$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb022d68-aa92-3379-a66d-8ac12350e67a.roa File: fb022d68-aa92-3379-a66d-8ac12350e67a.roa (raw, json) Hash identifier: ZX4rShlJLyZooJ6nWwzH1sL2aXWXhvlSDAVK5RTJRvM= Subject key identifier: 30:FA:02:BC:90:ED:47:0A:1C:D4:48:DB:82:AA:F7:C9:BF:A8:37:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF62AA9BA36C9E1A601F1080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb022d68-aa92-3379-a66d-8ac12350e67a.roa Signing time: Tue 12 May 2026 14:52:42 +0000 ROA not before: Tue 12 May 2026 14:52:42 +0000 ROA not after: Mon 10 Aug 2026 14:52:42 +0000 asID: 43515 IP address blocks: 34.1.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:62:aa:9b:a3:6c:9e:1a:60:1f:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:52:42 2026 GMT Not After : Aug 10 14:52:42 2026 GMT Subject: CN=fb9dcdf6-5198-4381-986e-b305d03f8288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:90:f7:56:94:e2:4e:fc:77:84:d0:30:ee:1c: 2e:54:94:ac:f4:21:cf:a6:45:06:54:21:ca:05:c6: 0f:de:50:4c:03:ce:89:02:51:58:40:2c:a3:88:1f: c2:82:35:e4:c2:17:58:a1:ad:81:f4:51:b8:81:ac: f4:8e:bd:77:91:06:99:26:6e:56:a2:c8:a1:d6:0c: b4:ec:46:ab:41:ab:28:b7:3e:c9:9f:6c:e8:2c:5c: 4f:2b:1a:c4:cd:9a:d1:59:c9:69:a6:6e:67:6b:6f: 88:4a:d2:2f:1c:d7:95:40:33:e9:f4:6b:ed:6d:26: 5a:20:95:9b:92:aa:12:b2:18:4f:48:46:db:82:dd: 0d:b1:41:64:e7:11:ed:2e:f2:ad:5e:5f:1c:6e:e9: ba:a2:85:db:b3:24:ce:f9:e6:2f:7a:f0:f7:74:99: a6:2e:03:0a:ea:d1:3b:8a:11:98:ac:93:e7:09:3c: ea:6c:3f:c6:fd:6b:9b:be:a9:8e:b7:58:7f:cc:df: 5b:0a:ec:19:f8:53:60:9a:41:d9:58:e4:ab:44:60: 12:19:dd:72:36:65:90:31:7b:05:17:f2:0c:9c:c2: 06:89:fc:52:93:ff:5b:48:6f:13:06:3c:40:a1:37: 9f:83:55:80:99:3d:6a:c8:60:19:d7:08:35:02:f7: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FA:02:BC:90:ED:47:0A:1C:D4:48:DB:82:AA:F7:C9:BF:A8:37:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb022d68-aa92-3379-a66d-8ac12350e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f1:67:56:84:fc:ec:f2:88:1b:c4:e3:95:dd:5f:d6:6a:47: f5:28:51:4f:a5:a8:23:0c:65:dc:9e:95:6e:b4:4a:b6:95:ff: fa:5c:8f:17:7a:c0:50:3f:4d:9c:77:56:08:fa:fa:80:13:70: 5e:38:52:00:60:8d:2a:da:28:ea:94:f7:3e:ae:75:2e:6a:b6: 9f:88:73:fd:cc:91:db:1e:d8:49:69:fa:1b:30:9e:43:ab:a6: 34:a0:b9:85:6d:ef:a8:e6:a2:84:9e:3c:69:bc:4c:d9:ee:87: 39:d4:87:4d:61:99:3c:44:58:f2:6f:e3:8f:99:10:b8:9f:c5: dc:4c:9f:15:c8:d2:7e:ec:06:9e:5f:4c:e2:69:b4:21:1a:66: 43:a2:7e:7c:97:09:8e:11:ec:14:e7:3c:f7:f8:fd:7c:ce:27: 08:38:65:1e:97:d4:1e:da:11:53:5e:34:3f:df:a8:12:92:cc: 63:33:a2:87:a9:5d:24:df:92:08:c1:ab:72:b5:12:81:ce:e3: 3f:8c:64:ca:36:ac:ad:aa:e7:af:af:6d:ea:33:49:c4:b7:32: 74:61:b1:cd:67:d0:53:29:04:57:ca:f3:b2:db:4a:95:d5:8b: 2c:74:f1:12:4a:f0:79:3b:6c:d0:33:a1:2c:35:6a:42:79:63: 3c:a7:19:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYqqbo2yeGmAfEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTI0MloXDTI2MDgxMDE0NTI0MlowLzEtMCsGA1UEAxMk ZmI5ZGNkZjYtNTE5OC00MzgxLTk4NmUtYjMwNWQwM2Y4Mjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZD3VpTiTvx3hNAw7hwuVJSs9CHPpkUGVCHK BcYP3lBMA86JAlFYQCyjiB/CgjXkwhdYoa2B9FG4gaz0jr13kQaZJm5Wosih1gy0 7EarQasotz7Jn2zoLFxPKxrEzZrRWclppm5na2+IStIvHNeVQDPp9GvtbSZaIJWb kqoSshhPSEbbgt0NsUFk5xHtLvKtXl8cbum6ooXbsyTO+eYvevD3dJmmLgMK6tE7 ihGYrJPnCTzqbD/G/WubvqmOt1h/zN9bCuwZ+FNgmkHZWOSrRGASGd1yNmWQMXsF F/IMnMIGifxSk/9bSG8TBjxAoTefg1WAmT1qyGAZ1wg1Avdf1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD6AryQ7UcKHNRI24Kq98m/qDcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmIwMjJkNjgtYWE5Mi0z Mzc5LWE2NmQtOGFjMTIzNTBlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLxZ1aE/OzyiBvE45XdX9ZqR/UoUU+lqCMMZdyelW60SraV//pcjxd6 wFA/TZx3Vgj6+oATcF44UgBgjSraKOqU9z6udS5qtp+Ic/3Mkdse2Elp+hswnkOr pjSguYVt76jmooSePGm8TNnuhznUh01hmTxEWPJv44+ZELifxdxMnxXI0n7sBp5f TOJptCEaZkOifnyXCY4R7BTnPPf4/XzOJwg4ZR6X1B7aEVNeND/fqBKSzGMzooep XSTfkgjBq3K1EoHO4z+MZMo2rK2q56+vbeozScS3MnRhsc1n0FMpBFfK87LbSpXV iyx08RJK8Hk7bNAzoSw1akJ5YzynGeQ= -----END CERTIFICATE-----Generated at Wed May 13 14:13:12 2026 by rpki-client