$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa File: 6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa (raw, json) Hash identifier: FFqQhvSPBtcZ1468wIAe6t8Ec2u99ivmpjaH8rOrEtk= Subject key identifier: C1:8C:C6:91:3B:A8:45:25:D1:69:9C:54:E0:BE:2F:0D:CA:AF:2E:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA66F984CCABBE56967A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 15169 IP address blocks: 34.191.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:66:f9:84:cc:ab:be:56:96:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=df38b8d3-7619-4c3a-9469-2412f80ac52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:2c:a0:bd:3f:3d:96:a3:28:2b:49:fa:f2: f4:29:4b:80:ae:44:3b:b8:78:8b:71:d7:aa:3b:f3: e2:cd:8c:47:98:79:af:9b:45:2a:62:e4:0b:9a:17: 44:e0:33:83:d8:dd:00:d0:d7:7f:f0:f4:89:fb:6f: f6:71:00:0d:6b:f3:aa:1c:97:6c:af:bf:c0:f6:22: 28:ad:f2:a2:9d:dc:42:0b:cc:25:b8:ce:9e:2c:28: db:42:e2:d8:d1:75:9d:2c:67:8b:be:02:92:01:b2: 60:20:11:d8:51:5f:1e:11:20:69:59:7f:97:12:bf: 40:38:88:35:17:ac:3d:2e:dc:d8:10:cf:ee:5f:74: 06:af:4a:79:90:85:31:dc:ab:c1:11:44:bc:1b:5c: 4f:e1:ca:24:e0:65:8c:ec:ca:c7:33:78:5d:e3:4b: c5:90:40:a2:e7:64:f5:af:76:8f:e5:15:1a:17:6f: 3f:64:ee:cd:a0:00:c2:34:8c:89:05:18:9b:5f:22: 17:0c:0d:5d:6a:01:d8:2f:12:4e:ea:f7:13:b9:f2: 62:57:38:6f:82:0a:ef:b9:43:c4:1c:8b:8c:c6:89: 6d:b5:86:bb:05:e8:b3:0c:1e:fb:86:d4:ed:55:11: 12:04:99:da:10:8e:ea:93:04:6d:87:43:26:71:ee: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:C6:91:3B:A8:45:25:D1:69:9C:54:E0:BE:2F:0D:CA:AF:2E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:39:04:af:b5:f2:8e:d0:e3:18:30:b3:18:36:24:05:e9:32: 02:9b:ec:df:8e:6d:6b:5b:8c:87:65:8c:f7:f5:c3:f7:2b:2c: 26:04:86:ad:5d:3a:63:24:51:e6:3c:68:03:b2:9e:b6:4b:19: ef:28:31:91:bc:42:0c:c8:26:02:c1:67:14:04:e8:b4:58:24: 6a:1a:e1:0d:3a:c6:bf:1b:e9:b0:3c:4e:74:c7:89:50:47:f7: f5:17:63:34:b6:03:12:ad:39:e8:47:5c:67:34:9a:33:ac:79: b5:bc:0b:66:47:cf:8c:88:86:c8:d4:0b:c6:e9:ef:a5:8c:0d: 4c:f9:3d:f3:6d:3a:54:1b:26:a6:6c:ba:f1:1c:ea:22:e6:dd: c5:52:a4:82:bf:8a:92:4e:da:2d:72:ef:cb:69:a8:6c:34:3e: 11:d9:78:ef:9b:24:25:f4:46:f0:8f:59:02:db:e4:7d:16:0b: 1c:4b:40:ed:a5:3f:97:b7:71:76:a7:63:05:ae:2c:1f:ef:36: 82:9e:94:d3:e0:f1:b7:1a:bd:09:34:96:96:7c:89:0d:69:fb: d5:e9:c9:08:4b:ee:6e:9d:78:0c:bd:5f:38:9f:be:9c:94:0d: 5a:2c:4c:33:7e:e4:fa:c3:fe:f9:44:cf:5f:f2:86:c4:fb:cf: 7e:f0:cf:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mb5hMyrvlaWeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZGYzOGI4ZDMtNzYxOS00YzNhLTk0NjktMjQxMmY4MGFjNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxwsoL0/PZajKCtJ+vL0KUuArkQ7uHiLcdeq O/PizYxHmHmvm0UqYuQLmhdE4DOD2N0A0Nd/8PSJ+2/2cQANa/OqHJdsr7/A9iIo rfKindxCC8wluM6eLCjbQuLY0XWdLGeLvgKSAbJgIBHYUV8eESBpWX+XEr9AOIg1 F6w9LtzYEM/uX3QGr0p5kIUx3KvBEUS8G1xP4cok4GWM7MrHM3hd40vFkECi52T1 r3aP5RUaF28/ZO7NoADCNIyJBRibXyIXDA1dagHYLxJO6vcTufJiVzhvggrvuUPE HIuMxolttYa7BeizDB77htTtVRESBJnaEI7qkwRth0Mmce4fOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGMxpE7qEUl0WmcVOC+Lw3Kry7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmExYjMzMTUtNzMzNi0z NGMwLWIzZGQtYjExMTA0NDFhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ5BK+18o7Q4xgwsxg2JAXpMgKb7N+ObWtbjIdljPf1w/crLCYEhq1d OmMkUeY8aAOynrZLGe8oMZG8QgzIJgLBZxQE6LRYJGoa4Q06xr8b6bA8TnTHiVBH 9/UXYzS2AxKtOehHXGc0mjOsebW8C2ZHz4yIhsjUC8bp76WMDUz5PfNtOlQbJqZs uvEc6iLm3cVSpIK/ipJO2i1y78tpqGw0PhHZeO+bJCX0RvCPWQLb5H0WCxxLQO2l P5e3cXanYwWuLB/vNoKelNPg8bcavQk0lpZ8iQ1p+9XpyQhL7m6deAy9XzifvpyU DVosTDN+5PrD/vlEz1/yhsT7z37wzyM= -----END CERTIFICATE-----Generated at Thu Mar 26 23:09:10 2026 by rpki-client