2d: 7f:52:5a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mPY2faqIR2UsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODg1YjVlMDEtZmRhZS00MTNhLWFkMjAtYWMyM2ExNjA0MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwDWCC1vQCC/WHhM0pkuPi4YTiq8+HG/OUXr s9Dn21vRypHfcMy4AYWaoTBbDmCh6J65YAIH3lq1Vdu/jM0PvxZjfy74WGVb+2f8 xBgOuRITTyMPwYBOoXYy8r/gkqgmi1FCOJozBB8bS5uWlLTYUu5ZaRhBEJp6TdhE if/eByeSXZTm6A6pnmP/ahgVFD+pnbR7iF9WWskVVQqPyYYY2UfknshxBSlMSL8K qHKPv+5bPdaWk9yXDmfjCkp1YFB44EBEwtyJzCaD1J8NWTQ4yTX5dmHaSN/E0/ib BRjwK4PcaBsK6gdfUMJR/WstIoHgY5Cckk2790laY9Rmqt5rFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI48+bmKFlsi+O5zV9uykqk4g4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTBjNDk1MTEtNDk2Ni0z MTliLWFhYzktZjQ4ZTI4ZjE0NTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm5ikMyChVwpWBjUBBfrb/e0n11wmSA4QBMvPPkpY7suCjmuTE0O+Ku fPmkoN3cCEQN2KqH4QtkL+XUiLRI/Z9ZQZanDG5cW59fjMgjv6iZNBuBuWLGdfEZ zZxYmCD1WXaV5nAzjL/eHHQM/BIUUj08+XKSSh5yC5MDIHSXJX+5TG0KlO4LRK5F isg50vcg1DbAKUp6JRU3DnnXsQGT1fXUe9ODWwH0edMLOMyGYiYd+td3yMloOKjM KG5wQCSl7uznjpZ7OqdCwJ2lo4La6jB6tAJKpckNwSl8fMIGBJWdRQ6V/QZ7643x 6fdwZdyMNTR3XjaUdZzMQgvzLX9SWiU= -----END CERTIFICATE-----Generated at Thu Mar 26 23:07:56 2026 by rpki-client