$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b5c9e7f-98eb-330b-b495-e0bdb1caddda.roa File: 2b5c9e7f-98eb-330b-b495-e0bdb1caddda.roa (raw, json) Hash identifier: yzcl3cn9Zhzp1BmZfVQ57ZmIKml4vVTCURVqNSObZDI= Subject key identifier: DB:64:8D:CF:2F:3A:8E:F2:38:E6:A7:DC:D9:91:43:05:14:A2:3D:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D5FB4EE6E36FAB81EBFAA7B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b5c9e7f-98eb-330b-b495-e0bdb1caddda.roa Signing time: Thu 02 Apr 2026 14:47:55 +0000 ROA not before: Thu 02 Apr 2026 14:47:55 +0000 ROA not after: Wed 01 Jul 2026 14:47:55 +0000 asID: 396982 IP address blocks: 34.143.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:b4:ee:6e:36:fa:b8:1e:bf:aa:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 2 14:47:55 2026 GMT Not After : Jul 1 14:47:55 2026 GMT Subject: CN=3519bdb6-6fb2-474b-8f41-acd741948cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:0b:52:ec:12:ca:03:bb:4a:7f:06:12:b7: 06:04:e1:5c:7d:5f:d7:95:06:3c:c4:16:10:59:e5: 9c:ba:ec:af:ea:38:dc:1e:82:76:a7:eb:4a:0c:4f: af:6e:7b:11:21:c3:02:9b:de:2c:fb:78:52:c2:06: 71:36:22:ad:dd:b0:3e:5e:8e:b8:98:db:81:3c:fd: 94:ee:76:fe:f4:59:bb:b1:a5:3f:6f:7d:de:1c:f8: 0b:c8:7d:e7:7c:fa:95:de:95:ab:6a:1d:ed:48:32: c5:1a:1d:ad:6a:67:b9:5d:ca:0b:ac:63:e3:0f:30: 12:df:a9:cd:cf:5e:97:0a:e5:a4:dd:69:52:11:4e: a8:bc:5e:5c:8b:0d:13:51:92:50:72:c4:dc:03:4d: 20:60:48:ae:10:e0:66:a7:08:16:65:64:aa:c8:73: b0:96:6b:db:59:dd:9f:3d:32:e2:47:ab:71:29:fa: 22:f1:2f:22:f3:22:95:be:bf:df:0a:ae:ef:2f:3b: a5:f0:5e:b1:53:bb:28:8c:0e:76:92:76:1d:55:16: 38:ad:ca:46:bc:b9:8d:75:a5:07:94:19:8e:a9:cf: ad:57:6c:d0:d2:f0:c2:0d:6b:94:0d:76:ca:3f:e3: 4b:a3:e9:d4:c1:87:03:c0:48:30:ee:b8:1c:9c:30: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:64:8D:CF:2F:3A:8E:F2:38:E6:A7:DC:D9:91:43:05:14:A2:3D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b5c9e7f-98eb-330b-b495-e0bdb1caddda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ea:83:d5:c1:08:60:95:4b:8e:7f:8d:33:cd:43:90:17:f5: 8c:d5:02:00:81:1a:e1:81:81:ce:af:0e:56:c2:32:81:f0:cb: fa:55:de:11:53:a8:04:52:6f:e2:2c:59:cf:94:8e:ac:66:8b: 29:72:75:cb:51:f2:e0:29:45:13:d0:2a:4b:d5:45:4b:68:1c: e3:81:88:a8:90:93:dd:56:f5:04:0d:eb:65:0e:d0:41:be:39: 93:db:4c:8a:de:64:7f:f9:a6:69:79:7a:35:2b:68:64:f3:f9: 6e:37:f9:80:35:98:6a:71:e0:32:28:7a:7b:3e:72:6e:b5:e6: df:86:ce:f5:72:88:93:06:5e:30:8a:42:71:b1:29:f5:05:97: 28:b4:78:16:80:07:23:5b:ed:68:fd:7b:28:a4:94:c7:32:0c: a7:7c:2b:5b:6b:1c:5a:62:54:f4:61:8c:de:cc:c5:75:5d:98: ff:09:90:70:f7:2f:1c:e8:1a:80:2f:84:e8:30:2d:c5:c3:81: d8:ee:1a:58:4d:01:2d:fa:d8:0b:6a:ad:3e:d3:0a:c8:c7:b4: dd:79:d2:12:01:4c:c2:e6:50:74:61:e9:a1:8a:42:e4:e2:5e: 49:87:ae:41:a1:c4:7b:cb:47:dd:69:e9:14:01:2b:20:0b:59: 22:bf:1c:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ftO5uNvq4Hr+qewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwMjE0NDc1NVoXDTI2MDcwMTE0NDc1NVowLzEtMCsGA1UEAxMk MzUxOWJkYjYtNmZiMi00NzRiLThmNDEtYWNkNzQxOTQ4Y2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwkLUuwSygO7Sn8GErcGBOFcfV/XlQY8xBYQ WeWcuuyv6jjcHoJ2p+tKDE+vbnsRIcMCm94s+3hSwgZxNiKt3bA+Xo64mNuBPP2U 7nb+9Fm7saU/b33eHPgLyH3nfPqV3pWrah3tSDLFGh2tame5XcoLrGPjDzAS36nN z16XCuWk3WlSEU6ovF5ciw0TUZJQcsTcA00gYEiuEOBmpwgWZWSqyHOwlmvbWd2f PTLiR6txKfoi8S8i8yKVvr/fCq7vLzul8F6xU7sojA52knYdVRY4rcpGvLmNdaUH lBmOqc+tV2zQ0vDCDWuUDXbKP+NLo+nUwYcDwEgw7rgcnDBIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtkjc8vOo7yOOan3NmRQwUUoj3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI1YzllN2YtOThlYi0z MzBiLWI0OTUtZTBiZGIxY2FkZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIo9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHqg9XBCGCVS45/jTPNQ5AX9YzVAgCBGuGBgc6vDlbCMoHwy/pV3hFT qARSb+IsWc+UjqxmiylydctR8uApRRPQKkvVRUtoHOOBiKiQk91W9QQN62UO0EG+ OZPbTIreZH/5pml5ejUraGTz+W43+YA1mGpx4DIoens+cm615t+GzvVyiJMGXjCK QnGxKfUFlyi0eBaAByNb7Wj9eyiklMcyDKd8K1trHFpiVPRhjN7MxXVdmP8JkHD3 LxzoGoAvhOgwLcXDgdjuGlhNAS362AtqrT7TCsjHtN150hIBTMLmUHRh6aGKQuTi XkmHrkGhxHvLR91p6RQBKyALWSK/HC0= -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:16 2026 by rpki-client