$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf7075e3-0b39-3232-95dc-85bdeea5fb34.roa File: bf7075e3-0b39-3232-95dc-85bdeea5fb34.roa (raw, json) Hash identifier: 9nwT3v+QQje+dvlwqUKZgQGAmeoyg43bf3MRd6lIG4w= Subject key identifier: 41:6E:88:69:28:50:16:A7:97:23:98:C6:78:5A:BF:C1:58:20:33:28 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D5F7FAB293652F9349E646980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf7075e3-0b39-3232-95dc-85bdeea5fb34.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 15169 IP address blocks: 34.112.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ab:29:36:52:f9:34:9e:64:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=fbd8eec3-52fa-4536-9261-c310dcfcc6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:13:8b:20:8f:fa:58:fb:21:c3:f6:02:fb:e9: 2d:77:f4:b4:95:1a:08:88:9c:c2:03:e3:c6:af:a8: e0:aa:4b:65:7a:5d:9d:ef:f9:a8:e7:96:b1:e2:29: 77:da:ff:d6:9b:2b:bb:17:09:72:ff:1e:5b:1a:02: 82:91:a5:09:9c:ec:7f:6f:f5:6c:ac:ab:6f:f9:85: eb:d0:1e:08:1c:d7:2e:88:63:22:b3:5c:6d:4c:0d: 93:fa:6a:61:35:ae:2d:73:1b:f9:f6:f7:d5:a9:74: bb:a1:20:fe:c8:4e:0d:55:16:45:12:fe:1d:d2:9c: 34:26:02:08:59:23:89:32:b4:da:79:f2:4d:76:3a: 96:83:07:dc:ed:68:0c:40:a0:c0:ad:7b:9d:64:50: 4d:90:05:6c:56:b1:21:ed:3d:ed:e8:32:57:aa:40: da:60:b7:60:37:e2:0f:c5:d2:be:c0:22:ed:58:fd: bd:22:d9:3e:ac:ac:8c:aa:da:ad:73:85:27:76:64: 79:95:68:a1:70:b3:53:36:63:26:21:65:a3:54:bc: aa:56:d5:e2:95:f5:e9:e4:a7:f3:57:78:9a:71:47: a7:78:17:44:66:51:30:9f:22:d2:d4:1f:70:0b:cc: 5d:41:a9:20:60:2e:de:78:06:67:5b:cf:c2:cb:8f: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6E:88:69:28:50:16:A7:97:23:98:C6:78:5A:BF:C1:58:20:33:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf7075e3-0b39-3232-95dc-85bdeea5fb34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.112.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:83:a0:c3:76:37:2b:62:82:a2:4b:89:91:c9:42:7f:c9:f8: 46:44:97:aa:7a:3e:59:9c:61:c0:f3:00:85:bd:98:bf:43:58: 03:6c:87:c3:a5:7d:16:10:99:b7:fd:03:7e:12:01:c8:2c:c1: 31:d3:4d:cc:b4:22:44:3b:6a:eb:2c:49:55:39:1b:57:7a:95: d2:cb:bb:2f:f6:fb:77:48:72:89:13:11:9d:1c:ac:de:80:72: fb:52:7e:fe:6b:d8:a8:33:7a:f4:57:7d:97:7c:99:d1:42:c4: 5c:43:8f:77:aa:39:4c:b0:bd:6e:24:96:dd:8b:fd:61:02:c4: 9c:05:e9:4d:50:38:5f:6e:c0:cc:f0:d7:d1:d7:fe:26:29:4c: d9:00:08:58:d3:8f:2a:cf:6c:a4:99:3f:f9:e5:03:89:b3:6f: 35:62:19:07:48:fd:20:32:d9:f0:58:fc:8d:7c:53:b5:26:46: a3:c8:fe:9c:53:23:1f:8d:19:f0:72:59:99:8f:ae:a4:5c:d8: f1:6e:be:3d:ce:ea:7d:40:5b:a7:a3:21:1c:ed:a1:55:61:03: 91:52:5f:1f:66:de:79:6c:70:f7:50:6e:fe:06:21:0d:71:13: 08:1b:02:ec:af:60:61:a1:80:dd:86:60:63:8f:c6:90:fe:40: 45:fd:a0:17 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1ff6spNlL5NJ5kaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk ZmJkOGVlYzMtNTJmYS00NTM2LTkyNjEtYzMxMGRjZmNjNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhROLII/6WPshw/YC++ktd/S0lRoIiJzCA+PG r6jgqktlel2d7/mo55ax4il32v/Wmyu7Fwly/x5bGgKCkaUJnOx/b/VsrKtv+YXr 0B4IHNcuiGMis1xtTA2T+mphNa4tcxv59vfVqXS7oSD+yE4NVRZFEv4d0pw0JgII WSOJMrTaefJNdjqWgwfc7WgMQKDArXudZFBNkAVsVrEh7T3t6DJXqkDaYLdgN+IP xdK+wCLtWP29Itk+rKyMqtqtc4UndmR5lWihcLNTNmMmIWWjVLyqVtXilfXp5Kfz V3iacUeneBdEZlEwnyLS1B9wC8xdQakgYC7eeAZnW8/Cy4/JgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEFuiGkoUBanlyOYxnhav8FYIDMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY3MDc1ZTMtMGIzOS0z MjMyLTk1ZGMtODViZGVlYTVmYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCInAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAN4Ogw3Y3K2KCokuJkclCf8n4RkSXqno+WZxhwPMAhb2Yv0NYA2yHw6V9 FhCZt/0DfhIByCzBMdNNzLQiRDtq6yxJVTkbV3qV0su7L/b7d0hyiRMRnRys3oBy +1J+/mvYqDN69Fd9l3yZ0ULEXEOPd6o5TLC9biSW3Yv9YQLEnAXpTVA4X27AzPDX 0df+JilM2QAIWNOPKs9spJk/+eUDibNvNWIZB0j9IDLZ8Fj8jXxTtSZGo8j+nFMj H40Z8HJZmY+upFzY8W6+Pc7qfUBbp6MhHO2hVWEDkVJfH2beeWxw91Bu/gYhDXET CBsC7K9gYaGA3YZgY4/GkP5ARf2gFw== -----END CERTIFICATE-----Generated at Sat Apr 18 08:55:49 2026 by rpki-client