$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa File: aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa (raw, json) Hash identifier: 2h9cC9lBt0BnEKU/2JGyW51FJvQvf1BQVIrbyF78V2I= Subject key identifier: 3F:89:EC:F0:4E:4F:E1:27:63:FA:5B:99:9F:FD:4E:1D:F0:06:97:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E08662081CBB38E7021B09B20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.96.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:20:81:cb:b3:8e:70:21:b0:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=a037e6ff-5a4b-4d73-984b-dd1474b990b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:51:75:bc:da:c6:98:76:82:4f:8e:ef:fb:e1: f3:95:df:da:a7:e6:58:45:36:98:0b:c4:58:2e:cd: ea:eb:6b:50:72:88:e6:de:78:0c:2a:f0:f7:bd:3e: 1c:ff:e2:5a:20:ab:41:3d:20:8a:8b:2e:94:84:4a: e6:89:3c:59:13:95:eb:d4:2a:c3:95:db:e0:36:d9: a0:d8:f5:fc:a4:29:2e:62:bb:36:12:43:b8:71:f7: b1:e7:ac:4f:f2:5d:82:41:f8:0c:85:ee:e5:b5:fa: 1e:7d:38:c1:24:fd:ee:77:90:0e:51:4a:4b:8b:45: d0:52:ad:bb:0e:ed:47:30:0e:21:83:08:6a:bb:07: e5:ca:f6:d5:7f:29:57:fd:84:e4:f6:9e:6f:40:cb: 2f:d8:11:49:39:2b:53:45:a0:ff:f3:68:50:e8:d4: 27:37:b5:18:d3:bc:8c:61:bb:c2:eb:82:db:74:96: e6:ff:19:e7:78:2c:04:76:98:b4:02:28:e3:21:ec: eb:73:f1:df:2d:bd:c4:6a:01:24:59:0c:95:f3:4a: b6:de:cd:e6:9a:14:57:28:6e:a7:3b:ae:bd:5c:0d: 8a:77:ad:a3:9f:ff:e9:7b:67:a8:66:23:8b:98:f2: 1f:da:24:3b:c6:41:fc:11:02:2a:e1:de:b3:b8:b8: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:EC:F0:4E:4F:E1:27:63:FA:5B:99:9F:FD:4E:1D:F0:06:97:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:32:f0:8d:62:45:18:66:8b:db:4f:25:d2:e3:68:f9:dc:92: f6:6d:2f:01:03:06:55:37:0c:17:06:b9:5c:c7:4b:7f:b7:89: b0:54:51:e8:50:b2:9a:b1:05:a3:91:0f:81:3e:0c:d8:23:78: 39:b8:41:8f:70:fd:44:51:8c:d5:16:6c:a4:68:b8:99:80:55: 5a:45:6c:68:d8:9c:e0:6a:6d:11:77:ed:0c:8a:4b:d3:a5:24: c4:60:5e:1a:cc:7d:59:fc:5c:d7:c0:4a:5d:67:d8:97:df:af: 3f:3b:8a:9a:aa:a0:31:c1:60:fd:47:ed:48:4d:db:09:97:14: 99:6f:ef:47:7e:e6:c2:76:d8:92:2c:53:fd:e4:37:ee:86:ed: f3:1c:23:97:21:18:10:89:a8:e1:b9:96:60:ed:f3:44:e2:56: b0:a4:06:77:cc:ca:b8:86:26:2c:5c:3d:d8:55:16:2e:d2:3a: 2b:52:06:32:c7:83:3b:31:8a:9c:18:3a:da:c2:2a:cc:82:26: 0f:29:62:50:17:ca:20:43:5a:7c:d3:ed:19:e8:0b:a0:c0:90: 07:cf:24:9a:ef:04:b2:99:66:36:45:d2:13:07:ed:32:73:61: dd:8a:8b:7c:47:ea:0d:64:15:ee:51:9d:63:4f:7a:2b:8c:71: 27:76:fd:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZiCBy7OOcCGwmyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YTAzN2U2ZmYtNWE0Yi00ZDczLTk4NGItZGQxNDc0Yjk5MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVF1vNrGmHaCT47v++Hzld/ap+ZYRTaYC8RY Ls3q62tQcojm3ngMKvD3vT4c/+JaIKtBPSCKiy6UhErmiTxZE5Xr1CrDldvgNtmg 2PX8pCkuYrs2EkO4cfex56xP8l2CQfgMhe7ltfoefTjBJP3ud5AOUUpLi0XQUq27 Du1HMA4hgwhquwflyvbVfylX/YTk9p5vQMsv2BFJOStTRaD/82hQ6NQnN7UY07yM YbvC64LbdJbm/xnneCwEdpi0AijjIezrc/HfLb3EagEkWQyV80q23s3mmhRXKG6n O669XA2Kd62jn//pe2eoZiOLmPIf2iQ7xkH8EQIq4d6zuLihPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+J7PBOT+EnY/pbmZ/9Th3wBpcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE5ZDk4MDUtY2YyZS0z OTE2LTliOGUtOGE0OGU2ZWFiNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsy8I1iRRhmi9tPJdLjaPnckvZtLwEDBlU3DBcGuVzHS3+3ibBUUehQ spqxBaORD4E+DNgjeDm4QY9w/URRjNUWbKRouJmAVVpFbGjYnOBqbRF37QyKS9Ol JMRgXhrMfVn8XNfASl1n2Jffrz87ipqqoDHBYP1H7UhN2wmXFJlv70d+5sJ22JIs U/3kN+6G7fMcI5chGBCJqOG5lmDt80TiVrCkBnfMyriGJixcPdhVFi7SOitSBjLH gzsxipwYOtrCKsyCJg8pYlAXyiBDWnzT7RnoC6DAkAfPJJrvBLKZZjZF0hMH7TJz Yd2Ki3xH6g1kFe5RnWNPeiuMcSd2/Uk= -----END CERTIFICATE-----Generated at Sat Jun 13 20:14:26 2026 by rpki-client