$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa File: bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa (raw, json) Hash identifier: vxWeAecMPRSJzVBmF0d3P1L4tMzhwb0PZT+rNEmFp3Q= Subject key identifier: 83:07:72:59:88:6A:55:11:F1:99:A1:A3:A7:2F:A7:F9:72:01:31:7F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D5B4FA85FB8191B7230BC3D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 19527 IP address blocks: 34.4.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a8:5f:b8:19:1b:72:30:bc:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=f4536253-cabc-488b-b8d6-759b024ca21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:b1:4b:be:77:ff:64:bd:8a:07:87:39:7e: 76:6e:3c:a7:c9:9e:ce:3f:c9:ea:2a:fb:46:43:de: 92:8d:4e:08:91:42:61:c8:7c:10:6b:6f:74:84:3a: 28:32:68:ee:bc:35:39:33:79:c5:c5:d7:5d:bb:5f: e7:bd:b2:17:64:c3:bd:43:e4:e3:20:b4:f1:24:29: e6:d2:18:47:95:cf:a8:88:d3:ee:fd:9b:53:5a:5a: dc:7d:1d:c5:a1:c2:63:19:72:97:ef:9c:92:32:c8: dc:c3:0e:b3:4d:26:70:6b:01:07:8b:5e:d8:91:37: c7:00:e7:15:8a:c9:a6:0e:64:83:10:7e:4a:55:8b: 02:bd:9d:7a:a5:82:1c:31:b3:94:ab:2b:7a:5d:9c: 97:81:8a:b6:60:46:0a:f7:4a:1e:44:d0:eb:58:cf: 53:fb:98:f9:ba:c7:b0:5d:31:d4:39:64:e6:41:ca: a7:53:35:c4:57:4d:ce:37:1e:b6:be:f1:5b:ce:e4: 02:75:a6:a3:e1:ae:2a:8e:94:b7:99:86:3c:57:cb: 78:dd:39:cd:31:48:95:9d:92:95:d7:6d:91:e0:25: a6:e9:a6:49:ba:9f:c5:dd:f0:3c:00:bb:48:43:33: a4:0b:49:0e:2b:2d:ae:be:50:71:80:46:b1:a4:95: f7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:07:72:59:88:6A:55:11:F1:99:A1:A3:A7:2F:A7:F9:72:01:31:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:53:c9:5c:e0:00:5e:67:97:47:2c:48:33:f6:39:d8:aa:b8: 69:7c:40:fc:bb:0f:14:72:db:c0:49:e8:ce:c1:61:49:bd:9e: ea:06:4f:65:f7:27:45:ae:6c:bf:f3:df:96:09:53:78:08:4d: c1:63:da:36:fa:42:ac:1d:9d:8a:cf:a6:2b:ec:4e:dd:92:3a: 4a:51:f2:35:c6:f7:9a:8d:8f:e8:5b:16:06:39:75:c1:7f:3f: 7f:9c:79:ad:04:f9:6b:9a:44:6e:5d:b5:2f:d3:ad:2d:56:7e: 2d:14:3c:b2:e3:37:17:8e:02:b9:7a:b8:07:cb:92:60:62:69: 26:90:e8:7d:ff:7f:99:de:e1:90:c2:6d:60:23:02:25:aa:4a: e8:10:60:5f:0e:47:ab:49:3e:77:3b:35:ef:c1:3b:fd:6a:ee: 37:d2:2e:a8:5e:c3:62:fe:7f:1e:cc:82:7c:05:b1:49:d6:5e: 53:5c:cd:a6:a0:6a:eb:45:ca:66:f6:67:10:9c:d7:b6:d4:14: 5a:7d:90:29:36:6a:48:69:f7:8f:a1:78:33:03:f0:cb:7b:21: d8:94:f1:63:9b:cd:8d:08:81:5f:66:e5:5d:87:b0:71:a7:9b: 73:35:c6:e8:6a:fb:b2:fd:39:c3:5d:e1:9c:f4:7e:74:64:85: e6:f6:1e:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6hfuBkbcjC8PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZjQ1MzYyNTMtY2FiYy00ODhiLWI4ZDYtNzU5YjAyNGNhMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCCxS753/2S9igeHOX52bjynyZ7OP8nqKvtG Q96SjU4IkUJhyHwQa290hDooMmjuvDU5M3nFxdddu1/nvbIXZMO9Q+TjILTxJCnm 0hhHlc+oiNPu/ZtTWlrcfR3FocJjGXKX75ySMsjcww6zTSZwawEHi17YkTfHAOcV ismmDmSDEH5KVYsCvZ16pYIcMbOUqyt6XZyXgYq2YEYK90oeRNDrWM9T+5j5usew XTHUOWTmQcqnUzXEV03ONx62vvFbzuQCdaaj4a4qjpS3mYY8V8t43TnNMUiVnZKV 122R4CWm6aZJup/F3fA8ALtIQzOkC0kOKy2uvlBxgEaxpJX3tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMHclmIalUR8Zmho6cvp/lyATF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmNlN2Y3ZDgtNTJkNy0z MTZiLWJjNjktMGNjYzhlYjUwMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIgSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBTyVzgAF5nl0csSDP2OdiquGl8QPy7DxRy28BJ6M7BYUm9nuoGT2X3 J0WubL/z35YJU3gITcFj2jb6QqwdnYrPpivsTt2SOkpR8jXG95qNj+hbFgY5dcF/ P3+cea0E+WuaRG5dtS/TrS1Wfi0UPLLjNxeOArl6uAfLkmBiaSaQ6H3/f5ne4ZDC bWAjAiWqSugQYF8OR6tJPnc7Ne/BO/1q7jfSLqhew2L+fx7MgnwFsUnWXlNczaag autFymb2ZxCc17bUFFp9kCk2akhp94+heDMD8Mt7IdiU8WObzY0IgV9m5V2HsHGn m3M1xuhq+7L9OcNd4Zz0fnRkheb2HgU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:41:15 2026 by rpki-client