$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa File: bfbbd772-9e31-38b1-a655-e7c84ef58361.roa (raw, json) Hash identifier: kFOqPeFEsy/1zyML3YyO+w+NsrQ9DGV+BpKDxjbV2CU= Subject key identifier: 8A:FE:27:F9:74:86:F7:C8:41:53:41:25:A9:6C:D8:4C:C6:8E:22:B1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E0865EFAE067284DA5195E3A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.135.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:ef:ae:06:72:84:da:51:95:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=bdf87368-4ac3-44f0-a618-e67c3df15b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:83:be:74:57:f9:74:8a:72:95:f6:7c:be: b9:11:9e:87:57:9b:8e:30:20:b6:04:82:d7:2b:8b: 45:b7:13:c6:a7:43:ff:6c:7a:fd:8d:10:6c:52:74: c8:98:78:09:0e:3d:2c:af:ed:03:b8:38:36:12:29: ac:66:c8:79:f6:a3:01:2a:af:c1:57:24:fb:e7:cc: 7c:33:d8:2a:06:f3:9f:b0:8d:de:73:b6:d9:bd:d7: 82:c3:02:80:12:ad:09:6a:fd:14:b5:71:bf:2e:32: 0b:eb:19:67:9f:73:da:1d:0e:0f:ab:09:c8:9c:f2: ef:a3:bf:72:75:71:06:0d:6f:c9:8b:f1:2f:c9:8a: c5:16:ca:d2:f3:5f:9c:6b:8e:5c:e0:6a:47:e9:bd: e1:9b:31:68:b5:2f:cd:fc:ab:0a:16:eb:67:21:07: ad:89:2a:cb:25:df:bd:70:43:90:e7:47:cd:8b:47: 8d:40:41:1d:73:b3:f9:f9:38:70:ef:53:0d:08:5d: cd:02:50:af:cf:43:1d:2e:0f:9b:28:5e:69:73:e0: f1:fc:cc:e0:c0:4b:79:1f:05:cc:2c:86:8d:d9:f7: d7:56:ff:be:15:61:c3:37:5a:0c:94:5d:66:59:b2: 22:c5:55:3e:8e:38:f9:d7:dc:bc:7f:cd:19:bb:d0: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FE:27:F9:74:86:F7:C8:41:53:41:25:A9:6C:D8:4C:C6:8E:22:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfbbd772-9e31-38b1-a655-e7c84ef58361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3d:d4:d5:74:f7:50:67:a8:c7:d8:23:cf:11:29:1c:33:5e: 1e:3e:4a:bd:ee:c8:dd:a6:c3:7e:30:a3:cc:24:8e:f6:8c:5c: de:fd:a5:95:02:ad:3e:84:2d:74:48:0f:9d:86:c5:0d:92:ff: 9a:bb:60:a9:12:e3:b9:d7:a4:0a:b3:ae:81:b8:9a:25:87:11: 3e:9f:40:17:e1:03:28:cd:f0:6f:40:78:4a:d2:7c:ac:15:4d: 7c:65:db:cf:55:28:25:5e:be:6e:62:87:8c:08:22:ba:41:4a: 3d:2b:20:93:8f:5d:a7:1f:98:16:1a:b4:3a:2a:38:e8:51:67: 6c:63:cb:25:60:bb:41:98:ab:ba:5b:a2:5c:8b:cf:18:6e:1f: df:7c:16:46:50:76:f8:44:4d:e6:d3:fe:20:8d:02:33:df:0f: 89:fe:1d:31:96:d5:18:ce:63:c8:58:ce:07:bf:c3:1f:2d:d0: 53:76:e7:39:b2:54:c6:b8:4d:66:b2:8e:55:04:6e:4c:9c:4c: cc:79:53:8f:09:11:0b:e6:1c:c3:73:54:e1:8b:f9:6a:fa:5d: 3b:0a:1f:00:04:d8:79:4d:3f:ea:17:c5:6e:0a:54:ca:e3:56: b4:f9:9a:81:ae:21:6f:32:67:b7:31:d2:2d:82:12:7d:54:9c: a1:17:7b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZe+uBnKE2lGV46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YmRmODczNjgtNGFjMy00NGYwLWE2MTgtZTY3YzNkZjE1YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH+DvnRX+XSKcpX2fL65EZ6HV5uOMCC2BILX K4tFtxPGp0P/bHr9jRBsUnTImHgJDj0sr+0DuDg2EimsZsh59qMBKq/BVyT758x8 M9gqBvOfsI3ec7bZvdeCwwKAEq0Jav0UtXG/LjIL6xlnn3PaHQ4PqwnInPLvo79y dXEGDW/Ji/EvyYrFFsrS81+ca45c4GpH6b3hmzFotS/N/KsKFutnIQetiSrLJd+9 cEOQ50fNi0eNQEEdc7P5+Thw71MNCF3NAlCvz0MdLg+bKF5pc+Dx/MzgwEt5HwXM LIaN2ffXVv++FWHDN1oMlF1mWbIixVU+jjj519y8f80Zu9BIpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr+J/l0hvfIQVNBJals2EzGjiKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZiYmQ3NzItOWUzMS0z OGIxLWE2NTUtZTdjODRlZjU4MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIofwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ091NV091BnqMfYI88RKRwzXh4+Sr3uyN2mw34wo8wkjvaMXN79pZUC rT6ELXRID52GxQ2S/5q7YKkS47nXpAqzroG4miWHET6fQBfhAyjN8G9AeErSfKwV TXxl289VKCVevm5ih4wIIrpBSj0rIJOPXacfmBYatDoqOOhRZ2xjyyVgu0GYq7pb olyLzxhuH998FkZQdvhETebT/iCNAjPfD4n+HTGW1RjOY8hYzge/wx8t0FN25zmy VMa4TWayjlUEbkycTMx5U48JEQvmHMNzVOGL+Wr6XTsKHwAE2HlNP+oXxW4KVMrj VrT5moGuIW8yZ7cx0i2CEn1UnKEXe2w= -----END CERTIFICATE-----Generated at Sat Jun 13 19:49:53 2026 by rpki-client