$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8875db34-3da6-30c6-80e3-ab834e8ed620.roa File: 8875db34-3da6-30c6-80e3-ab834e8ed620.roa (raw, json) Hash identifier: bIlASZgTNBhy0lFANH1ACaLNcZOymq9i+lc+MkLExUY= Subject key identifier: E9:A9:2F:36:82:56:5F:B8:F5:05:21:2C:69:CA:87:31:E2:3F:27:2B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF5EADEB25D46BF02E426D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8875db34-3da6-30c6-80e3-ab834e8ed620.roa Signing time: Tue 12 May 2026 14:44:40 +0000 ROA not before: Tue 12 May 2026 14:44:40 +0000 ROA not after: Mon 10 Aug 2026 14:44:40 +0000 asID: 396982 IP address blocks: 34.0.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:5e:ad:eb:25:d4:6b:f0:2e:42:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:44:40 2026 GMT Not After : Aug 10 14:44:40 2026 GMT Subject: CN=2f31e8b6-afa0-4fc8-a9cb-da8e6c5b268e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:a8:9c:0d:2b:e1:7f:18:dd:b4:11:b2:1d: 4c:b0:00:08:85:b0:63:ab:24:3b:b7:d6:be:13:8f: a0:6b:e4:6f:55:50:ec:10:0e:22:9d:5f:b9:b1:af: 12:00:ce:4f:f9:20:13:08:9d:e9:db:e4:b7:f6:36: d8:60:3a:1c:67:0c:b8:9e:8c:8d:56:a5:17:92:62: de:bd:4b:09:0c:c1:9d:d4:e8:fa:e2:04:a3:64:3b: e3:c9:e5:5c:eb:a4:db:44:4b:df:7d:d1:cb:ff:2f: 76:6b:db:40:6e:67:aa:8b:ce:58:00:83:e3:b3:12: a5:c8:d9:da:14:06:bc:1d:b5:bc:ea:a7:00:b7:ac: a9:a0:5e:3c:9b:26:3a:2a:e2:2a:37:d8:96:a1:09: b9:88:af:42:73:c3:01:3a:f9:50:29:12:f8:44:84: 7d:d8:1c:2d:cc:5a:b8:22:f2:7d:68:9a:eb:41:41: b7:29:8d:f1:cd:ae:db:99:d8:37:06:47:f4:42:cb: d1:df:ba:6f:bd:64:ad:b9:0c:cc:80:98:0d:af:27: eb:38:b7:83:66:7e:db:8e:39:5d:10:f7:f4:ac:a6: e7:ec:0a:11:33:18:56:83:67:48:b4:08:a4:4f:64: 7e:d2:27:33:f3:10:8e:01:d2:d2:b7:a0:76:fc:32: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:2F:36:82:56:5F:B8:F5:05:21:2C:69:CA:87:31:E2:3F:27:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8875db34-3da6-30c6-80e3-ab834e8ed620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:03:f0:4f:42:ac:1f:ec:20:05:a5:c0:c0:2f:8d:85:4a:a7: e2:bf:51:bf:5b:f1:4d:81:5c:ed:bb:3a:fe:e6:6d:1e:e3:e0: d4:2c:e0:30:a0:58:b9:1b:9a:06:6e:0d:62:36:5e:08:7a:23: 24:d1:b2:83:ca:cf:4f:4f:b0:c8:9e:75:d9:57:c8:7b:4e:df: d5:f9:d2:c5:78:eb:77:00:4b:d6:da:63:4c:70:02:51:83:3b: 14:8f:9d:28:bb:e1:4b:fe:e5:c5:9f:7b:bc:3b:b9:2f:4b:36: c6:01:c4:10:ab:2b:95:10:0e:78:59:6e:7e:fd:bc:09:4f:2c: 4a:43:5e:ba:3f:42:34:4b:c2:22:e7:bb:fe:b3:8d:c0:06:a0: 73:6e:69:60:05:9b:8a:c9:a6:36:af:5a:3c:8a:2f:d1:26:61: b1:1f:38:34:60:31:74:dc:b4:7d:f0:c8:db:89:df:a4:f3:82: 0e:f4:55:4c:ad:45:c3:d6:98:10:44:eb:38:b8:fb:09:59:4e: de:80:bf:16:03:fe:c4:3d:6d:73:84:0a:a4:ec:17:4d:5d:4a: 15:6d:64:11:68:aa:54:d6:bd:7b:bb:6d:38:fb:1c:f3:de:64: 9a:66:cb:f4:8f:b8:67:08:bf:3b:de:5b:12:0a:bb:b5:e8:8f: 46:e5:f9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PXq3rJdRr8C5CbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NDQ0MFoXDTI2MDgxMDE0NDQ0MFowLzEtMCsGA1UEAxMk MmYzMWU4YjYtYWZhMC00ZmM4LWE5Y2ItZGE4ZTZjNWIyNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7yonA0r4X8Y3bQRsh1MsAAIhbBjqyQ7t9a+ E4+ga+RvVVDsEA4inV+5sa8SAM5P+SATCJ3p2+S39jbYYDocZwy4noyNVqUXkmLe vUsJDMGd1Oj64gSjZDvjyeVc66TbREvffdHL/y92a9tAbmeqi85YAIPjsxKlyNna FAa8HbW86qcAt6ypoF48myY6KuIqN9iWoQm5iK9Cc8MBOvlQKRL4RIR92BwtzFq4 IvJ9aJrrQUG3KY3xza7bmdg3Bkf0QsvR37pvvWStuQzMgJgNryfrOLeDZn7bjjld EPf0rKbn7AoRMxhWg2dItAikT2R+0icz8xCOAdLSt6B2/DL+owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmpLzaCVl+49QUhLGnKhzHiPycrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODg3NWRiMzQtM2RhNi0z MGM2LTgwZTMtYWI4MzRlOGVkNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKID8E9CrB/sIAWlwMAvjYVKp+K/Ub9b8U2BXO27Ov7mbR7j4NQs4DCg WLkbmgZuDWI2Xgh6IyTRsoPKz09PsMieddlXyHtO39X50sV463cAS9baY0xwAlGD OxSPnSi74Uv+5cWfe7w7uS9LNsYBxBCrK5UQDnhZbn79vAlPLEpDXro/QjRLwiLn u/6zjcAGoHNuaWAFm4rJpjavWjyKL9EmYbEfODRgMXTctH3wyNuJ36Tzgg70VUyt RcPWmBBE6zi4+wlZTt6AvxYD/sQ9bXOECqTsF01dShVtZBFoqlTWvXu7bTj7HPPe ZJpmy/SPuGcIvzveWxIKu7Xoj0bl+VA= -----END CERTIFICATE-----Generated at Wed May 13 15:23:26 2026 by rpki-client