$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f493a27-088f-3ef0-8d23-c9acb883a5b8.roa File: 9f493a27-088f-3ef0-8d23-c9acb883a5b8.roa (raw, json) Hash identifier: VY0hCdIvnrNYYi6K9T7kF3oOyLy9bMcviDM+XJhmxuw= Subject key identifier: 86:F3:22:EB:8A:42:AF:EE:F8:EE:8F:A3:24:B1:88:52:E5:DF:71:74 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF6362E3F9DF000F3036A5A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f493a27-088f-3ef0-8d23-c9acb883a5b8.roa Signing time: Tue 12 May 2026 14:54:09 +0000 ROA not before: Tue 12 May 2026 14:54:09 +0000 ROA not after: Mon 10 Aug 2026 14:54:09 +0000 asID: 43515 IP address blocks: 34.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:63:62:e3:f9:df:00:0f:30:36:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:54:09 2026 GMT Not After : Aug 10 14:54:09 2026 GMT Subject: CN=d58dd27e-965f-43fc-a1b6-5eba4fe27d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:a7:fe:5d:0b:8b:a7:10:28:6d:7f:42:a0: d9:d1:48:b5:eb:10:55:fa:9c:69:ad:98:68:0f:d9: b8:f0:9c:c8:f0:1e:84:29:1a:0a:f9:e2:fa:ee:14: e7:2d:94:f3:34:f3:3a:e8:ce:26:6d:1b:cd:19:b9: 0f:bd:63:d2:c1:40:98:1b:42:f4:f0:eb:77:61:ed: 34:27:82:4b:8c:a2:b7:17:6d:4b:12:bd:88:b3:c5: bc:69:53:1c:b9:ba:60:3a:d3:d0:6d:a9:5c:1c:ca: 79:0e:54:63:b5:a3:54:99:dd:d8:24:b6:8d:92:c4: ff:80:e9:c3:21:82:56:32:4c:ee:2e:7c:44:55:5b: aa:36:27:a2:eb:2f:a7:d5:03:b8:13:c3:3f:4a:53: 61:4c:cb:74:75:ea:ad:4e:5a:60:48:9d:ae:24:11: 10:8b:13:39:57:3b:0b:47:70:2d:cc:83:78:91:06: e2:3c:cc:93:a7:96:e3:90:c5:5c:c2:f2:40:51:87: fe:23:44:d4:38:69:76:30:89:fa:03:eb:79:88:8d: 1d:b8:d5:7a:43:92:f5:de:69:07:33:ec:02:ab:eb: f1:cb:4f:00:b4:a5:08:8b:8b:2f:65:68:42:21:b1: 63:e8:9c:2a:7a:f5:22:55:76:f3:38:2b:a3:dc:3c: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F3:22:EB:8A:42:AF:EE:F8:EE:8F:A3:24:B1:88:52:E5:DF:71:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f493a27-088f-3ef0-8d23-c9acb883a5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c1:ff:62:46:e6:68:30:b4:e0:9e:dd:63:c1:fa:46:de:57: d7:b0:cd:bc:b8:6c:27:eb:41:df:ff:51:76:57:d4:90:18:2a: 2d:f5:92:5c:be:02:27:5d:96:2d:4d:d7:bd:e7:24:04:8b:c1: b2:f4:a1:1b:88:c7:27:2a:ed:fd:16:d4:12:26:6b:c6:5f:3b: 10:51:9f:a5:1d:41:70:f1:0d:3c:88:7d:8c:c3:5c:c0:de:4b: e6:d8:5a:aa:28:67:8f:b0:4f:a6:7d:b2:ec:86:1d:e6:d4:bc: c9:16:57:50:4d:e1:f8:38:f1:95:22:e8:11:c6:49:7e:1c:26: 16:26:4b:c6:f5:bf:71:7a:33:dd:7f:ca:ad:c3:0c:a4:ec:f1: ba:a4:ba:95:37:ec:f6:c4:a4:ee:82:c3:70:d9:80:56:4a:98: 7c:91:b7:74:ed:75:f5:b1:c8:ea:1f:a2:b6:57:42:e7:9f:5a: 7c:95:e6:9b:9f:48:da:97:c0:36:58:5d:03:25:ad:8d:ea:da: e1:70:49:44:f4:62:95:97:7e:4b:79:56:fe:5d:16:06:c9:c9: 33:67:f9:89:84:de:3c:5e:b6:21:d4:51:72:6c:97:77:06:07: f5:f4:ac:e0:77:c5:c7:1a:8d:c0:5d:d3:2c:80:11:99:25:96: 93:6c:1a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PY2Lj+d8ADzA2paAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTQwOVoXDTI2MDgxMDE0NTQwOVowLzEtMCsGA1UEAxMk ZDU4ZGQyN2UtOTY1Zi00M2ZjLWExYjYtNWViYTRmZTI3ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn6n/l0Li6cQKG1/QqDZ0Ui16xBV+pxprZho D9m48JzI8B6EKRoK+eL67hTnLZTzNPM66M4mbRvNGbkPvWPSwUCYG0L08Ot3Ye00 J4JLjKK3F21LEr2Is8W8aVMcubpgOtPQbalcHMp5DlRjtaNUmd3YJLaNksT/gOnD IYJWMkzuLnxEVVuqNiei6y+n1QO4E8M/SlNhTMt0deqtTlpgSJ2uJBEQixM5VzsL R3AtzIN4kQbiPMyTp5bjkMVcwvJAUYf+I0TUOGl2MIn6A+t5iI0duNV6Q5L13mkH M+wCq+vxy08AtKUIi4svZWhCIbFj6JwqevUiVXbzOCuj3DygrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbzIuuKQq/u+O6PoySxiFLl33F0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWY0OTNhMjctMDg4Zi0z ZWYwLThkMjMtYzlhY2I4ODNhNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvB/2JG5mgwtOCe3WPB+kbeV9ewzby4bCfrQd//UXZX1JAYKi31kly+ Aiddli1N173nJASLwbL0oRuIxycq7f0W1BIma8ZfOxBRn6UdQXDxDTyIfYzDXMDe S+bYWqooZ4+wT6Z9suyGHebUvMkWV1BN4fg48ZUi6BHGSX4cJhYmS8b1v3F6M91/ yq3DDKTs8bqkupU37PbEpO6Cw3DZgFZKmHyRt3TtdfWxyOoforZXQuefWnyV5puf SNqXwDZYXQMlrY3q2uFwSUT0YpWXfkt5Vv5dFgbJyTNn+YmE3jxetiHUUXJsl3cG B/X0rOB3xccajcBd0yyAEZkllpNsGjc= -----END CERTIFICATE-----Generated at Wed May 13 14:56:47 2026 by rpki-client