$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa File: c809be10-f019-3ce3-8366-95c1c2eec42b.roa (raw, json) Hash identifier: gFYFjMj9DZVhYGqp7u+S6KUa9cMWDysATeFMeGmZ+Rk= Subject key identifier: E5:B6:43:75:BF:11:02:61:B0:DD:C3:0F:AE:AF:16:DA:54:95:AB:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E059C4327F0940EE29333C900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.121.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:43:27:f0:94:0e:e2:93:33:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=58a78fa1-cf5a-4fbd-8fdd-247c55950042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:fb:30:ca:4c:65:44:6f:2e:0c:8a:77:9c: 79:76:14:8e:cc:c3:b9:4a:99:ca:07:63:49:32:da: f2:1b:5d:78:b7:4d:4a:4d:da:79:e7:4b:d1:ae:03: dd:2e:22:71:9f:4b:6e:ca:1a:d1:41:69:b4:90:0a: cd:c9:dd:9c:2d:8b:78:1b:9a:cb:ab:8c:b1:d3:07: e9:44:24:cf:9a:b2:f2:d9:48:5a:a4:5f:b4:a1:c7: bb:95:2e:7f:25:aa:22:e6:81:3a:51:7a:03:73:c0: 37:fb:63:05:07:64:8d:d8:aa:c0:c2:c2:63:18:f5: 21:d6:c4:9b:ea:dd:4d:54:03:23:75:77:3b:41:f9: 61:05:3d:07:22:da:bd:9b:e7:67:5d:fc:65:f4:81: 6f:68:49:e3:6f:3b:c9:bf:b7:6d:76:8d:28:c2:2f: da:37:cb:ce:f8:d4:68:cd:3b:c8:e1:83:b5:b2:1d: 86:77:2f:b4:24:8e:5b:44:c5:fd:be:db:ff:f0:26: 4d:09:f1:63:11:33:77:bc:6f:ba:21:3c:79:77:8d: f3:b5:4f:4e:92:cd:d2:3c:b4:9e:1b:b2:93:ae:6d: 23:9b:32:e4:05:88:dd:b5:96:30:2a:d6:31:1f:74: 76:c2:70:c9:22:fd:8f:be:d3:76:d7:8a:fa:90:7d: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B6:43:75:BF:11:02:61:B0:DD:C3:0F:AE:AF:16:DA:54:95:AB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b5:7f:d2:a5:46:22:fa:10:6a:4a:a0:b5:db:59:33:93:bd: 93:a0:e2:7d:5b:b6:45:bb:be:13:7d:b3:6c:1e:96:6e:2f:0c: cd:0e:30:c0:a7:9b:cd:1c:95:de:00:52:94:90:31:02:ca:26: cc:ac:16:9b:6e:59:d1:c9:92:37:78:03:b7:38:f1:c3:cb:ed: d2:22:f8:6e:9e:65:a2:76:52:e1:fc:b1:47:d1:b0:e1:41:46: c6:89:2c:8b:f0:32:28:f2:6c:40:97:be:42:7a:cf:16:2f:59: a2:1a:a9:d1:14:97:f1:0f:f9:87:76:91:b5:3f:8a:83:e8:2f: a1:53:b4:86:d6:11:a8:34:c7:2b:fe:0c:03:f7:15:ca:6d:b3: a4:ec:14:52:97:43:83:33:33:c8:38:f6:11:6b:b3:19:b7:38: 6b:87:c1:a8:80:d0:a2:82:b4:34:50:56:36:17:b6:9e:1e:52: 9f:a9:e7:67:39:78:06:19:f7:5e:79:2c:14:39:c6:4d:46:d0: 16:0f:74:de:d0:7b:db:51:41:48:1c:a9:eb:ee:95:bb:61:09: b2:ae:b8:a7:4a:6c:e1:eb:c0:6d:7b:4c:45:b8:77:98:6e:e9: fd:c3:1f:7d:a4:dc:a0:e6:cc:fe:67:d2:16:f5:13:6f:cc:91: 23:ac:ae:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEMn8JQO4pMzyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NThhNzhmYTEtY2Y1YS00ZmJkLThmZGQtMjQ3YzU1OTUwMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJT7MMpMZURvLgyKd5x5dhSOzMO5SpnKB2NJ MtryG114t01KTdp550vRrgPdLiJxn0tuyhrRQWm0kArNyd2cLYt4G5rLq4yx0wfp RCTPmrLy2UhapF+0oce7lS5/Jaoi5oE6UXoDc8A3+2MFB2SN2KrAwsJjGPUh1sSb 6t1NVAMjdXc7QflhBT0HItq9m+dnXfxl9IFvaEnjbzvJv7dtdo0owi/aN8vO+NRo zTvI4YO1sh2Gdy+0JI5bRMX9vtv/8CZNCfFjETN3vG+6ITx5d43ztU9Oks3SPLSe G7KTrm0jmzLkBYjdtZYwKtYxH3R2wnDJIv2PvtN214r6kH1nMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW2Q3W/EQJhsN3DD66vFtpUlasZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzgwOWJlMTAtZjAxOS0z Y2UzLTgzNjYtOTVjMWMyZWVjNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW1f9KlRiL6EGpKoLXbWTOTvZOg4n1btkW7vhN9s2welm4vDM0OMMCn m80cld4AUpSQMQLKJsysFptuWdHJkjd4A7c48cPL7dIi+G6eZaJ2UuH8sUfRsOFB RsaJLIvwMijybECXvkJ6zxYvWaIaqdEUl/EP+Yd2kbU/ioPoL6FTtIbWEag0xyv+ DAP3Fcpts6TsFFKXQ4MzM8g49hFrsxm3OGuHwaiA0KKCtDRQVjYXtp4eUp+p52c5 eAYZ9155LBQ5xk1G0BYPdN7Qe9tRQUgcqevulbthCbKuuKdKbOHrwG17TEW4d5hu 6f3DH32k3KDmzP5n0hb1E2/MkSOsroU= -----END CERTIFICATE-----Generated at Sun Jun 14 08:11:58 2026 by rpki-client