$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa File: 5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa (raw, json) Hash identifier: rR3yYfESRxqE1bfIPToLX/nSDB6DJtbUoRc+F3AG/9E= Subject key identifier: 8C:3A:CA:52:41:C5:53:E4:3B:65:E7:36:F3:76:E7:36:77:21:7B:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DE1506FC2880F6A88D14270A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 11344 IP address blocks: 34.152.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:6f:c2:88:0f:6a:88:d1:42:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=e65a92b2-d9b0-4397-b658-cd541cd2f586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:39:f0:7d:95:03:3b:23:62:da:80:76:53: 89:45:a4:98:f0:3a:05:e3:fa:b0:46:af:71:0e:5d: 66:38:3a:db:49:27:08:bf:d7:94:d0:a8:af:3b:a7: dd:2a:6e:98:2e:7d:95:63:a9:53:0c:45:24:63:17: fb:04:18:98:6b:1a:4a:94:88:4d:f5:51:4f:6d:a9: aa:12:16:f4:1e:75:ed:36:0a:93:f2:00:f4:27:bf: f4:c3:e6:ad:5c:0b:c0:fb:6b:c8:25:ae:92:d0:c4: 7a:62:a1:26:25:e2:d5:7c:c2:bd:43:76:18:60:30: 95:65:90:70:b6:59:86:ef:6a:33:e3:ae:dc:3b:5a: 49:7c:30:77:57:fa:99:7a:be:18:0b:0f:80:ff:8b: f2:32:1a:32:cf:de:f6:b4:1d:3d:7e:52:63:6a:d1: 37:59:e4:8f:11:56:18:23:70:f7:26:22:48:31:a7: 9c:27:05:3c:70:ad:2d:66:b2:0e:32:c4:46:8d:0e: f8:86:69:d7:4f:43:c0:a3:21:d3:29:cf:65:2a:75: 8c:a7:58:15:c3:c0:e8:71:6a:69:f9:ce:57:59:2a: 94:5e:41:92:9d:d3:00:27:5f:67:7f:f3:3c:5e:e5: d7:bd:10:c5:eb:10:ea:b1:03:6c:6a:14:f3:09:79: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3A:CA:52:41:C5:53:E4:3B:65:E7:36:F3:76:E7:36:77:21:7B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:93:94:2e:65:92:91:3d:ed:93:4e:5d:1d:6c:fa:86:20:be: bd:53:ff:72:3a:6f:d0:db:66:21:78:c2:22:95:5c:15:a8:12: a8:33:23:08:2c:52:4b:12:a9:9c:97:c0:e7:28:f6:69:e4:ea: 72:f1:c1:e8:bf:10:e1:88:aa:95:00:72:50:c1:6e:a0:88:1c: 69:7b:11:80:8d:06:fa:50:20:eb:9e:ce:60:ae:f1:dc:f9:9f: 5b:41:ce:33:dd:73:16:ca:bb:b1:9e:a5:b8:79:ce:dd:66:83: 22:8d:7d:07:e2:7e:97:b8:6c:87:c3:99:55:1b:01:96:62:45: 1f:58:11:ed:9e:a9:9f:52:15:5d:ae:aa:38:76:64:9e:4f:01: ef:ad:6a:ff:2d:5b:95:7d:bc:34:7d:8e:a7:ca:8f:81:c9:9b: 8a:6a:d6:8f:cb:04:a1:e5:f5:a3:f7:2c:bf:b4:ec:ab:62:d3: d0:4d:3b:b8:9a:ad:74:d2:67:e3:61:a2:6b:f7:d6:00:6f:ac: 4d:e7:0b:5a:c5:a3:ec:7c:ba:47:5c:de:df:f2:16:77:fd:27: ab:3a:25:9c:d3:ef:4a:c3:2f:0b:6c:13:37:4f:0e:3e:86:5b: 1a:15:c2:69:f3:0e:0c:8c:54:c1:07:2a:72:be:7a:4b:48:b9: ec:0e:91:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUG/CiA9qiNFCcKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTY1YTkyYjItZDliMC00Mzk3LWI2NTgtY2Q1NDFjZDJmNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaA58H2VAzsjYtqAdlOJRaSY8DoF4/qwRq9x Dl1mODrbSScIv9eU0KivO6fdKm6YLn2VY6lTDEUkYxf7BBiYaxpKlIhN9VFPbamq Ehb0HnXtNgqT8gD0J7/0w+atXAvA+2vIJa6S0MR6YqEmJeLVfMK9Q3YYYDCVZZBw tlmG72oz467cO1pJfDB3V/qZer4YCw+A/4vyMhoyz972tB09flJjatE3WeSPEVYY I3D3JiJIMaecJwU8cK0tZrIOMsRGjQ74hmnXT0PAoyHTKc9lKnWMp1gVw8DocWpp +c5XWSqUXkGSndMAJ19nf/M8XuXXvRDF6xDqsQNsahTzCXmg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw6ylJBxVPkO2XnNvN25zZ3IXuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTIzNmNhYmMtOWNjYS0z ZTY0LTljYzctMWVhNmNkY2RjZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIphYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSTlC5lkpE97ZNOXR1s+oYgvr1T/3I6b9DbZiF4wiKVXBWoEqgzIwgs UksSqZyXwOco9mnk6nLxwei/EOGIqpUAclDBbqCIHGl7EYCNBvpQIOuezmCu8dz5 n1tBzjPdcxbKu7Gepbh5zt1mgyKNfQfifpe4bIfDmVUbAZZiRR9YEe2eqZ9SFV2u qjh2ZJ5PAe+tav8tW5V9vDR9jqfKj4HJm4pq1o/LBKHl9aP3LL+07Kti09BNO7ia rXTSZ+Nhomv31gBvrE3nC1rFo+x8ukdc3t/yFnf9J6s6JZzT70rDLwtsEzdPDj6G WxoVwmnzDgyMVMEHKnK+ektIuewOkbw= -----END CERTIFICATE-----Generated at Sun Jun 14 08:09:34 2026 by rpki-client