$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa File: 2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa (raw, json) Hash identifier: NTi6ivuUfjwI3cM4mWMkUk1gct3oerOibVj/Pv1uskE= Subject key identifier: D1:F8:F6:0F:07:71:34:43:2C:FF:0A:6F:D6:D6:D4:AD:59:CF:6F:2F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E086634CB27793DDB48DE3600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.85.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:34:cb:27:79:3d:db:48:de:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=51a9bc71-093f-4aa2-b2d7-a298e3738b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:a8:4f:59:47:36:40:98:d1:ac:10:8c:32: e2:29:a2:60:3a:cc:40:b2:72:59:26:b0:cd:91:0c: 0c:65:94:f9:7b:35:cf:6e:ac:ce:62:1d:1b:27:d5: 75:a9:69:a3:d1:61:8d:ba:2c:31:14:b2:eb:bc:24: 72:8e:b9:a3:a7:b1:7e:c1:49:bf:71:11:e9:8d:7e: 88:cc:ff:04:27:2c:a8:35:1e:ef:3b:e4:46:bb:bd: e8:8d:6d:42:2c:bd:53:51:35:ac:57:46:f4:41:46: 2d:9e:63:1e:62:28:1f:e3:c2:f4:57:97:63:a6:5c: 46:7f:a2:61:80:52:7f:a5:2b:8b:00:c0:57:e2:56: a6:24:51:b3:d1:de:97:d3:89:b4:32:4e:be:f4:54: 90:02:c8:81:f0:ba:b3:b1:9a:f4:e6:e8:6c:33:23: 78:fb:96:c7:58:97:50:60:66:cb:9e:9d:9a:2d:43: 74:ad:b7:d2:16:4c:2d:df:80:fe:35:2a:eb:95:b5: d2:69:2f:41:7f:45:4a:dc:05:29:19:03:f3:af:1d: fe:6c:36:a9:b6:2d:99:94:b2:60:91:a9:81:a9:d7: 85:01:29:3d:8a:38:8f:ae:ce:f3:c4:24:6d:91:05: b5:a6:82:b1:a8:6f:87:26:a0:85:0b:8e:03:bc:d4: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:F6:0F:07:71:34:43:2C:FF:0A:6F:D6:D6:D4:AD:59:CF:6F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f4:9b:29:59:b5:98:3f:09:e0:b5:ab:57:05:cb:44:c3:1e: 4c:28:86:c6:4b:cb:b9:c3:88:5d:1b:17:9b:a5:f3:0a:ec:67: a4:9c:58:2a:0d:0b:0a:b4:6d:44:98:e2:68:ee:68:51:eb:88: 0a:63:3c:0b:f1:64:4b:a8:3f:b6:65:30:24:75:7b:21:a1:9d: 24:8d:42:44:d8:a1:2f:49:ca:46:93:60:11:04:75:55:99:72: f4:7f:74:69:5f:7c:e7:02:b3:cf:6c:19:2a:98:a5:a4:25:0f: c2:84:fa:01:a2:d5:10:89:e2:0d:87:cc:a2:84:ef:f0:8c:1d: a2:6e:79:f7:ea:27:bf:f7:78:70:cc:93:6f:8e:20:20:13:02: 68:4a:31:7e:6b:40:52:36:4f:4a:c6:fb:70:e4:c0:dd:83:7f: 89:a3:e8:d1:06:ba:10:88:e9:76:53:4f:87:b7:a3:ca:9f:ee: 2e:b5:b8:72:86:68:bd:c3:f0:f4:c7:3d:51:0a:8e:47:01:20: 13:d6:6f:6a:09:25:7d:2b:c4:51:1e:9f:82:50:c9:a9:16:76: 32:3a:e5:00:7a:2c:4f:6d:d6:a7:dc:43:98:1b:2e:28:a2:5b: f8:2a:10:96:f0:22:cc:46:bc:84:27:af:f3:a2:a5:67:72:69: 86:06:d8:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZjTLJ3k920jeNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk NTFhOWJjNzEtMDkzZi00YWEyLWIyZDctYTI5OGUzNzM4Yjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDaoT1lHNkCY0awQjDLiKaJgOsxAsnJZJrDN kQwMZZT5ezXPbqzOYh0bJ9V1qWmj0WGNuiwxFLLrvCRyjrmjp7F+wUm/cRHpjX6I zP8EJyyoNR7vO+RGu73ojW1CLL1TUTWsV0b0QUYtnmMeYigf48L0V5djplxGf6Jh gFJ/pSuLAMBX4lamJFGz0d6X04m0Mk6+9FSQAsiB8LqzsZr05uhsMyN4+5bHWJdQ YGbLnp2aLUN0rbfSFkwt34D+NSrrlbXSaS9Bf0VK3AUpGQPzrx3+bDapti2ZlLJg kamBqdeFASk9ijiPrs7zxCRtkQW1poKxqG+HJqCFC44DvNTyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH49g8HcTRDLP8Kb9bW1K1Zz28vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZmYjdlNWEtY2UzMC0z Yjc2LWE1ZWQtMDQwNmY4MjFlZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD0mylZtZg/CeC1q1cFy0TDHkwohsZLy7nDiF0bF5ul8wrsZ6ScWCoN Cwq0bUSY4mjuaFHriApjPAvxZEuoP7ZlMCR1eyGhnSSNQkTYoS9JykaTYBEEdVWZ cvR/dGlffOcCs89sGSqYpaQlD8KE+gGi1RCJ4g2HzKKE7/CMHaJueffqJ7/3eHDM k2+OICATAmhKMX5rQFI2T0rG+3DkwN2Df4mj6NEGuhCI6XZTT4e3o8qf7i61uHKG aL3D8PTHPVEKjkcBIBPWb2oJJX0rxFEen4JQyakWdjI65QB6LE9t1qfcQ5gbLiii W/gqEJbwIsxGvIQnr/OipWdyaYYG2A0= -----END CERTIFICATE-----Generated at Sat Jun 13 21:49:41 2026 by rpki-client