$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ac9109-3937-385a-9845-7ca3a88c835c.roa File: 19ac9109-3937-385a-9845-7ca3a88c835c.roa (raw, json) Hash identifier: 3CvN6qIX3q9Gi0+HoA3E7TcbBrlI7dBhYbNOuduKffE= Subject key identifier: DD:C6:E4:FA:DB:A4:AC:67:F4:FB:C2:C2:C9:FF:75:B6:BF:04:12:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E08661BE85D869CA2189746C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ac9109-3937-385a-9845-7ca3a88c835c.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.98.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:1b:e8:5d:86:9c:a2:18:97:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=fcf3b1d2-852a-456b-82ac-2f497ebf773d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:37:5f:78:ec:0b:6d:22:2f:42:7b:82:26: f7:d0:44:85:a3:20:2b:bc:f2:f0:72:f0:d9:97:c1: b8:e7:cd:8d:65:8c:77:af:6b:80:fc:bb:05:bc:35: c5:5e:2e:5a:29:cd:51:0c:da:4e:42:2a:6f:38:2c: a8:90:4c:28:7e:dd:fa:c9:58:72:33:9a:f3:a8:5d: 6a:c4:09:ae:81:97:8e:15:98:ea:1f:e0:20:da:33: 25:bc:74:b7:6f:a6:34:7e:60:b8:51:d2:c6:6f:a4: 25:25:cd:0c:8e:4b:88:21:a5:49:1a:d2:d8:54:39: 43:97:ed:d8:f0:b0:c0:e7:cf:b5:a6:24:ba:cd:39: 83:49:70:c1:0e:12:48:66:62:b3:3e:1a:12:d1:49: 99:f4:3f:30:75:27:d3:9d:c5:a0:88:c9:9f:36:17: 5f:fa:5f:04:9d:8c:aa:ca:de:47:02:75:7a:0a:6e: 1a:5e:8e:44:1f:51:bf:9b:59:7b:c5:b3:8a:85:10: 85:41:d5:12:47:ef:15:54:95:c5:70:ef:f5:9f:79: a4:49:65:39:04:ec:0e:bb:24:10:66:46:df:af:56: 5c:08:22:aa:c4:bf:86:2e:7d:4f:d0:d3:c3:e2:2d: d7:05:ac:19:63:b8:6d:44:6e:83:29:de:c9:87:ac: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C6:E4:FA:DB:A4:AC:67:F4:FB:C2:C2:C9:FF:75:B6:BF:04:12:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ac9109-3937-385a-9845-7ca3a88c835c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5f:a6:44:ee:ac:8c:66:ad:2f:9c:c0:3f:a6:84:ab:aa:4e: 70:2d:3e:b9:4c:00:a7:7f:c9:c9:c4:f1:c0:b9:b1:c8:fb:1a: b4:be:f2:b4:2c:3f:63:a4:8a:b3:ed:b2:ab:ec:4f:73:d8:dc: ee:4e:99:20:27:2b:a0:d9:68:0a:e4:e8:3b:76:ff:63:cc:62: 8e:34:56:55:d5:29:16:02:e4:dd:dc:b8:37:e9:dd:0b:33:c5: 0b:35:e3:c8:90:d1:0c:3e:e4:45:f7:ca:91:6f:3c:23:fe:ce: 48:c1:a7:f8:ca:91:5b:e5:57:ac:97:5b:a1:33:c7:48:b3:81: 58:48:9d:6d:23:18:53:c5:75:5f:77:c8:7c:6d:a5:7e:83:a5: 03:fe:c3:e9:9b:be:2e:d1:65:c1:17:ef:93:b8:2c:24:f0:35: 6d:60:f0:ee:ad:f6:60:72:b9:84:33:77:f8:8a:6f:30:4c:37: 54:4d:01:e6:22:fd:a7:69:6d:d5:0e:95:02:53:2b:41:3d:aa: 2f:15:5d:5e:59:20:cb:b0:3b:02:69:20:66:af:46:a5:97:1a: 38:ee:70:9f:55:8f:ae:62:58:bc:74:d3:e8:fa:9a:01:32:1f: 52:29:47:ab:ae:30:83:4d:b7:97:ac:b3:8b:ce:4c:55:77:97: e9:2e:56:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZhvoXYacohiXRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZmNmM2IxZDItODUyYS00NTZiLTgyYWMtMmY0OTdlYmY3NzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Y3X3jsC20iL0J7gib30ESFoyArvPLwcvDZ l8G4582NZYx3r2uA/LsFvDXFXi5aKc1RDNpOQipvOCyokEwoft36yVhyM5rzqF1q xAmugZeOFZjqH+Ag2jMlvHS3b6Y0fmC4UdLGb6QlJc0MjkuIIaVJGtLYVDlDl+3Y 8LDA58+1piS6zTmDSXDBDhJIZmKzPhoS0UmZ9D8wdSfTncWgiMmfNhdf+l8EnYyq yt5HAnV6Cm4aXo5EH1G/m1l7xbOKhRCFQdUSR+8VVJXFcO/1n3mkSWU5BOwOuyQQ Zkbfr1ZcCCKqxL+GLn1P0NPD4i3XBawZY7htRG6DKd7Jh6z5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3G5PrbpKxn9PvCwsn/dba/BBKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTlhYzkxMDktMzkzNy0z ODVhLTk4NDUtN2NhM2E4OGM4MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1fpkTurIxmrS+cwD+mhKuqTnAtPrlMAKd/ycnE8cC5scj7GrS+8rQs P2OkirPtsqvsT3PY3O5OmSAnK6DZaArk6Dt2/2PMYo40VlXVKRYC5N3cuDfp3Qsz xQs148iQ0Qw+5EX3ypFvPCP+zkjBp/jKkVvlV6yXW6Ezx0izgVhInW0jGFPFdV93 yHxtpX6DpQP+w+mbvi7RZcEX75O4LCTwNW1g8O6t9mByuYQzd/iKbzBMN1RNAeYi /adpbdUOlQJTK0E9qi8VXV5ZIMuwOwJpIGavRqWXGjjucJ9Vj65iWLx00+j6mgEy H1IpR6uuMINNt5ess4vOTFV3l+kuViA= -----END CERTIFICATE-----Generated at Sun Jun 14 00:52:29 2026 by rpki-client