$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa File: cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa (raw, json) Hash identifier: EPwGlYtfLMPr50MSEoIFp3baRcpMpf/42BzVjve5yzA= Subject key identifier: 68:37:63:FE:F8:3C:AB:A6:31:9B:82:53:19:6C:AA:84:4B:A8:5D:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF60CBE47554FBA10C5DC4E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa Signing time: Tue 12 May 2026 14:48:56 +0000 ROA not before: Tue 12 May 2026 14:48:56 +0000 ROA not after: Mon 10 Aug 2026 14:48:56 +0000 asID: 396982 IP address blocks: 34.1.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:60:cb:e4:75:54:fb:a1:0c:5d:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:48:56 2026 GMT Not After : Aug 10 14:48:56 2026 GMT Subject: CN=f9e0d287-77cc-459c-b173-6a1a8ad3b8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:27:64:9e:33:9d:75:c2:b8:b6:fa:c4:96:92: f8:bd:b0:0e:33:f3:cb:9f:af:60:a2:43:82:9e:9f: 95:04:b5:8a:e7:b0:d0:f3:2d:d2:9e:b2:79:9d:05: 0e:49:5e:3d:b9:26:aa:8c:ed:fd:a7:f2:69:09:a7: 0c:78:be:a5:31:ee:fc:bd:7a:22:c3:d7:01:e6:3a: e9:60:af:fa:e7:e7:ba:48:bb:05:46:ac:99:75:b3: 27:8f:45:e8:ec:7b:f1:8a:76:c0:22:94:8b:d4:6a: d7:37:b9:49:3d:1a:c2:f6:b8:ec:b8:32:5a:86:14: 6f:7e:4d:1f:79:da:5c:25:d7:38:2f:57:b0:ab:fb: 8c:7f:31:82:68:1f:21:34:b7:57:17:45:e2:c3:74: ee:3e:6e:6e:b7:ef:3a:2c:d5:0b:32:55:70:07:87: f1:e7:b4:fd:00:0c:88:d9:75:62:5b:9f:61:7d:27: cd:e2:a8:a8:f7:e2:4c:99:e2:33:47:0e:80:e5:db: 14:2b:cd:25:83:d6:63:35:03:16:e5:d0:04:da:01: 98:aa:9c:e5:6b:c5:79:5e:bc:b0:1e:06:48:bd:02: 3c:a9:57:5f:d9:f3:d0:82:13:ab:2d:66:44:dc:85: 81:c3:0a:46:9c:e9:9e:0c:93:49:d5:f3:f4:a6:1b: 8c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:63:FE:F8:3C:AB:A6:31:9B:82:53:19:6C:AA:84:4B:A8:5D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd1cad9b-3dd2-3c56-be5c-616e36949dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:dc:7a:fb:d3:55:2e:05:ee:ca:21:0b:e1:9b:29:98:39:7b: eb:f4:a1:64:7e:2d:a9:0e:84:c4:e1:10:8d:58:97:07:5f:2e: 98:52:3f:ef:f4:67:0e:7f:5b:e4:c8:d4:31:83:c9:1a:86:04: 3e:69:b8:38:7f:82:70:ba:45:e4:c2:9c:4b:ae:2e:e3:64:c0: c3:7d:83:20:ea:31:23:a1:0b:9d:04:e7:05:0b:b4:d2:6d:2e: 17:37:f1:0d:2f:31:c1:44:bf:d9:91:a9:29:66:65:70:74:8b: a6:e5:1d:e4:6c:c8:68:a8:84:a1:90:9e:d0:58:1a:64:21:d6: b4:b8:fb:f1:7b:12:6d:d4:c8:5a:a4:95:8a:e4:9c:e6:c6:26: 65:25:17:8c:c1:c1:7b:e3:18:35:b0:8d:12:60:d7:81:d8:de: 46:f6:11:c5:a6:ba:27:15:78:35:ba:7e:e0:dc:a4:9d:26:78: 80:0c:bd:f5:2d:fd:97:e0:71:e5:11:2b:dc:da:70:8c:4a:72: 39:60:07:91:0c:f6:29:06:31:7e:8a:cc:c7:bf:aa:71:e5:b8: f6:a7:ec:80:d6:82:32:f0:d8:f5:4e:1e:1f:10:3d:c4:11:49: 0b:60:85:6f:87:8e:2b:2e:58:e0:31:f9:e2:3e:ca:47:27:bf: 92:18:53:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYMvkdVT7oQxdxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NDg1NloXDTI2MDgxMDE0NDg1NlowLzEtMCsGA1UEAxMk ZjllMGQyODctNzdjYy00NTljLWIxNzMtNmExYThhZDNiOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CdknjOddcK4tvrElpL4vbAOM/PLn69gokOC np+VBLWK57DQ8y3SnrJ5nQUOSV49uSaqjO39p/JpCacMeL6lMe78vXoiw9cB5jrp YK/65+e6SLsFRqyZdbMnj0Xo7HvxinbAIpSL1GrXN7lJPRrC9rjsuDJahhRvfk0f edpcJdc4L1ewq/uMfzGCaB8hNLdXF0Xiw3TuPm5ut+86LNULMlVwB4fx57T9AAyI 2XViW59hfSfN4qio9+JMmeIzRw6A5dsUK80lg9ZjNQMW5dAE2gGYqpzla8V5Xryw HgZIvQI8qVdf2fPQghOrLWZE3IWBwwpGnOmeDJNJ1fP0phuMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg3Y/74PKumMZuCUxlsqoRLqF3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2QxY2FkOWItM2RkMi0z YzU2LWJlNWMtNjE2ZTM2OTQ5ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjcevvTVS4F7sohC+GbKZg5e+v0oWR+LakOhMThEI1YlwdfLphSP+/0 Zw5/W+TI1DGDyRqGBD5puDh/gnC6ReTCnEuuLuNkwMN9gyDqMSOhC50E5wULtNJt Lhc38Q0vMcFEv9mRqSlmZXB0i6blHeRsyGiohKGQntBYGmQh1rS4+/F7Em3UyFqk lYrknObGJmUlF4zBwXvjGDWwjRJg14HY3kb2EcWmuicVeDW6fuDcpJ0meIAMvfUt /ZfgceURK9zacIxKcjlgB5EM9ikGMX6KzMe/qnHluPan7IDWgjLw2PVOHh8QPcQR SQtghW+HjisuWOAx+eI+ykcnv5IYUyQ= -----END CERTIFICATE-----Generated at Wed May 13 13:00:00 2026 by rpki-client