$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21dde04a-e4b4-3f31-baf7-4da511309ec2.roa File: 21dde04a-e4b4-3f31-baf7-4da511309ec2.roa (raw, json) Hash identifier: CQAH+ODYQtBxjABVMJ0Ttz8v5Jp/H/KYe4C2mrZmyh0= Subject key identifier: 90:FF:57:36:42:AA:C5:C2:E9:4F:35:9A:E3:AD:72:B4:C6:65:90:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D5FB3A21DB78027A7215F865C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21dde04a-e4b4-3f31-baf7-4da511309ec2.roa Signing time: Thu 02 Apr 2026 14:45:18 +0000 ROA not before: Thu 02 Apr 2026 14:45:18 +0000 ROA not after: Wed 01 Jul 2026 14:45:18 +0000 asID: 396982 IP address blocks: 8.231.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:b3:a2:1d:b7:80:27:a7:21:5f:86:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 2 14:45:18 2026 GMT Not After : Jul 1 14:45:18 2026 GMT Subject: CN=5d5ff2aa-7234-41d0-abd3-9a6fe2d3a968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:27:a1:3d:d1:fb:db:ca:c6:a1:1f:b5:b5: 9a:56:3e:d6:1c:52:2f:ff:43:87:99:dc:f5:ce:ef: b1:95:49:c6:2c:af:61:6d:09:18:21:c6:d7:43:89: d6:a8:6a:58:2d:be:de:60:8b:3b:7b:b8:0e:36:62: 03:b7:9c:92:c5:3e:8f:c7:a2:45:b8:3b:ab:d2:38: 3d:71:5c:37:0c:0b:81:98:5b:f1:a3:24:bb:56:60: d7:f7:cf:34:73:60:dc:c4:06:ba:cd:34:45:51:49: 33:21:d8:a0:80:68:2f:53:90:65:2a:53:1f:6c:0c: 04:21:1e:95:0c:04:00:10:ce:fe:e1:23:d2:5f:b4: f9:da:83:b8:0e:15:59:9a:97:6f:9f:1f:5d:51:75: 67:99:4d:f7:7a:fa:83:09:5e:7e:c9:13:a9:4e:bb: 6e:e2:62:6b:02:d1:a0:4e:50:fb:d5:5d:a8:ac:7c: 8a:d2:48:c1:4d:b4:29:07:6a:69:6e:af:17:4d:31: 74:b8:03:2a:f2:39:83:e0:55:ff:6f:8a:ac:87:98: 57:0d:c2:de:36:37:f9:f2:b2:ca:d5:bb:cd:fe:87: 59:0b:02:f0:ed:0c:17:56:60:46:02:ab:81:94:b5: d7:95:43:35:03:e3:66:26:d5:01:0c:ec:62:57:b8: 5d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FF:57:36:42:AA:C5:C2:E9:4F:35:9A:E3:AD:72:B4:C6:65:90:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21dde04a-e4b4-3f31-baf7-4da511309ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 8.231.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:dc:79:6e:00:86:2f:11:43:69:8b:8e:af:88:b2:1d:85:6a: 78:4a:7e:b4:72:bd:cc:58:64:a0:56:aa:b1:1a:01:de:0f:03: 77:0c:c7:fd:7d:e9:1e:c7:8d:cd:3b:34:8e:21:5e:7b:02:54: c7:90:a5:cc:10:9b:b6:37:2c:30:8c:06:9a:3f:e9:1a:20:e5: 34:fa:72:8f:e9:97:da:00:5d:ff:d0:c4:c3:f7:11:96:09:4a: 46:45:95:b2:6a:e6:c9:66:3b:3d:2d:59:41:5c:ed:da:f6:e0: 4c:41:0a:af:ba:4f:3f:ac:e0:e1:bd:0c:a4:da:bc:89:07:34: 0c:23:6c:b2:bc:5c:b8:c0:dd:0c:4a:f9:9b:b8:cc:17:0e:85: 4b:34:5d:10:26:e7:1c:4b:d3:3b:0d:1b:f6:c6:6f:ea:6b:7f: b4:d0:b4:27:3c:9c:14:37:f5:78:e7:4a:52:18:4b:2d:21:88: 0f:95:86:cc:de:ac:d8:09:98:39:3d:88:f8:24:22:7a:f6:00: aa:f2:49:de:0f:44:bc:b3:21:a0:b0:a0:19:a4:5c:e8:1e:0c: be:e9:d0:32:c9:4c:51:5e:f1:3f:2c:9e:54:f2:25:e8:f8:c1: a2:cc:33:15:26:18:ee:31:40:74:f0:ff:ad:a0:4f:6c:a9:42: 19:24:9c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fs6Idt4AnpyFfhlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwMjE0NDUxOFoXDTI2MDcwMTE0NDUxOFowLzEtMCsGA1UEAxMk NWQ1ZmYyYWEtNzIzNC00MWQwLWFiZDMtOWE2ZmUyZDNhOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRAnoT3R+9vKxqEftbWaVj7WHFIv/0OHmdz1 zu+xlUnGLK9hbQkYIcbXQ4nWqGpYLb7eYIs7e7gONmIDt5ySxT6Px6JFuDur0jg9 cVw3DAuBmFvxoyS7VmDX9880c2DcxAa6zTRFUUkzIdiggGgvU5BlKlMfbAwEIR6V DAQAEM7+4SPSX7T52oO4DhVZmpdvnx9dUXVnmU33evqDCV5+yROpTrtu4mJrAtGg TlD71V2orHyK0kjBTbQpB2ppbq8XTTF0uAMq8jmD4FX/b4qsh5hXDcLeNjf58rLK 1bvN/odZCwLw7QwXVmBGAquBlLXXlUM1A+NmJtUBDOxiV7hdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD/VzZCqsXC6U81muOtcrTGZZAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjFkZGUwNGEtZTRiNC0z ZjMxLWJhZjctNGRhNTExMzA5ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECOcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzceW4Ahi8RQ2mLjq+Ish2FanhKfrRyvcxYZKBWqrEaAd4PA3cMx/19 6R7Hjc07NI4hXnsCVMeQpcwQm7Y3LDCMBpo/6Rog5TT6co/pl9oAXf/QxMP3EZYJ SkZFlbJq5slmOz0tWUFc7dr24ExBCq+6Tz+s4OG9DKTavIkHNAwjbLK8XLjA3QxK +Zu4zBcOhUs0XRAm5xxL0zsNG/bGb+prf7TQtCc8nBQ39XjnSlIYSy0hiA+Vhsze rNgJmDk9iPgkInr2AKrySd4PRLyzIaCwoBmkXOgeDL7p0DLJTFFe8T8snlTyJej4 waLMMxUmGO4xQHTw/62gT2ypQhkknGo= -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:19 2026 by rpki-client