$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71aef4f6-7681-35c4-96dd-c25a88f645bf.roa File: 71aef4f6-7681-35c4-96dd-c25a88f645bf.roa (raw, json) Hash identifier: yKTsCYE2Cu6+aO7l4uO3Aca+kN39MGojE3kHnFj9k8o= Subject key identifier: 31:17:6A:B7:67:5C:9A:B1:39:3C:87:98:9D:5E:1A:E9:20:2C:8B:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D3DFF8D9FEDA601ECC7CDCB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71aef4f6-7681-35c4-96dd-c25a88f645bf.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 19527 IP address blocks: 34.3.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:8d:9f:ed:a6:01:ec:c7:cd:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=6b7d3031-2741-4d68-a00f-a7122923c302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:fe:fb:7a:87:c5:cc:cd:87:40:4b:d1:71: db:fe:a1:09:0c:41:94:42:d0:c9:3c:0d:39:96:cc: f7:e6:0e:f7:f4:9e:55:d1:4b:cc:51:c2:a9:89:e1: b1:63:67:d7:8e:70:c2:63:10:24:5d:53:fa:41:aa: 90:81:fe:7c:64:b7:4a:45:35:b6:93:fd:9d:77:51: 96:e8:2b:74:63:34:cf:ee:8e:e4:92:b8:ba:49:64: d7:0a:8a:ec:bc:d9:e1:6d:f4:32:08:71:6a:fd:28: 1f:4b:45:65:3b:a8:19:bd:eb:10:8e:65:f9:39:32: d4:56:fd:12:77:1e:53:b3:82:89:c3:8b:57:0c:83: 5a:fd:86:3b:6d:b2:e3:92:c5:a3:75:c4:e6:e4:94: 27:8e:97:84:de:22:dd:e6:3c:8e:0c:28:05:e1:b1: f9:c4:52:fb:6e:9d:71:1e:56:da:b8:28:0f:aa:2a: 5c:96:ed:26:2b:2c:97:aa:d0:88:d5:11:53:5c:73: 44:ce:71:3a:1d:00:c2:ba:58:a9:50:23:14:d8:ae: bb:b5:96:7d:37:27:52:e9:1d:b7:05:35:25:47:8d: cf:55:fb:4a:2a:dc:72:ea:52:ce:5f:d9:ac:39:25: b7:f4:f5:a7:9c:4a:24:f6:6e:4a:9f:da:e2:56:27: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:6A:B7:67:5C:9A:B1:39:3C:87:98:9D:5E:1A:E9:20:2C:8B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71aef4f6-7681-35c4-96dd-c25a88f645bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:97:41:1c:28:6f:a0:ba:be:53:f4:d5:0d:18:7b:23:40:df: 2e:de:2e:f9:b5:d8:71:5a:19:42:85:74:11:fd:64:47:74:98: 12:57:a9:59:48:02:e0:4f:c8:07:ba:b8:f7:ec:8f:71:d5:84: 82:0a:c4:16:40:f2:31:c9:d7:3f:ac:c3:d3:e5:37:f8:19:d2: 4a:10:0f:9a:d1:92:b9:26:b7:d9:2c:83:3e:19:d8:74:a4:db: 73:97:ea:ff:d9:db:2d:6e:2f:11:2d:3d:06:82:72:bc:72:ed: d4:18:ce:e2:5e:51:b4:96:5b:79:c3:24:fe:e2:3b:6c:c7:67: e0:a0:73:bc:cb:38:2f:3f:4a:2a:6b:96:aa:87:ae:9f:93:db: c6:f7:08:10:c0:d4:28:0e:19:e6:91:b1:23:b4:b7:d4:05:f5: 3f:18:6a:1b:34:50:af:9e:e5:13:75:3c:d1:94:c7:a2:50:3d: aa:21:9a:99:92:1b:59:fe:2a:ff:b9:73:ac:6a:e4:95:d6:a4: 08:8d:70:a0:5d:87:f8:4b:5a:1f:6f:57:dc:78:83:76:52:5c: a7:18:0b:46:c0:33:8e:de:e3:b4:17:84:cb:7d:2d:ce:a0:aa: 0b:86:35:89:6b:e1:10:f8:02:2c:ee:74:69:5e:b6:93:ec:37: 21:08:f5:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/42f7aYB7MfNywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NmI3ZDMwMzEtMjc0MS00ZDY4LWEwMGYtYTcxMjI5MjNjMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0v++3qHxczNh0BL0XHb/qEJDEGUQtDJPA05 lsz35g739J5V0UvMUcKpieGxY2fXjnDCYxAkXVP6QaqQgf58ZLdKRTW2k/2dd1GW 6Ct0YzTP7o7kkri6SWTXCorsvNnhbfQyCHFq/SgfS0VlO6gZvesQjmX5OTLUVv0S dx5Ts4KJw4tXDINa/YY7bbLjksWjdcTm5JQnjpeE3iLd5jyODCgF4bH5xFL7bp1x HlbauCgPqipclu0mKyyXqtCI1RFTXHNEznE6HQDCulipUCMU2K67tZZ9NydS6R23 BTUlR43PVftKKtxy6lLOX9msOSW39PWnnEok9m5Kn9riVif9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEXardnXJqxOTyHmJ1eGukgLItHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzFhZWY0ZjYtNzY4MS0z NWM0LTk2ZGQtYzI1YTg4ZjY0NWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeXQRwob6C6vlP01Q0YeyNA3y7eLvm12HFaGUKFdBH9ZEd0mBJXqVlI AuBPyAe6uPfsj3HVhIIKxBZA8jHJ1z+sw9PlN/gZ0koQD5rRkrkmt9ksgz4Z2HSk 23OX6v/Z2y1uLxEtPQaCcrxy7dQYzuJeUbSWW3nDJP7iO2zHZ+Cgc7zLOC8/Sipr lqqHrp+T28b3CBDA1CgOGeaRsSO0t9QF9T8Yahs0UK+e5RN1PNGUx6JQPaohmpmS G1n+Kv+5c6xq5JXWpAiNcKBdh/hLWh9vV9x4g3ZSXKcYC0bAM47e47QXhMt9Lc6g qguGNYlr4RD4AizudGletpPsNyEI9Rw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:25 2026 by rpki-client