$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa File: 8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa (raw, json) Hash identifier: uC/gORwbP3fjg2E3Cvfmu59gUznawnjPXtFe8BM8hYw= Subject key identifier: 6E:6E:17:17:30:07:2A:18:43:32:76:3D:64:AD:71:81:D5:63:C4:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA705E433AA5C9186FD540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19527 IP address blocks: 34.190.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:70:5e:43:3a:a5:c9:18:6f:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9a11cb05-1117-4883-b5bc-565c2796a911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:dd:1f:e1:14:e7:89:e5:3b:a7:1e:1c:13: d7:3f:fd:e5:19:47:01:56:78:5d:c6:6c:48:54:47: b1:e5:d9:5f:ed:74:39:8b:57:6f:64:a5:86:b1:e6: 27:c5:b5:5b:94:16:35:16:72:0a:45:d0:74:b4:66: 8d:df:27:61:08:a1:21:ca:8e:8f:bd:81:49:89:84: 1a:95:c6:e1:71:77:4c:80:24:76:0d:d1:c9:ba:6e: fa:8c:e3:ec:48:52:25:29:4f:64:6c:58:f0:4a:5f: f9:1b:3e:ef:d6:f3:6d:16:1e:a6:10:c7:6c:c7:ca: 33:91:e0:aa:c5:2a:07:3d:b3:10:5b:1c:d2:84:2f: 23:3c:bb:68:37:de:c9:96:a7:17:d8:bc:b1:63:f5: 24:bd:dd:bb:43:b0:37:f0:ba:29:09:e0:bc:1d:2b: ae:70:0a:ee:4f:72:62:de:82:d7:c4:14:30:12:de: 3b:4c:87:0c:bd:03:af:bb:84:51:02:5b:b7:2d:53: 4d:ee:80:eb:d8:a2:42:60:e9:06:91:a6:be:96:0c: 21:aa:38:d9:5e:f6:85:74:22:5c:df:cb:d9:a3:ec: a1:78:e9:87:39:d5:6b:71:c5:75:a1:2b:49:73:3b: 2d:92:ce:f1:e9:14:3c:a8:5a:6f:e4:f3:9f:27:30: 0a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6E:17:17:30:07:2A:18:43:32:76:3D:64:AD:71:81:D5:63:C4:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcb2e84-0cfe-32d3-9c08-9bb7875186a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:66:50:56:c2:17:02:c6:5e:82:24:99:69:a2:01:e3:2e:b3: 58:5f:e6:1e:0d:28:02:aa:e1:b4:53:da:bb:6b:49:62:03:56: 32:a0:68:57:a8:96:df:67:c9:ef:b5:d1:cb:b4:32:f3:27:32: 25:b3:4b:15:18:68:be:49:f3:51:8b:6a:f3:c9:37:4d:e4:9f: fb:39:3b:3c:f1:0d:ac:69:fd:4f:b6:b4:66:d5:69:c4:b1:e7: 7b:e3:0c:ae:c9:ad:d8:d4:f6:97:c9:a6:e2:21:f1:ab:e2:51: ce:7a:10:43:c5:b4:f0:2a:bd:ba:f0:fc:b5:da:2f:04:9f:6e: 5c:b0:a5:98:f1:b6:a1:a2:06:59:ef:af:fc:bb:a3:5c:84:c3: 5b:01:44:56:e9:3e:4f:1b:52:3e:06:13:fc:7d:4b:97:09:dd: fa:38:81:eb:3b:33:43:da:b5:69:b6:7f:69:29:a0:78:7a:58: 50:ad:cf:15:0d:4a:55:e3:a4:b5:e3:fc:ea:72:93:f1:a6:f9: a9:19:c2:b6:2f:2e:8a:c9:7c:c8:e1:bc:ff:47:4e:cb:6f:f5: 43:a1:c1:43:d7:29:7d:1a:81:fd:60:c9:68:c6:81:dc:0b:b8: 88:42:6b:6a:f5:37:db:78:c0:46:48:f4:66:d6:a2:ba:51:f7: 06:aa:f9:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nBeQzqlyRhv1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWExMWNiMDUtMTExNy00ODgzLWI1YmMtNTY1YzI3OTZhOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQfdH+EU54nlO6ceHBPXP/3lGUcBVnhdxmxI VEex5dlf7XQ5i1dvZKWGseYnxbVblBY1FnIKRdB0tGaN3ydhCKEhyo6PvYFJiYQa lcbhcXdMgCR2DdHJum76jOPsSFIlKU9kbFjwSl/5Gz7v1vNtFh6mEMdsx8ozkeCq xSoHPbMQWxzShC8jPLtoN97JlqcX2LyxY/Ukvd27Q7A38LopCeC8HSuucAruT3Ji 3oLXxBQwEt47TIcMvQOvu4RRAlu3LVNN7oDr2KJCYOkGkaa+lgwhqjjZXvaFdCJc 38vZo+yheOmHOdVrccV1oStJczstks7x6RQ8qFpv5POfJzAK2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5uFxcwByoYQzJ2PWStcYHVY8SpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGZjYjJlODQtMGNmZS0z MmQzLTljMDgtOWJiNzg3NTE4NmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpmUFbCFwLGXoIkmWmiAeMus1hf5h4NKAKq4bRT2rtrSWIDVjKgaFeo lt9nye+10cu0MvMnMiWzSxUYaL5J81GLavPJN03kn/s5OzzxDaxp/U+2tGbVacSx 53vjDK7JrdjU9pfJpuIh8aviUc56EEPFtPAqvbrw/LXaLwSfblywpZjxtqGiBlnv r/y7o1yEw1sBRFbpPk8bUj4GE/x9S5cJ3fo4ges7M0PatWm2f2kpoHh6WFCtzxUN SlXjpLXj/Opyk/Gm+akZwrYvLorJfMjhvP9HTstv9UOhwUPXKX0agf1gyWjGgdwL uIhCa2r1N9t4wEZI9GbWorpR9waq+Yc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:46 2026 by rpki-client