$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ebd1fe-1724-34d8-bc13-8b32564c799e.roa File: c3ebd1fe-1724-34d8-bc13-8b32564c799e.roa (raw, json) Hash identifier: 0Uh2yBH3wZaiq/4LZYUb1mrFRAnXF8stXMar76vAmjw= Subject key identifier: 40:BE:B2:E6:D0:E2:BD:D8:A8:77:F5:1E:8A:31:3A:8A:92:2D:43:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF62690F733FB8B89CE0C740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ebd1fe-1724-34d8-bc13-8b32564c799e.roa Signing time: Tue 12 May 2026 14:52:11 +0000 ROA not before: Tue 12 May 2026 14:52:11 +0000 ROA not after: Mon 10 Aug 2026 14:52:11 +0000 asID: 396982 IP address blocks: 34.1.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:62:69:0f:73:3f:b8:b8:9c:e0:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:52:11 2026 GMT Not After : Aug 10 14:52:11 2026 GMT Subject: CN=677b70eb-34a2-4743-935a-b82871a9ac1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:6e:cc:d3:4c:09:25:de:1e:30:8b:1f:5d: 2d:03:56:ec:a1:4f:a4:82:11:1e:e2:92:d1:30:46: f2:b0:fa:b8:0a:6a:f1:7f:38:2e:dc:50:b7:d3:a8: 49:26:7d:7d:67:54:19:ce:85:3b:df:7c:7b:16:5c: 59:71:d2:c6:64:16:0b:21:c2:d0:5c:44:c7:52:8d: 02:c4:9e:a8:9a:a8:8c:2e:43:12:a3:ad:30:04:f8: 78:87:b6:83:4e:11:b6:dd:18:1d:6b:96:76:ba:fa: 04:1e:dd:88:fb:cc:b2:46:3d:55:28:bb:a6:85:af: 5d:44:a4:7c:94:ab:14:4c:60:cf:6a:e4:ef:2b:7e: 99:d1:6d:d4:ba:ac:54:f1:95:f9:aa:49:0f:26:14: 10:a3:f8:88:ea:21:09:6d:60:7d:09:f9:21:48:00: b7:67:fe:f1:d3:b4:3b:24:74:3a:9d:f6:29:2c:32: 62:2b:47:da:35:a8:e7:ea:bb:53:4d:c9:b8:e7:97: 3e:e3:64:f8:59:bb:14:51:a8:92:7f:bd:2a:02:aa: 6b:6a:ab:fe:a9:d4:30:1a:d7:70:cb:89:1d:d3:9f: 87:1d:77:4c:8b:26:23:52:a8:89:de:98:a9:7f:04: 69:c4:da:c2:ce:1c:1f:09:d4:75:44:c1:ff:03:b0: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BE:B2:E6:D0:E2:BD:D8:A8:77:F5:1E:8A:31:3A:8A:92:2D:43:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ebd1fe-1724-34d8-bc13-8b32564c799e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ca:4a:28:a9:34:b9:f1:f4:83:5a:5c:46:47:bf:f4:ea:a4: 7d:6a:0c:6e:c4:a7:b9:3e:71:86:de:46:0d:a9:ed:ba:9d:17: d1:91:65:57:6e:a2:a3:e3:73:39:21:2d:3f:6a:0d:a1:fa:d7: c4:27:04:3b:87:14:fd:5d:58:d6:b8:67:f5:84:fd:7a:fa:fc: d3:61:6e:11:58:ce:6a:98:a1:2d:63:65:df:4e:66:fc:49:34: 9b:0d:6d:e2:2e:c0:7f:74:94:ff:ae:45:0b:65:12:a1:28:56: 9b:fe:82:39:7d:57:1a:18:ed:c5:72:50:65:91:4e:1d:b3:f2: 8c:e5:d8:8b:fd:48:1f:27:61:c4:2c:62:4b:61:da:9a:a6:a7: 4c:41:d1:3f:d3:11:40:ff:8c:97:e1:e9:a9:54:25:95:b3:dc: 59:f5:39:a6:86:c4:73:f8:13:0a:c0:54:be:c5:31:40:49:09: 6f:e2:5a:5a:08:1a:c8:cb:1d:93:d3:d2:cc:68:b1:2b:c3:bc: 05:59:d4:34:52:69:43:eb:6e:3d:7c:10:75:e5:17:09:9f:16: 76:4e:0f:bc:fe:7f:68:54:22:42:b3:75:0f:17:f4:0e:f9:a9: 76:f2:18:0b:e4:98:b6:b8:c9:d0:19:5d:6e:ed:26:b9:50:3a: 15:89:10:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYmkPcz+4uJzgx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTIxMVoXDTI2MDgxMDE0NTIxMVowLzEtMCsGA1UEAxMk Njc3YjcwZWItMzRhMi00NzQzLTkzNWEtYjgyODcxYTlhYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrZuzNNMCSXeHjCLH10tA1bsoU+kghEe4pLR MEbysPq4Cmrxfzgu3FC306hJJn19Z1QZzoU733x7FlxZcdLGZBYLIcLQXETHUo0C xJ6omqiMLkMSo60wBPh4h7aDThG23Rgda5Z2uvoEHt2I+8yyRj1VKLumha9dRKR8 lKsUTGDPauTvK36Z0W3UuqxU8ZX5qkkPJhQQo/iI6iEJbWB9CfkhSAC3Z/7x07Q7 JHQ6nfYpLDJiK0faNajn6rtTTcm455c+42T4WbsUUaiSf70qAqpraqv+qdQwGtdw y4kd05+HHXdMiyYjUqiJ3pipfwRpxNrCzhwfCdR1RMH/A7Cl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC+subQ4r3YqHf1HooxOoqSLUNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzNlYmQxZmUtMTcyNC0z NGQ4LWJjMTMtOGIzMjU2NGM3OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLKSiipNLnx9INaXEZHv/TqpH1qDG7Ep7k+cYbeRg2p7bqdF9GRZVdu oqPjczkhLT9qDaH618QnBDuHFP1dWNa4Z/WE/Xr6/NNhbhFYzmqYoS1jZd9OZvxJ NJsNbeIuwH90lP+uRQtlEqEoVpv+gjl9VxoY7cVyUGWRTh2z8ozl2Iv9SB8nYcQs Ykth2pqmp0xB0T/TEUD/jJfh6alUJZWz3Fn1OaaGxHP4EwrAVL7FMUBJCW/iWloI GsjLHZPT0sxosSvDvAVZ1DRSaUPrbj18EHXlFwmfFnZOD7z+f2hUIkKzdQ8X9A75 qXbyGAvkmLa4ydAZXW7tJrlQOhWJECU= -----END CERTIFICATE-----Generated at Wed May 13 14:53:15 2026 by rpki-client