$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa File: 5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa (raw, json) Hash identifier: odhX5j2xf6x6wxvucBO06LtMywUyPDefXMFTd3M5qDY= Subject key identifier: B8:A4:F0:39:5C:4E:9C:70:7C:96:8C:38:84:46:1A:C4:7A:05:2B:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA70BD274AD178E0B7C600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 139070 IP address blocks: 34.190.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:70:bd:27:4a:d1:78:e0:b7:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=64b4444e-1856-43e3-9404-52f12c3db49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:58:e2:22:da:68:05:2d:43:18:69:02:89: d2:0f:52:f0:ce:47:c0:1a:da:a8:8d:7d:44:83:f5: 48:00:32:c1:a7:29:0d:03:9d:55:77:70:83:96:89: c4:cf:cf:c3:e6:d2:6c:aa:16:29:59:e3:e7:f5:8c: 5a:4f:f5:82:96:d8:5a:41:45:89:fd:7b:8b:c1:66: cf:50:a0:2d:a6:a9:22:39:13:c8:fd:b2:5f:2b:2c: 52:03:d8:c2:4a:7c:eb:f6:4a:41:de:7e:45:3a:a8: 31:6f:70:96:b3:b1:22:fc:3b:4f:26:a6:0e:0b:e1: e0:cf:3b:d8:3f:a0:93:b5:53:59:71:e4:3d:07:3f: 40:64:d5:dd:35:db:e4:ec:68:fa:27:1f:60:d9:5d: d2:04:94:00:d9:4d:48:17:5c:38:1a:ce:f4:b7:c0: a8:14:61:ca:21:b6:84:f9:0b:18:b7:48:68:0e:3f: 35:83:70:bb:29:59:77:d1:34:c3:97:28:92:00:6b: 16:0a:bc:84:93:36:12:ad:bd:f8:28:a7:ae:6e:c2: 49:30:2f:a2:e6:82:4d:ed:6f:b0:5e:fe:12:8a:63: 26:95:4a:6c:ee:5f:2c:c8:67:d6:b8:2a:8e:a1:ef: 5b:58:a5:5c:0d:95:3e:57:c4:c8:e3:c6:e7:0b:58: 67:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A4:F0:39:5C:4E:9C:70:7C:96:8C:38:84:46:1A:C4:7A:05:2B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fa0bc09-ab0f-300d-a3b2-6ace9f339e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2e:99:9e:c2:78:72:b8:c0:2f:c8:ef:58:04:47:2e:4f:f8: 43:00:df:ec:5e:cd:90:5a:02:dc:91:3d:1c:10:27:3d:c7:22: 2a:5a:4a:13:0f:93:3b:a7:15:46:78:b3:02:dd:9e:2a:60:f2: 2d:3f:ee:28:b1:a3:75:4c:03:21:4d:70:e8:b8:d0:0e:5b:90: 86:aa:17:99:ec:b4:77:19:ec:e0:94:12:de:1f:79:55:93:a3: ef:53:7a:86:f7:bd:99:59:b2:0d:d2:01:ef:a9:67:e3:50:ec: 7b:06:52:b0:08:2f:e3:f5:dc:0b:05:f6:37:03:6f:ff:d6:44: 45:ec:c5:c5:01:14:88:51:d7:4d:5b:d2:f9:e2:41:c4:80:54: 10:f3:56:34:e5:d9:22:1e:65:85:0c:ca:bb:76:3f:1b:ed:39: f4:b7:8f:40:d4:f9:b1:49:56:8d:fb:2d:e8:8c:05:6c:52:ae: cd:d6:af:a8:a1:31:b9:6a:2b:71:50:21:6d:b4:50:6a:35:14: 34:e5:5e:65:c0:89:ed:80:82:79:bd:32:c0:36:10:34:91:67: f8:29:71:75:16:da:ea:a6:a0:1b:bc:dd:41:8c:58:2b:a7:d2: 6f:76:b6:95:a1:92:4a:60:5d:e3:c6:83:c3:7c:72:dc:49:34: fd:4e:fa:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nC9J0rReOC3xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjRiNDQ0NGUtMTg1Ni00M2UzLTk0MDQtNTJmMTJjM2RiNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy5Y4iLaaAUtQxhpAonSD1LwzkfAGtqojX1E g/VIADLBpykNA51Vd3CDlonEz8/D5tJsqhYpWePn9YxaT/WClthaQUWJ/XuLwWbP UKAtpqkiORPI/bJfKyxSA9jCSnzr9kpB3n5FOqgxb3CWs7Ei/DtPJqYOC+HgzzvY P6CTtVNZceQ9Bz9AZNXdNdvk7Gj6Jx9g2V3SBJQA2U1IF1w4Gs70t8CoFGHKIbaE +QsYt0hoDj81g3C7KVl30TTDlyiSAGsWCryEkzYSrb34KKeubsJJMC+i5oJN7W+w Xv4SimMmlUps7l8syGfWuCqOoe9bWKVcDZU+V8TI48bnC1hnqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLik8DlcTpxwfJaMOIRGGsR6BSuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZhMGJjMDktYWIwZi0z MDBkLWEzYjItNmFjZTlmMzM5ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoumZ7CeHK4wC/I71gERy5P+EMA3+xezZBaAtyRPRwQJz3HIipaShMP kzunFUZ4swLdnipg8i0/7iixo3VMAyFNcOi40A5bkIaqF5nstHcZ7OCUEt4feVWT o+9Teob3vZlZsg3SAe+pZ+NQ7HsGUrAIL+P13AsF9jcDb//WREXsxcUBFIhR101b 0vniQcSAVBDzVjTl2SIeZYUMyrt2PxvtOfS3j0DU+bFJVo37LeiMBWxSrs3Wr6ih MblqK3FQIW20UGo1FDTlXmXAie2Agnm9MsA2EDSRZ/gpcXUW2uqmoBu83UGMWCun 0m92tpWhkkpgXePGg8N8ctxJNP1O+g0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:18 2026 by rpki-client