$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa File: cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa (raw, json) Hash identifier: r5CGuHtLGEKFXwq02K0+pM7IZHqzl9N6bNxyI/19xl0= Subject key identifier: 3D:4A:50:6D:41:67:3E:BD:AC:AB:99:0C:89:B1:E9:C7:B2:CA:99:66 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA74E771212FA79A36F9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19527 IP address blocks: 34.190.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:74:e7:71:21:2f:a7:9a:36:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=bb8ba28e-d223-4a20-9b6c-2c2ce354ebe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:fe:5f:ec:90:69:09:57:b7:09:7c:1b:42: 75:8e:06:f9:74:50:20:a0:8c:1b:c0:38:28:e6:72: 08:87:81:7f:38:8f:ed:8d:f6:2b:2e:b1:bf:86:b2: 93:1c:77:e9:a9:33:b2:9a:68:91:e9:c6:01:6c:2d: cf:eb:b2:d3:d8:0d:11:6f:96:81:35:99:55:9b:9d: 8b:bb:57:bb:dc:1d:1b:d9:b6:54:40:0a:14:67:d0: b5:bd:3e:3f:e1:63:aa:e4:17:e3:02:7d:92:a2:7c: c1:99:15:2f:da:ab:4b:5e:d8:4f:56:cd:cb:cc:dd: bb:ab:9a:7e:a8:c6:58:6a:93:67:68:e2:1a:06:9a: e0:ec:03:74:c1:aa:c2:d5:d9:8e:9a:0b:77:ad:ec: 74:5a:e0:e4:8f:95:1a:52:d1:38:66:d4:c5:74:9d: 68:e5:a7:91:1e:5b:9b:f4:c7:1e:3f:44:de:ca:39: b7:ad:f8:c6:48:77:ee:b8:2a:b2:c2:cf:f5:2b:b0: ef:74:7d:91:d4:b7:99:cd:54:cc:32:24:19:74:b6: c4:00:9b:5b:23:26:84:01:b9:3c:d3:00:16:ab:41: 35:40:19:e5:96:1c:3b:ea:29:a4:94:7a:34:63:c6: 73:00:9e:0f:40:1d:3f:0c:bc:c7:9e:c1:cd:8c:99: 92:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4A:50:6D:41:67:3E:BD:AC:AB:99:0C:89:B1:E9:C7:B2:CA:99:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ab:0b:bf:34:41:e5:7b:28:7d:09:34:ec:45:2f:2c:08:df: 10:64:b7:7c:09:00:ac:ea:05:56:84:81:e4:8b:a7:33:06:f4: 20:cd:1d:6f:d0:97:9b:49:4e:af:2e:71:39:2b:c9:3c:38:74: 8e:b8:76:97:e6:01:5b:65:e2:5a:81:e2:21:3f:e0:15:14:8f: dd:b4:1c:84:95:36:34:e6:9d:7c:12:c7:8a:47:62:f2:69:29: 8c:6a:d3:ab:15:9d:14:a3:82:bf:d2:d8:f9:91:e8:fd:f7:e7: 18:bf:42:ee:70:f1:6c:36:55:b2:1b:d0:93:d4:5a:3d:38:d7: 07:88:bb:82:5e:41:91:74:67:16:9a:08:e4:30:af:ff:f9:ee: c4:d8:a4:46:c4:0c:55:d8:57:74:33:b1:1b:ed:e1:6b:07:24: ca:de:54:d6:8a:58:32:14:4b:23:e3:bc:e8:99:6e:b9:23:21: f0:a2:65:3b:2a:8f:4a:c7:ea:9b:74:f9:92:8c:0e:be:b8:a5: 20:8b:9e:8c:21:c4:b5:99:d8:09:cc:13:75:ba:2d:a4:76:b3: b2:20:3b:46:1b:9d:ae:9d:8c:0d:8c:bc:55:9b:47:c7:30:ad: 44:8c:96:82:51:7e:dc:13:4e:48:2c:82:18:6a:c1:87:6a:4f: 60:d9:4b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nTncSEvp5o2+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YmI4YmEyOGUtZDIyMy00YTIwLTliNmMtMmMyY2UzNTRlYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxX+X+yQaQlXtwl8G0J1jgb5dFAgoIwbwDgo 5nIIh4F/OI/tjfYrLrG/hrKTHHfpqTOymmiR6cYBbC3P67LT2A0Rb5aBNZlVm52L u1e73B0b2bZUQAoUZ9C1vT4/4WOq5BfjAn2SonzBmRUv2qtLXthPVs3LzN27q5p+ qMZYapNnaOIaBprg7AN0warC1dmOmgt3rex0WuDkj5UaUtE4ZtTFdJ1o5aeRHlub 9MceP0Teyjm3rfjGSHfuuCqyws/1K7DvdH2R1LeZzVTMMiQZdLbEAJtbIyaEAbk8 0wAWq0E1QBnllhw76imklHo0Y8ZzAJ4PQB0/DLzHnsHNjJmScQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1KUG1BZz69rKuZDImx6ceyyplmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjZjI5MWMtOGRhYS0z YTk1LWI5NDItZjRkMjI0ZmRiZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOrC780QeV7KH0JNOxFLywI3xBkt3wJAKzqBVaEgeSLpzMG9CDNHW/Q l5tJTq8ucTkryTw4dI64dpfmAVtl4lqB4iE/4BUUj920HISVNjTmnXwSx4pHYvJp KYxq06sVnRSjgr/S2PmR6P335xi/Qu5w8Ww2VbIb0JPUWj041weIu4JeQZF0Zxaa COQwr//57sTYpEbEDFXYV3QzsRvt4WsHJMreVNaKWDIUSyPjvOiZbrkjIfCiZTsq j0rH6pt0+ZKMDr64pSCLnowhxLWZ2AnME3W6LaR2s7IgO0Ybna6djA2MvFWbR8cw rUSMloJRftwTTkgsghhqwYdqT2DZS3A= -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:50 2026 by rpki-client