$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa File: 4215d1e7-5573-3392-ba71-d93fac0fd31a.roa (raw, json) Hash identifier: 8edSbx/s1OVehAfztOxll3LXQhIRdUi/oa5ReDI2rjE= Subject key identifier: 49:75:7D:1E:48:C8:7F:31:98:86:47:88:B2:35:BB:1A:0F:5A:36:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E0865FACFE0487D3CED271700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.147.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:fa:cf:e0:48:7d:3c:ed:27:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=0df388dd-e7ee-41b2-a834-9382ba7b58ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:fd:36:07:2c:97:0b:f6:10:d0:26:2c:e8: 71:51:84:9c:94:2a:62:3a:e4:d2:fb:0c:8c:99:ee: 6a:5f:2a:c0:e5:27:2f:9b:7b:67:a0:e3:8d:00:da: cf:61:f5:45:94:53:61:1a:f6:6e:10:f7:ad:b2:31: e0:d7:c8:63:02:22:61:d7:af:27:c5:6c:2f:e9:0c: 73:86:db:ec:0a:d4:78:5a:83:34:56:55:2b:33:a9: cb:74:1e:7b:4e:d3:4f:bd:38:7c:c4:26:74:44:3d: c0:2f:28:d0:71:c1:17:63:76:bc:03:e1:57:c2:87: d6:c6:62:9a:b6:87:fa:b9:20:b2:c7:16:b5:e6:9d: 05:61:1e:4a:10:a8:3c:66:21:7d:a1:1e:77:a8:3a: 12:43:26:38:d3:31:89:08:b0:a5:d1:26:6c:42:44: d1:f4:c1:b3:98:86:c4:19:a8:44:a1:1b:76:62:82: 50:5f:1b:32:bf:34:5d:13:18:2b:e2:84:9c:56:78: 25:25:46:b4:21:20:09:c0:de:a7:5e:8a:09:9b:35: 4b:47:bf:5f:15:cf:4c:92:49:85:9c:6d:f5:98:62: a5:0c:4d:67:61:fb:f6:63:41:9e:ba:3b:dd:34:05: 4b:09:60:bb:6d:88:06:61:e4:52:5c:53:94:2e:c2: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:75:7D:1E:48:C8:7F:31:98:86:47:88:B2:35:BB:1A:0F:5A:36:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2a:c0:21:c1:33:d4:9a:ce:f1:22:39:00:ff:1f:db:9f:e7: b5:b6:6f:4c:cf:51:3d:00:61:f5:43:8b:64:58:96:15:76:eb: 75:3a:5d:0e:77:e1:44:c3:3c:6f:ca:8e:ce:ab:a8:e4:9e:de: 28:33:a6:d3:0c:e3:b2:82:12:6f:ea:bf:df:bd:91:8d:38:1a: 09:48:ad:ff:44:ad:88:2e:85:b7:28:53:31:25:9e:25:bb:11: f5:83:c8:ee:33:c5:2e:17:cd:83:cc:7d:a7:12:73:90:f9:3c: 5b:d1:12:fd:5b:a7:67:fa:7d:87:3f:46:96:11:dd:0a:95:1e: 03:a5:5c:d9:59:2c:b6:a3:11:b6:d9:4e:0e:c5:46:bf:de:28: a6:7b:b4:29:0b:89:09:55:ed:a0:7b:b6:5c:2e:3a:d8:7c:24: e5:9b:bd:63:23:50:07:b2:86:a4:74:6d:31:e7:1b:50:57:54: ce:d8:eb:c4:99:82:50:9f:06:71:fa:88:e3:88:b6:fe:c9:9e: 1f:0d:70:81:ce:1b:66:23:4c:fe:4d:f0:68:21:37:0a:dd:00: 3c:44:1a:d8:e3:50:6d:f7:39:28:d3:75:91:3f:57:a3:f2:80: 3c:85:3f:d1:88:e8:79:99:85:93:fa:93:7a:fa:d3:47:94:f1: c3:50:0c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZfrP4Eh9PO0nFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MGRmMzg4ZGQtZTdlZS00MWIyLWE4MzQtOTM4MmJhN2I1OGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySz9Ngcslwv2ENAmLOhxUYSclCpiOuTS+wyM me5qXyrA5Scvm3tnoOONANrPYfVFlFNhGvZuEPetsjHg18hjAiJh168nxWwv6Qxz htvsCtR4WoM0VlUrM6nLdB57TtNPvTh8xCZ0RD3ALyjQccEXY3a8A+FXwofWxmKa tof6uSCyxxa15p0FYR5KEKg8ZiF9oR53qDoSQyY40zGJCLCl0SZsQkTR9MGzmIbE GahEoRt2YoJQXxsyvzRdExgr4oScVnglJUa0ISAJwN6nXooJmzVLR79fFc9MkkmF nG31mGKlDE1nYfv2Y0GeujvdNAVLCWC7bYgGYeRSXFOULsLoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl1fR5IyH8xmIZHiLI1uxoPWjb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDIxNWQxZTctNTU3My0z MzkyLWJhNzEtZDkzZmFjMGZkMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0qwCHBM9SazvEiOQD/H9uf57W2b0zPUT0AYfVDi2RYlhV263U6XQ53 4UTDPG/Kjs6rqOSe3igzptMM47KCEm/qv9+9kY04GglIrf9ErYguhbcoUzElniW7 EfWDyO4zxS4XzYPMfacSc5D5PFvREv1bp2f6fYc/RpYR3QqVHgOlXNlZLLajEbbZ Tg7FRr/eKKZ7tCkLiQlV7aB7tlwuOth8JOWbvWMjUAeyhqR0bTHnG1BXVM7Y68SZ glCfBnH6iOOItv7Jnh8NcIHOG2YjTP5N8GghNwrdADxEGtjjUG33OSjTdZE/V6Py gDyFP9GI6HmZhZP6k3r600eU8cNQDCM= -----END CERTIFICATE-----Generated at Sun Jun 14 00:54:32 2026 by rpki-client