$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa File: cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa (raw, json) Hash identifier: Z5vB/AIx3RqbFVo7i7beSVvVbBr2G8ykNfZMtah2L34= Subject key identifier: 08:D7:0B:5F:3A:D2:84:C8:9C:41:CC:FF:6B:54:71:5A:60:B6:B8:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D75D54A88C2E3E79EEAE2A580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 396982 IP address blocks: 34.12.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:4a:88:c2:e3:e7:9e:ea:e2:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=8697231a-b748-4315-8950-a0219b5385ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:2c:e6:c4:12:98:45:59:7b:dc:f4:88:99: c1:6d:bb:b0:dc:31:d4:e9:51:50:63:ff:ed:9d:4d: 95:e1:16:98:e8:47:e9:12:f0:e7:4b:09:1b:15:fb: 82:3f:db:ea:00:a5:a0:66:ba:3c:a1:58:28:54:1f: 94:39:02:e8:58:dc:cd:1d:ad:6f:45:04:63:6b:76: 43:ab:62:ab:cd:69:bc:25:d1:ec:f7:65:7a:54:4a: c2:d9:89:83:d4:84:7f:5a:9a:2f:87:19:9c:74:cf: a1:17:0a:ab:66:e8:42:67:04:61:20:e6:7f:e9:69: d7:2c:8d:16:81:f0:cc:67:7a:fe:b8:d0:07:2c:06: 66:7b:0c:f9:2f:22:b0:61:9f:79:e4:a0:67:53:2e: 0d:b9:7c:6f:31:88:85:88:d2:a6:e9:e1:14:25:5d: 92:97:7a:f0:ad:7d:3e:07:9d:29:84:b9:60:b5:ce: 69:97:86:67:46:7d:d9:de:7f:4e:6a:0a:1f:08:7b: d3:8f:34:37:78:1a:ab:b0:5b:77:6c:14:c8:d4:93: 36:e1:ed:d1:b9:3f:19:d5:d9:d6:7a:ef:05:4b:10: 03:c4:7d:49:97:d1:f5:ac:60:3a:74:a5:c2:d9:d4: 93:ee:34:3a:89:40:19:6c:31:18:10:7e:ce:0d:03: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D7:0B:5F:3A:D2:84:C8:9C:41:CC:FF:6B:54:71:5A:60:B6:B8:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:1c:5d:cb:e0:8d:1c:e4:26:58:77:76:6a:66:6b:9d:ad:5c: 43:a8:4d:0e:93:f3:62:7e:8c:0b:80:f1:1a:36:1d:58:56:c2: 5c:95:a7:db:c6:cd:1e:69:5c:77:92:dc:e0:68:16:08:65:d8: 29:61:9a:d3:40:8b:c9:55:5e:b4:ca:11:a1:89:c2:90:68:6d: 52:74:1c:33:dd:6f:64:76:f8:1a:4e:9e:27:38:bb:5b:e2:cb: ee:ca:de:b2:67:67:16:48:94:1a:a1:17:42:97:a9:66:ce:ea: 11:eb:24:bf:94:36:a3:c3:7f:22:5b:53:a2:0a:82:d1:ff:a4: 92:5b:94:ba:71:26:a9:26:eb:fa:9a:58:a7:40:81:8c:77:be: 7a:cb:f9:13:eb:d6:f0:de:9e:ee:bd:47:ff:4a:b5:2f:33:88: 56:66:d7:46:68:75:cc:2b:fc:c5:91:39:38:2d:70:b9:23:25: cb:e4:37:dc:18:b4:09:f6:b0:a1:ef:3f:be:06:d1:0e:08:66: 40:2c:f9:16:8b:f5:55:10:3d:35:a5:bf:c4:ed:e0:68:89:11: 40:86:50:92:67:59:47:15:e1:a2:b5:8d:cb:20:63:1d:63:76: c7:25:7f:1e:1d:8b:69:bf:85:37:3d:44:3f:83:30:c6:7d:d2: bc:1a:b1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UqIwuPnnuripYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ODY5NzIzMWEtYjc0OC00MzE1LTg5NTAtYTAyMTliNTM4NWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvws5sQSmEVZe9z0iJnBbbuw3DHU6VFQY//t nU2V4RaY6EfpEvDnSwkbFfuCP9vqAKWgZro8oVgoVB+UOQLoWNzNHa1vRQRja3ZD q2KrzWm8JdHs92V6VErC2YmD1IR/WpovhxmcdM+hFwqrZuhCZwRhIOZ/6WnXLI0W gfDMZ3r+uNAHLAZmewz5LyKwYZ955KBnUy4NuXxvMYiFiNKm6eEUJV2Sl3rwrX0+ B50phLlgtc5pl4ZnRn3Z3n9OagofCHvTjzQ3eBqrsFt3bBTI1JM24e3RuT8Z1dnW eu8FSxADxH1Jl9H1rGA6dKXC2dST7jQ6iUAZbDEYEH7ODQMfHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjXC1860oTInEHM/2tUcVpgtrjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I4ZTYzMmUtOTU2Yy0z MGI1LWEzMGEtYTZmNDhhMmZmYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQcXcvgjRzkJlh3dmpma52tXEOoTQ6T82J+jAuA8Ro2HVhWwlyVp9vG zR5pXHeS3OBoFghl2ClhmtNAi8lVXrTKEaGJwpBobVJ0HDPdb2R2+BpOnic4u1vi y+7K3rJnZxZIlBqhF0KXqWbO6hHrJL+UNqPDfyJbU6IKgtH/pJJblLpxJqkm6/qa WKdAgYx3vnrL+RPr1vDenu69R/9KtS8ziFZm10Zodcwr/MWROTgtcLkjJcvkN9wY tAn2sKHvP74G0Q4IZkAs+RaL9VUQPTWlv8Tt4GiJEUCGUJJnWUcV4aK1jcsgYx1j dsclfx4di2m/hTc9RD+DMMZ90rwasec= -----END CERTIFICATE-----Generated at Fri Apr 17 16:47:15 2026 by rpki-client