$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c21a793d-5d84-3922-89e1-ef5b825dbda9.roa File: c21a793d-5d84-3922-89e1-ef5b825dbda9.roa (raw, json) Hash identifier: tdLIA/PhEk7nph05SQjiqZXptSRmLN6dP8pUj65cxfQ= Subject key identifier: 80:13:45:F7:A7:8B:20:74:A9:D1:09:31:9D:54:62:1E:E5:EB:68:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E3E5F177B6A8FD44EA1B0AA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c21a793d-5d84-3922-89e1-ef5b825dbda9.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 396982 IP address blocks: 34.3.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:17:7b:6a:8f:d4:4e:a1:b0:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=b691a37f-e1b2-4709-958b-ef7e2b7606b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:db:4d:68:9f:8d:da:11:8c:b1:e3:9c:68: 88:cc:11:17:02:d5:51:9b:06:eb:4b:00:d9:38:0c: 88:2d:15:c5:30:91:8f:05:50:05:6f:0d:b7:59:f4: 40:9a:c1:4c:07:ea:89:46:81:7d:e2:5f:03:e8:01: c8:4a:09:d8:c9:8c:13:9a:c6:d6:63:2a:c9:43:6c: 26:bc:19:77:44:40:a7:fc:8d:6c:51:c9:09:6c:82: af:eb:b9:fa:fc:d5:a5:8a:70:20:02:a7:eb:8f:36: ec:ae:84:21:e7:a1:ac:c9:a6:2d:1b:f8:4d:59:dc: 15:97:19:23:31:5b:af:8f:2c:d2:af:79:13:82:c3: 66:1d:16:fe:59:fb:10:d1:0b:4a:35:46:c3:fc:f0: 0f:e2:a4:d7:75:92:89:a8:0d:d4:8f:c6:42:cb:a3: da:53:9f:29:1d:62:c9:0b:d6:0b:94:e2:27:26:ca: 0a:2c:8b:9e:05:53:3d:fc:bf:c8:e0:b5:07:b3:14: 81:61:f1:92:1f:d0:10:75:19:e8:3f:55:e5:af:fc: 5b:9f:3f:a2:ad:5d:71:36:8a:16:c9:0f:01:79:f9: d4:be:1b:07:11:0f:7b:29:c1:0a:5f:b4:7b:ca:c8: b3:d7:c0:d1:58:33:8c:97:dd:4b:ba:fb:b6:58:24: 0e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:45:F7:A7:8B:20:74:A9:D1:09:31:9D:54:62:1E:E5:EB:68:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c21a793d-5d84-3922-89e1-ef5b825dbda9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:92:ef:75:60:db:9c:24:41:7b:93:79:93:bc:5a:65:ac:04: c0:1e:45:60:6c:61:40:06:fc:77:fa:1d:4c:01:23:ed:36:36: 03:82:40:f1:a1:b1:ff:3a:df:2d:23:32:a3:e4:d7:e7:01:8f: 11:ee:d0:39:ba:47:dc:45:51:be:cc:7c:a0:24:4e:c9:a0:d1: 1f:59:ea:27:67:37:fc:35:5b:02:78:7a:f4:fe:d3:03:97:ca: be:f7:a7:39:7a:2f:1f:f4:1f:0a:5e:71:ee:24:21:f5:6d:96: cf:65:a7:60:a7:f5:45:71:bd:82:5f:39:21:c9:dc:03:82:a5: 99:91:79:79:1e:9d:81:53:80:39:26:ed:97:a1:9c:6a:37:ca: cf:a0:9e:08:6c:ce:f3:2e:6b:b4:0d:20:f1:03:11:fb:f4:26: 8b:bf:4f:bf:16:34:12:cb:b6:46:98:13:33:f9:cc:7c:c2:c3: e0:16:b5:2d:b3:d2:f2:36:20:ae:7d:ac:69:3e:b1:07:54:e8: 97:6f:22:23:0c:e3:18:b1:a9:c7:23:38:f7:83:2f:05:5c:d8: 45:96:7c:27:0a:0d:a0:e2:b5:45:70:73:1d:7c:6c:79:ce:c7: 2b:2a:ad:50:32:dd:e1:47:99:b5:58:a7:97:23:d9:a5:46:83: c7:54:87:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xxd7ao/UTqGwqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk YjY5MWEzN2YtZTFiMi00NzA5LTk1OGItZWY3ZTJiNzYwNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRPbTWifjdoRjLHjnGiIzBEXAtVRmwbrSwDZ OAyILRXFMJGPBVAFbw23WfRAmsFMB+qJRoF94l8D6AHISgnYyYwTmsbWYyrJQ2wm vBl3RECn/I1sUckJbIKv67n6/NWlinAgAqfrjzbsroQh56GsyaYtG/hNWdwVlxkj MVuvjyzSr3kTgsNmHRb+WfsQ0QtKNUbD/PAP4qTXdZKJqA3Uj8ZCy6PaU58pHWLJ C9YLlOInJsoKLIueBVM9/L/I4LUHsxSBYfGSH9AQdRnoP1Xlr/xbnz+irV1xNooW yQ8BefnUvhsHEQ97KcEKX7R7ysiz18DRWDOMl91Luvu2WCQO1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIATRfeniyB0qdEJMZ1UYh7l62hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzIxYTc5M2QtNWQ4NC0z OTIyLTg5ZTEtZWY1YjgyNWRiZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWS73Vg25wkQXuTeZO8WmWsBMAeRWBsYUAG/Hf6HUwBI+02NgOCQPGh sf863y0jMqPk1+cBjxHu0Dm6R9xFUb7MfKAkTsmg0R9Z6idnN/w1WwJ4evT+0wOX yr73pzl6Lx/0Hwpece4kIfVtls9lp2Cn9UVxvYJfOSHJ3AOCpZmReXkenYFTgDkm 7ZehnGo3ys+gnghszvMua7QNIPEDEfv0Jou/T78WNBLLtkaYEzP5zHzCw+AWtS2z 0vI2IK59rGk+sQdU6JdvIiMM4xixqccjOPeDLwVc2EWWfCcKDaDitUVwcx18bHnO xysqrVAy3eFHmbVYp5cj2aVGg8dUh8c= -----END CERTIFICATE-----Generated at Sun Jun 21 13:37:17 2026 by rpki-client