$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4a19d90-243b-3794-95f0-cc9e41ef9a42.roa File: f4a19d90-243b-3794-95f0-cc9e41ef9a42.roa (raw, json) Hash identifier: VYz7dcpR8s6F+sZhY+KxKc30R2qkiQ35ogWa6kOLJkQ= Subject key identifier: D0:6A:A0:20:D0:67:AE:33:6B:1B:FE:00:0F:3D:9D:DA:16:E8:51:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF62412E0EFD1B754F87FDC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4a19d90-243b-3794-95f0-cc9e41ef9a42.roa Signing time: Tue 12 May 2026 14:51:52 +0000 ROA not before: Tue 12 May 2026 14:51:52 +0000 ROA not after: Mon 10 Aug 2026 14:51:52 +0000 asID: 396982 IP address blocks: 34.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:62:41:2e:0e:fd:1b:75:4f:87:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:51:52 2026 GMT Not After : Aug 10 14:51:52 2026 GMT Subject: CN=1dfdeddc-a6f6-43c9-bb2b-f2a93802081b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:2f:e9:b7:69:d2:3a:9f:5a:18:04:54:a3: 1d:00:d1:45:52:27:38:51:0a:37:5c:5a:29:f2:79: 22:8f:64:81:0f:f1:5c:90:59:5c:e3:90:4b:1d:ec: b1:02:e0:ce:79:a7:e6:56:af:6b:17:c3:1d:fe:06: 1e:66:14:b6:70:c9:9b:21:63:64:5f:00:83:d8:dc: f4:e3:f0:b9:fb:58:6f:af:92:58:92:54:ea:9f:e2: 9d:f2:f0:89:d1:9c:6b:71:db:06:a8:e8:50:75:9c: 82:6d:f3:8d:4f:55:66:99:36:d9:a1:62:b7:de:7c: 69:6d:87:5c:dd:67:4e:09:fd:72:0d:05:46:3f:31: 54:90:2b:bc:53:cb:b3:50:5e:29:fe:dd:36:c3:c5: eb:f1:f9:1e:7d:bd:a7:d8:97:2e:9d:df:fb:4e:dd: 43:63:10:27:0e:d2:1c:88:4f:95:a1:32:2e:49:c0: 81:61:54:d8:a4:ee:33:ea:7f:b7:96:3f:e2:06:d3: da:47:fb:52:bd:71:0b:4e:11:85:be:01:6d:76:c9: d1:a6:0c:aa:c4:88:30:01:b7:1f:55:47:3c:3e:d5: e3:f9:3f:42:ad:c4:86:82:62:c0:21:77:61:c8:2b: c1:30:de:da:15:28:2b:4e:70:42:a2:47:f0:c8:75: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6A:A0:20:D0:67:AE:33:6B:1B:FE:00:0F:3D:9D:DA:16:E8:51:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4a19d90-243b-3794-95f0-cc9e41ef9a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1b:6a:e2:e0:16:1d:fa:f7:de:08:ff:9c:fd:92:ed:1e:42: 74:c0:8b:c0:2e:59:43:b5:73:8d:f8:5e:23:3c:0a:83:d2:a7: d3:24:1b:ea:f8:56:72:ee:a6:b5:91:16:6b:29:83:6b:b6:e4: 58:4c:fc:56:b9:33:a2:5d:e3:68:d2:17:48:7a:61:a8:d1:17: a5:b0:4c:1c:b8:68:d0:dd:1a:a7:62:df:67:74:d2:ae:49:bf: db:46:ac:ec:2c:a8:08:a0:ea:00:1f:b9:d0:10:49:20:96:a6: 96:8a:8b:47:98:ed:2b:87:70:30:11:7c:52:e0:ed:18:f5:4e: 59:18:3a:5b:ee:68:47:31:89:60:34:a3:bb:07:7a:44:9f:b6: 20:2c:37:b1:eb:bc:5c:f9:31:6e:5d:2d:14:0c:60:ef:68:23: 3f:1a:6c:bc:b5:b8:88:f9:c9:4a:7a:70:c0:27:60:6b:56:96: b8:c3:5f:a4:f9:d2:c4:a6:8a:fb:ba:b0:17:79:df:1c:2c:1c: 98:a0:3e:03:ec:ab:37:b9:46:55:c8:94:5b:85:2d:c4:a7:48: 29:a6:91:2b:d6:2c:05:52:13:7c:5b:7e:b1:24:a4:c0:ab:4a: 2c:7c:5e:72:c6:74:69:d1:a7:b8:f1:af:57:c0:9b:73:ec:cf: 72:ea:7f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYkEuDv0bdU+H/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTE1MloXDTI2MDgxMDE0NTE1MlowLzEtMCsGA1UEAxMk MWRmZGVkZGMtYTZmNi00M2M5LWJiMmItZjJhOTM4MDIwODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxsv6bdp0jqfWhgEVKMdANFFUic4UQo3XFop 8nkij2SBD/FckFlc45BLHeyxAuDOeafmVq9rF8Md/gYeZhS2cMmbIWNkXwCD2Nz0 4/C5+1hvr5JYklTqn+Kd8vCJ0ZxrcdsGqOhQdZyCbfONT1VmmTbZoWK33nxpbYdc 3WdOCf1yDQVGPzFUkCu8U8uzUF4p/t02w8Xr8fkefb2n2Jcund/7Tt1DYxAnDtIc iE+VoTIuScCBYVTYpO4z6n+3lj/iBtPaR/tSvXELThGFvgFtdsnRpgyqxIgwAbcf VUc8PtXj+T9CrcSGgmLAIXdhyCvBMN7aFSgrTnBCokfwyHVCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBqoCDQZ64zaxv+AA89ndoW6FF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjRhMTlkOTAtMjQzYi0z Nzk0LTk1ZjAtY2M5ZTQxZWY5YTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQbauLgFh36994I/5z9ku0eQnTAi8AuWUO1c434XiM8CoPSp9MkG+r4 VnLuprWRFmspg2u25FhM/Fa5M6Jd42jSF0h6YajRF6WwTBy4aNDdGqdi32d00q5J v9tGrOwsqAig6gAfudAQSSCWppaKi0eY7SuHcDARfFLg7Rj1TlkYOlvuaEcxiWA0 o7sHekSftiAsN7HrvFz5MW5dLRQMYO9oIz8abLy1uIj5yUp6cMAnYGtWlrjDX6T5 0sSmivu6sBd53xwsHJigPgPsqze5RlXIlFuFLcSnSCmmkSvWLAVSE3xbfrEkpMCr Six8XnLGdGnRp7jxr1fAm3Psz3Lqfys= -----END CERTIFICATE-----Generated at Wed May 13 15:57:18 2026 by rpki-client