$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa File: d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa (raw, json) Hash identifier: DDtaZRskwyZRDTBEJuZt0bvR7ZoVW0LstXxkpc8SANA= Subject key identifier: 59:AE:A1:66:D0:34:E9:9E:44:17:03:7B:65:3B:65:40:8B:14:59:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA72C95CB1F11267064D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 15169 IP address blocks: 34.191.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:72:c9:5c:b1:f1:12:67:06:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b94218c1-76ed-453a-9a5a-d30c7e576087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:a4:fe:3d:36:f5:42:6a:7f:8b:c7:88:e2: cb:64:57:ba:fb:64:e0:cc:24:02:4c:56:e9:b6:f2: b6:33:c0:ab:24:37:ee:80:17:f1:66:a1:1a:dc:c9: e8:02:c9:43:e0:37:6b:fb:ab:30:2a:ea:02:4b:8d: 7a:bc:1c:88:79:d2:22:bc:9a:cb:7d:58:94:f5:08: 59:db:17:48:d4:2d:07:f5:29:fb:67:b3:eb:3d:10: bb:e7:db:02:2f:61:ce:06:b2:f6:76:c8:25:2b:5d: 59:b5:9f:17:c5:6f:78:9c:ca:50:9f:42:77:9c:8b: 81:4f:0b:d6:b3:68:e5:b0:8d:75:65:df:48:95:df: a9:db:9e:29:b2:a6:57:de:51:57:7e:56:39:a4:f4: 75:9e:89:45:78:ac:ce:82:34:cb:73:2b:78:86:cc: 96:53:98:28:f7:e2:e3:d3:e1:92:66:2f:75:95:95: 36:41:d5:1d:98:27:3d:32:50:26:ee:f1:ef:34:56: 0e:0f:b5:76:fd:19:3d:a5:18:df:95:c4:27:70:0b: 61:3c:62:4a:69:97:5f:a8:ee:34:60:bb:d1:99:60: d2:d2:2a:e7:95:c3:e3:1c:ca:95:c3:d3:78:6e:5a: ed:a6:ca:3b:d6:b3:04:2b:c0:d8:07:5b:da:5e:74: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AE:A1:66:D0:34:E9:9E:44:17:03:7B:65:3B:65:40:8B:14:59:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d967e0bf-c0fa-3e3f-bc02-843737ac3b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e9:54:a0:49:b3:27:7c:52:7a:33:2e:64:36:96:f7:ba:df: 75:e1:09:4a:aa:e9:17:99:bb:d4:04:a8:42:1f:03:8c:18:75: 4a:cf:ee:ef:52:6c:9c:29:3a:27:a2:c6:5d:f4:df:b9:0a:8d: a7:1e:9e:15:5f:e9:8c:7b:d2:b9:39:fa:df:33:57:1e:b7:51: 31:7e:2d:ea:6a:08:db:ce:02:82:93:81:6c:bb:f2:52:bb:3f: 58:da:25:99:4c:66:f2:d7:8a:08:57:bc:a3:02:bb:43:21:5a: 59:83:9f:95:97:00:6c:97:de:02:f3:df:10:4a:d0:74:1d:dd: 7f:d1:28:b9:e1:1c:93:6e:3e:61:30:dd:d1:32:68:3e:b1:06: fb:e1:c4:15:ca:8e:04:c9:64:ec:36:81:7f:f3:84:0e:c6:87: b1:19:68:8e:5c:52:df:28:c4:01:2c:b6:01:7d:0a:2a:28:74: 3b:fb:56:d8:68:4d:e9:c1:9c:bf:a4:0a:bb:5e:39:cf:42:1f: 24:66:9f:09:8e:49:77:c8:e0:87:fe:69:ce:fa:53:3c:5e:d8: 52:fc:c2:79:93:46:b9:c9:8e:44:51:5d:6e:22:e0:4a:45:9c: b3:97:a0:db:fc:9f:53:30:10:f5:08:0b:c9:71:a6:b5:e3:86: 99:93:98:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nLJXLHxEmcGTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Yjk0MjE4YzEtNzZlZC00NTNhLTlhNWEtZDMwYzdlNTc2MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Kk/j029UJqf4vHiOLLZFe6+2TgzCQCTFbp tvK2M8CrJDfugBfxZqEa3MnoAslD4Ddr+6swKuoCS416vByIedIivJrLfViU9QhZ 2xdI1C0H9Sn7Z7PrPRC759sCL2HOBrL2dsglK11ZtZ8XxW94nMpQn0J3nIuBTwvW s2jlsI11Zd9Ild+p254psqZX3lFXflY5pPR1nolFeKzOgjTLcyt4hsyWU5go9+Lj 0+GSZi91lZU2QdUdmCc9MlAm7vHvNFYOD7V2/Rk9pRjflcQncAthPGJKaZdfqO40 YLvRmWDS0irnlcPjHMqVw9N4blrtpso71rMEK8DYB1vaXnRThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmuoWbQNOmeRBcDe2U7ZUCLFFk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDk2N2UwYmYtYzBmYS0z ZTNmLWJjMDItODQzNzM3YWMzYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHpVKBJsyd8UnozLmQ2lve633XhCUqq6ReZu9QEqEIfA4wYdUrP7u9S bJwpOieixl3037kKjacenhVf6Yx70rk5+t8zVx63UTF+LepqCNvOAoKTgWy78lK7 P1jaJZlMZvLXighXvKMCu0MhWlmDn5WXAGyX3gLz3xBK0HQd3X/RKLnhHJNuPmEw 3dEyaD6xBvvhxBXKjgTJZOw2gX/zhA7Gh7EZaI5cUt8oxAEstgF9CioodDv7Vtho TenBnL+kCrteOc9CHyRmnwmOSXfI4If+ac76Uzxe2FL8wnmTRrnJjkRRXW4i4EpF nLOXoNv8n1MwEPUIC8lxprXjhpmTmCY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:56 2026 by rpki-client