$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa File: bfad2657-6c63-37ab-8995-4f4f371014c2.roa (raw, json) Hash identifier: RVIe2FWOh6ejeEVC1y3HC2z4wM+v9mAw/s9Mxr86Y8o= Subject key identifier: E9:4A:23:12:06:20:EE:FC:B4:FC:8E:A7:7B:42:87:77:1C:05:43:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E0865FB41BBBF44AF6068E180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.72.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:fb:41:bb:bf:44:af:60:68:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=24f1c725-71c5-4006-b261-12f6577ad832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:51:93:ab:a5:8a:b9:d2:d1:4a:0a:1e:a0: 98:3a:4d:da:c0:e1:bc:8e:a5:d4:aa:8d:68:00:12: ac:2c:c5:51:a7:67:95:79:9b:c3:a1:46:76:cd:90: 8f:84:61:f6:11:b9:d4:b9:3e:83:26:4a:84:2f:ed: bd:52:30:59:07:62:c3:58:50:7b:8b:5e:1d:e6:d7: 87:27:6d:80:92:74:50:e9:b6:7d:92:29:fa:fa:52: 3b:3a:13:d3:1a:95:77:15:27:60:2e:d1:b2:f7:cc: fc:c3:0a:12:24:c1:3d:db:21:9b:3e:0b:c8:56:cf: fe:8f:e7:74:d6:e8:1f:a3:03:19:7f:da:70:46:35: 25:78:a3:d4:c4:10:18:c0:58:f1:76:1c:7b:b0:1b: ad:ee:ca:0a:46:a8:05:c0:78:d9:94:44:ca:01:10: ab:90:98:c6:38:63:10:fa:95:3b:6a:1d:13:5a:96: 7f:dd:4f:a3:15:73:21:94:0b:a4:68:b3:ba:91:99: 76:2e:8f:81:ef:43:e7:34:b9:30:70:30:5d:2d:14: 02:04:6a:4f:e4:3b:dc:1e:2b:c3:53:ef:55:1e:a7: d2:99:dd:66:6e:7d:6f:33:5f:ee:0f:43:0a:56:46: 8b:db:28:5a:70:ce:db:cc:9c:51:24:65:4c:e7:54: 11:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4A:23:12:06:20:EE:FC:B4:FC:8E:A7:7B:42:87:77:1C:05:43:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfad2657-6c63-37ab-8995-4f4f371014c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ef:d2:1b:4e:93:86:32:3e:bd:ae:72:99:0d:24:2d:09:2e: de:5b:a1:93:ee:9e:98:4f:28:60:27:da:f2:82:a8:79:af:16: a3:a7:49:1f:b8:dd:b7:3c:ce:85:b0:04:44:4d:f2:65:a1:c2: 2f:47:c0:70:16:9a:40:78:cd:1f:3d:e5:8b:9f:5e:cd:6f:38: 18:dc:15:65:ce:eb:5f:bd:c2:20:9a:da:06:ca:b6:44:ea:12: f1:ce:25:8f:f3:06:e2:fa:82:6f:ca:e2:ca:8c:47:33:77:da: 73:ff:51:13:d3:30:45:91:c7:9a:61:6b:4d:44:c8:fc:d8:e0: 0d:02:ce:7f:9c:44:cf:c4:49:6b:08:35:ff:fc:be:65:68:d3: 7e:93:eb:7e:f9:57:f2:31:9a:42:5e:48:62:b8:d9:6a:6f:b4: db:d4:4a:4f:6f:90:9b:53:0a:6f:f6:b3:49:eb:32:12:fd:34: c2:41:8c:0d:ba:06:5c:b6:20:1f:6d:11:f6:a2:8e:40:c3:4f: c4:6d:07:f3:b6:e1:47:74:6d:20:bd:60:c9:96:df:03:ad:fa: 66:1c:64:e3:c8:99:ff:84:7d:a3:9d:82:84:e9:26:72:6b:8f: 2a:d0:47:d5:45:a4:f5:5a:d9:5d:c3:8a:e3:8d:1f:1f:fd:fd: 34:8f:27:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZftBu79Er2Bo4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MjRmMWM3MjUtNzFjNS00MDA2LWIyNjEtMTJmNjU3N2FkODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowxRk6ulirnS0UoKHqCYOk3awOG8jqXUqo1o ABKsLMVRp2eVeZvDoUZ2zZCPhGH2EbnUuT6DJkqEL+29UjBZB2LDWFB7i14d5teH J22AknRQ6bZ9kin6+lI7OhPTGpV3FSdgLtGy98z8wwoSJME92yGbPgvIVs/+j+d0 1ugfowMZf9pwRjUleKPUxBAYwFjxdhx7sBut7soKRqgFwHjZlETKARCrkJjGOGMQ +pU7ah0TWpZ/3U+jFXMhlAukaLO6kZl2Lo+B70PnNLkwcDBdLRQCBGpP5DvcHivD U+9VHqfSmd1mbn1vM1/uD0MKVkaL2yhacM7bzJxRJGVM51QRPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlKIxIGIO78tPyOp3tCh3ccBUNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZhZDI2NTctNmM2My0z N2FiLTg5OTUtNGY0ZjM3MTAxNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzv0htOk4YyPr2ucpkNJC0JLt5boZPunphPKGAn2vKCqHmvFqOnSR+4 3bc8zoWwBERN8mWhwi9HwHAWmkB4zR895YufXs1vOBjcFWXO61+9wiCa2gbKtkTq EvHOJY/zBuL6gm/K4sqMRzN32nP/URPTMEWRx5pha01EyPzY4A0Czn+cRM/ESWsI Nf/8vmVo036T6375V/IxmkJeSGK42WpvtNvUSk9vkJtTCm/2s0nrMhL9NMJBjA26 Bly2IB9tEfaijkDDT8RtB/O24Ud0bSC9YMmW3wOt+mYcZOPImf+EfaOdgoTpJnJr jyrQR9VFpPVa2V3DiuONHx/9/TSPJ4A= -----END CERTIFICATE-----Generated at Sun Jun 14 03:08:47 2026 by rpki-client