$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fce5530-9359-3a7a-bfa7-5231663aa66e.roa File: 8fce5530-9359-3a7a-bfa7-5231663aa66e.roa (raw, json) Hash identifier: l0aPRUPSHhpM6zgT075ND/X0q2IUg/1HtRTZM40fBFc= Subject key identifier: 40:E7:03:BC:C3:43:74:7D:CB:CF:7E:9C:AF:B1:EA:B2:04:89:A6:5C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D5F7FA7BD303EA5DE86672200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fce5530-9359-3a7a-bfa7-5231663aa66e.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 34.3.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a7:bd:30:3e:a5:de:86:67:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=09a6dc24-9a4d-4218-86d8-65c68543b84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:81:71:9c:04:b2:72:61:11:51:f4:7e:43: 4c:9d:f6:a5:e1:df:41:fb:0f:2b:4e:d2:24:f8:4e: 5f:e7:d7:09:e6:4d:08:ba:9e:a0:e3:ea:30:f9:c5: 95:2d:2c:3a:73:67:c3:4c:a5:4a:35:10:c4:c2:45: 1b:f6:14:44:38:e9:83:f1:6e:83:8f:2c:78:bc:97: 2b:80:cd:87:c6:94:be:68:40:69:58:13:f6:25:a2: 5d:d0:e7:1e:c0:6d:fd:5e:c6:1e:5e:be:bc:55:04: d4:7b:37:16:f3:87:d1:62:92:55:32:be:60:96:83: f6:e3:1a:b2:a8:3c:30:76:be:30:7c:87:ce:5e:04: a4:26:72:50:47:21:84:41:28:6b:1a:29:b8:5c:48: be:b7:18:4f:03:d7:42:34:8b:46:18:34:4c:be:10: 76:d3:6d:b9:1d:09:2f:b6:24:5d:00:b0:71:eb:a6: 7e:7a:31:c9:f6:38:98:56:2f:b5:e9:bd:57:7a:6c: 28:38:97:2e:7c:0f:51:89:ae:e0:43:f9:75:fc:0e: 8f:3d:e6:ea:5a:e2:73:03:3f:44:fa:a7:0c:55:10: 62:45:de:d7:8e:4d:b5:eb:eb:77:e6:6c:dd:13:bc: 63:bf:3c:14:ce:59:9a:a2:8b:37:eb:aa:b6:df:e1: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:03:BC:C3:43:74:7D:CB:CF:7E:9C:AF:B1:EA:B2:04:89:A6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fce5530-9359-3a7a-bfa7-5231663aa66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5a:10:4c:3c:32:8e:af:4f:c4:5a:1a:12:02:e2:23:82:a4: 01:1f:8d:e1:53:8f:50:07:60:46:5c:b9:4b:87:c8:fd:84:f9: c4:4e:2e:d4:1b:96:1c:28:57:4e:73:bd:0e:0f:a1:f5:8f:75: 92:46:f3:58:b4:7d:c3:34:a7:c2:79:c1:b0:48:fc:16:ac:87: 33:b7:36:26:90:6c:41:4a:ec:51:41:b0:ce:d6:e1:8a:ab:de: a1:7f:20:73:e4:72:e5:34:05:7e:81:d3:86:2d:b8:f8:22:14: e9:66:ef:21:2c:be:23:d8:7d:94:36:c3:a3:a3:be:0b:1d:01: 92:77:19:27:e6:e8:3b:aa:d8:dd:29:70:db:fd:c7:74:1f:3a: 2e:69:8b:ae:8a:fa:0c:d5:0c:b7:23:32:a8:4f:64:2b:03:6e: 57:6f:05:53:0e:5d:06:14:8e:cb:df:54:76:8e:e9:38:95:4e: 03:c9:ba:46:03:b6:c2:eb:ae:21:e6:ed:53:13:2a:fa:14:48: e8:6d:65:5d:f1:ef:d6:cd:24:af:4f:23:0c:4a:a9:04:49:ef: 9e:86:85:21:f9:fa:06:6c:0d:a9:2e:5e:c4:b4:35:48:66:17: 28:d5:f0:39:54:33:11:ea:c5:22:24:e0:5f:37:6c:a4:9a:77: f3:09:ef:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6e9MD6l3oZnIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk MDlhNmRjMjQtOWE0ZC00MjE4LTg2ZDgtNjVjNjg1NDNiODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCBcZwEsnJhEVH0fkNMnfal4d9B+w8rTtIk +E5f59cJ5k0Iup6g4+ow+cWVLSw6c2fDTKVKNRDEwkUb9hREOOmD8W6Djyx4vJcr gM2HxpS+aEBpWBP2JaJd0OcewG39XsYeXr68VQTUezcW84fRYpJVMr5gloP24xqy qDwwdr4wfIfOXgSkJnJQRyGEQShrGim4XEi+txhPA9dCNItGGDRMvhB20225HQkv tiRdALBx66Z+ejHJ9jiYVi+16b1XemwoOJcufA9Ria7gQ/l1/A6PPebqWuJzAz9E +qcMVRBiRd7Xjk216+t35mzdE7xjvzwUzlmaoos366q23+GY9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDnA7zDQ3R9y89+nK+x6rIEiaZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGZjZTU1MzAtOTM1OS0z YTdhLWJmYTctNTIzMTY2M2FhNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIgMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFaEEw8Mo6vT8RaGhIC4iOCpAEfjeFTj1AHYEZcuUuHyP2E+cROLtQb lhwoV05zvQ4PofWPdZJG81i0fcM0p8J5wbBI/BashzO3NiaQbEFK7FFBsM7W4Yqr 3qF/IHPkcuU0BX6B04YtuPgiFOlm7yEsviPYfZQ2w6OjvgsdAZJ3GSfm6Duq2N0p cNv9x3QfOi5pi66K+gzVDLcjMqhPZCsDbldvBVMOXQYUjsvfVHaO6TiVTgPJukYD tsLrriHm7VMTKvoUSOhtZV3x79bNJK9PIwxKqQRJ756GhSH5+gZsDakuXsS0NUhm FyjV8DlUMxHqxSIk4F83bKSad/MJ7xA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:14 2026 by rpki-client