$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa File: bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa (raw, json) Hash identifier: D283yJ7Ikno5VYzjSXIBzaVCiLtJKIc1UH5F33KpztI= Subject key identifier: 4B:8E:58:35:FF:5C:57:8E:74:BB:63:0E:23:2E:AF:8D:A2:5C:AC:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA63A6ECCAFFB1EDB39D59 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 15169 IP address blocks: 34.191.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:63:a6:ec:ca:ff:b1:ed:b3:9d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=96bc1dce-c6ea-4e83-baef-b2b52d313626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7a:f7:91:dc:97:31:27:f6:65:b2:77:0c:d8: d7:b7:ac:db:ea:8d:49:9c:8f:4a:39:82:65:ca:ec: 45:8a:36:ce:d6:2e:06:ca:61:43:cb:c2:a2:79:0b: 34:a7:39:80:10:cf:8e:e8:c6:24:85:54:33:a3:18: f9:c3:62:62:cd:df:76:a8:21:0f:7f:fd:65:3e:74: 62:13:54:8c:40:b4:b5:56:f4:82:cc:03:66:ce:40: b5:2a:0a:20:4a:ea:53:6f:23:53:90:ff:1a:82:92: be:de:98:20:af:9c:68:7c:af:4f:4d:27:2b:24:c8: c0:45:07:70:50:28:2b:44:28:b7:dd:99:9a:d0:08: 9e:40:c3:c4:86:04:a9:0e:1b:2a:f8:90:d9:57:3a: 79:c7:20:d8:38:59:67:9a:c7:e4:c6:97:12:40:6e: ff:8b:43:2f:59:b5:2f:92:f4:7f:d1:89:3c:39:b1: a5:24:d9:d2:ff:e1:36:7a:c1:8f:32:76:87:74:bf: 0f:6e:ac:28:b7:55:3f:8f:0e:71:a2:97:44:43:ed: 50:9a:3d:fa:cb:46:06:63:fd:b7:18:0b:3d:f0:d2: 5a:75:d7:b3:0e:39:8f:ce:6b:c4:11:f8:4d:07:c5: 2d:2a:10:6f:7a:1e:bc:c7:41:43:b7:52:50:61:c0: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8E:58:35:FF:5C:57:8E:74:BB:63:0E:23:2E:AF:8D:A2:5C:AC:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca39bdc-2c19-3343-85d8-f5f5990c24ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:82:7c:21:94:b6:3c:25:f9:0d:22:d7:bc:21:d9:c8:e9:19: ca:d0:24:54:49:9b:cf:c6:b0:94:bb:64:c2:93:a4:bc:2c:a7: 6a:13:35:95:4b:5b:0d:12:71:6b:25:db:92:6b:9b:63:2f:63: d5:97:49:e6:49:fc:73:61:d6:a0:17:fc:a7:76:f4:93:6a:3b: d4:3d:01:a3:f5:d2:66:83:15:fb:2a:01:00:f5:03:df:91:df: 99:a8:e4:27:54:16:15:32:88:ce:35:44:a8:04:52:f2:ba:39: a6:08:69:2d:f7:8f:a4:72:35:2c:88:b7:1c:33:e6:df:f7:6e: a3:48:28:77:86:52:a3:ab:e7:b4:bd:28:55:d5:8d:9e:2f:e6: 5e:01:73:c8:7d:ed:55:33:5e:9a:32:72:24:dd:85:ec:a6:af: 9c:99:e8:1e:36:07:0f:72:19:0d:57:9c:0a:c2:c6:72:ad:22: 11:35:32:f9:86:c3:f4:33:8a:93:ac:41:1e:94:22:7a:b9:2b: 83:81:11:3d:26:87:04:46:45:9c:b8:23:50:bc:85:a1:22:b6: ca:91:d3:34:d4:65:54:74:1d:69:9b:6a:32:c0:fc:b8:03:69: ab:79:a9:6e:82:0b:9f:33:78:21:11:43:a7:cd:78:78:9f:ea: 47:ae:75:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mOm7Mr/se2znVkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTZiYzFkY2UtYzZlYS00ZTgzLWJhZWYtYjJiNTJkMzEzNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHr3kdyXMSf2ZbJ3DNjXt6zb6o1JnI9KOYJl yuxFijbO1i4GymFDy8KieQs0pzmAEM+O6MYkhVQzoxj5w2Jizd92qCEPf/1lPnRi E1SMQLS1VvSCzANmzkC1KgogSupTbyNTkP8agpK+3pggr5xofK9PTScrJMjARQdw UCgrRCi33Zma0AieQMPEhgSpDhsq+JDZVzp5xyDYOFlnmsfkxpcSQG7/i0MvWbUv kvR/0Yk8ObGlJNnS/+E2esGPMnaHdL8Pbqwot1U/jw5xopdEQ+1Qmj36y0YGY/23 GAs98NJaddezDjmPzmvEEfhNB8UtKhBveh68x0FDt1JQYcAyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuOWDX/XFeOdLtjDiMur42iXKzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmNhMzliZGMtMmMxOS0z MzQzLTg1ZDgtZjVmNTk5MGMyNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2CfCGUtjwl+Q0i17wh2cjpGcrQJFRJm8/GsJS7ZMKTpLwsp2oTNZVL Ww0ScWsl25Jrm2MvY9WXSeZJ/HNh1qAX/Kd29JNqO9Q9AaP10maDFfsqAQD1A9+R 35mo5CdUFhUyiM41RKgEUvK6OaYIaS33j6RyNSyItxwz5t/3bqNIKHeGUqOr57S9 KFXVjZ4v5l4Bc8h97VUzXpoyciTdheymr5yZ6B42Bw9yGQ1XnArCxnKtIhE1MvmG w/QzipOsQR6UInq5K4OBET0mhwRGRZy4I1C8haEitsqR0zTUZVR0HWmbajLA/LgD aat5qW6CC58zeCERQ6fNeHif6keudUA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:12 2026 by rpki-client