$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59b46900-823e-389a-96d4-fceee0cc4d2d.roa File: 59b46900-823e-389a-96d4-fceee0cc4d2d.roa (raw, json) Hash identifier: yxaRuNsR0WUVwCwYcmc8+Xt7Tg0SD2NJdnnX3e7AsNc= Subject key identifier: 6F:5C:5C:23:CF:B8:1E:65:CF:12:30:19:4A:57:02:6A:66:29:15:39 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA68CF8107A48E649ABAC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59b46900-823e-389a-96d4-fceee0cc4d2d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 15169 IP address blocks: 34.190.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:68:cf:81:07:a4:8e:64:9a:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=2e1abcfc-aedb-4617-8f88-9287d1372bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:40:b6:d0:aa:7c:d5:6d:9f:72:a9:ab:12:74: 69:bf:eb:7f:9e:11:83:ed:16:9b:a1:36:4a:70:25: be:1c:6b:95:d2:6e:47:04:80:ee:a3:dc:9c:30:3e: df:2e:41:6c:47:27:6c:8b:3e:8a:60:60:d2:12:63: 3d:2a:b5:e0:5a:1f:b6:db:eb:c4:34:1d:c5:a1:c9: 8b:5d:3b:bc:75:71:48:04:59:db:10:69:db:19:76: d2:0e:1d:62:78:c4:ae:79:fb:4e:98:c3:0e:3a:67: e0:72:a5:a3:42:1c:5f:b3:f3:98:e1:11:01:22:e9: b5:63:ef:cf:c7:80:33:c7:54:76:fc:7a:ad:4d:94: 0a:db:2c:cd:64:f7:11:7f:98:35:df:b1:0b:9a:7d: 40:80:32:0d:bc:27:e6:fd:39:f4:a9:1e:7d:e0:ad: 29:41:6b:5e:3b:fa:64:d5:8b:7d:5b:ce:e4:28:6f: 43:be:05:b1:91:d5:32:10:2b:1e:93:0f:c7:cc:a3: 1b:01:3c:ec:2e:aa:70:3f:db:b4:f4:f6:74:e4:05: a8:a3:1a:5c:aa:b2:d8:50:09:48:13:61:0d:b8:70: 7b:33:5b:a8:40:c0:f9:6c:65:fd:46:d8:55:6a:03: 29:54:54:7f:9e:d9:b6:96:a0:14:f0:ec:8c:81:7a: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5C:5C:23:CF:B8:1E:65:CF:12:30:19:4A:57:02:6A:66:29:15:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59b46900-823e-389a-96d4-fceee0cc4d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:75:79:1d:97:6a:bb:19:5f:66:bc:63:4a:40:f7:0c:9a:90: 03:77:cf:27:ab:5f:50:e4:b5:63:af:19:75:9d:46:59:a6:fb: 0c:7f:72:b9:e5:ab:ba:b8:94:3b:73:a9:e8:bf:d6:e3:15:94: bb:1a:86:62:e7:44:2e:71:d3:e6:b9:ec:d2:8c:b5:fd:0f:e2: af:fe:bf:fa:3b:39:c3:db:18:b3:2b:f9:67:70:dc:eb:b8:48: 35:ba:c9:f0:90:1e:81:99:5a:ee:5e:70:9b:de:ea:45:46:ec: 2b:9e:95:da:62:54:ba:14:a3:72:40:4d:a3:ef:44:3a:70:a0: de:57:e9:ec:10:e3:7e:aa:bb:0c:a9:45:8f:02:74:98:fa:11: 1a:0c:c5:85:07:3b:23:f0:b8:cb:74:66:74:b4:4d:b8:34:a4: 6b:e8:9d:3b:2a:cd:86:63:83:b6:00:d0:33:18:4d:c7:fe:df: e7:cc:4f:75:d9:da:6f:c6:46:78:3d:c2:8b:14:00:b8:21:7c: a3:78:86:88:30:d0:dd:11:57:79:d5:66:e4:b4:0e:6e:83:da: b3:19:c7:5d:9c:05:e8:3f:f8:5f:dd:a9:90:f3:f9:e0:9c:77: 3e:d0:83:2d:59:90:00:36:38:c6:93:2d:d9:c7:71:e3:1a:86: 97:3d:99:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mjPgQekjmSausAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MmUxYWJjZmMtYWVkYi00NjE3LThmODgtOTI4N2QxMzcyYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUC20Kp81W2fcqmrEnRpv+t/nhGD7RaboTZK cCW+HGuV0m5HBIDuo9ycMD7fLkFsRydsiz6KYGDSEmM9KrXgWh+22+vENB3FocmL XTu8dXFIBFnbEGnbGXbSDh1ieMSueftOmMMOOmfgcqWjQhxfs/OY4REBIum1Y+/P x4Azx1R2/HqtTZQK2yzNZPcRf5g137ELmn1AgDINvCfm/Tn0qR594K0pQWteO/pk 1Yt9W87kKG9DvgWxkdUyECsekw/HzKMbATzsLqpwP9u09PZ05AWooxpcqrLYUAlI E2ENuHB7M1uoQMD5bGX9RthVagMpVFR/ntm2lqAU8OyMgXpybwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9cXCPPuB5lzxIwGUpXAmpmKRU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTliNDY5MDAtODIzZS0z ODlhLTk2ZDQtZmNlZWUwY2M0ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl1eR2XarsZX2a8Y0pA9wyakAN3zyerX1DktWOvGXWdRlmm+wx/crnl q7q4lDtzqei/1uMVlLsahmLnRC5x0+a57NKMtf0P4q/+v/o7OcPbGLMr+Wdw3Ou4 SDW6yfCQHoGZWu5ecJve6kVG7CueldpiVLoUo3JATaPvRDpwoN5X6ewQ436quwyp RY8CdJj6ERoMxYUHOyPwuMt0ZnS0Tbg0pGvonTsqzYZjg7YA0DMYTcf+3+fMT3XZ 2m/GRng9wosUALghfKN4hogw0N0RV3nVZuS0Dm6D2rMZx12cBeg/+F/dqZDz+eCc dz7Qgy1ZkAA2OMaTLdnHceMahpc9mS0= -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:01 2026 by rpki-client