$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa File: cfc1b999-7d74-3638-a48d-92624a9e481a.roa (raw, json) Hash identifier: D05tZ8mbvhwIJB7kmrRc5lWSZOxlMNmQT+zv8AQXZsI= Subject key identifier: B4:CD:4F:2B:53:54:11:F5:37:88:DD:A4:34:E6:4F:23:C5:BD:F4:7F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D6515341EE2AEB8BADDFDBB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 15169 IP address blocks: 34.1.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:34:1e:e2:ae:b8:ba:dd:fd:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=1b32b5ac-5c51-4bcb-917a-41b055cb4562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:b4:27:af:ad:95:7b:8b:b3:90:58:11:f1: 3f:8a:23:5f:7f:dd:71:c1:08:db:ef:36:6a:aa:0d: e8:57:8a:63:81:3a:4e:de:2c:6c:8b:4f:4d:fe:f2: 6e:5b:c7:66:b4:b5:a6:80:57:b6:6b:12:78:b5:54: a1:83:1c:39:1f:10:85:90:9c:8e:c7:e8:7e:af:d4: 28:f3:db:0f:a7:a3:b5:cc:85:5c:2f:ee:2e:58:c8: cf:66:3b:c9:b1:95:a2:4c:13:6b:26:8b:55:f8:f1: fa:c4:9b:0b:ed:22:f6:9b:a7:67:a7:64:c9:e5:a3: 48:9e:6d:f2:3f:2b:af:7e:df:ad:67:eb:09:c3:ff: 70:f9:eb:5a:fb:4f:fb:0f:46:94:74:a0:2a:12:9e: 07:5c:4e:73:a6:0b:40:31:72:1d:48:c6:64:a7:0e: 70:f7:a2:5d:78:4c:d8:bd:83:08:a4:e1:ed:9c:a2: 20:77:37:76:bb:4a:22:98:60:58:25:10:3f:1b:37: d2:84:ff:a4:f0:c1:11:be:87:47:84:8b:07:cd:91: 9c:d6:9a:bd:76:18:3a:f9:c4:69:b5:89:0c:42:9e: 4c:05:1b:1d:b4:83:c6:91:90:13:f2:d7:a0:5d:c1: f0:73:5d:73:e4:36:36:5f:1e:f5:98:ee:7a:78:04: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CD:4F:2B:53:54:11:F5:37:88:DD:A4:34:E6:4F:23:C5:BD:F4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc1b999-7d74-3638-a48d-92624a9e481a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:81:4a:bd:87:0b:74:f8:00:89:0b:51:60:48:a9:86:25:36: d2:c6:16:ef:ec:8a:ae:df:d1:ae:24:f8:19:c7:d3:d2:50:32: 2d:d5:ad:8d:3e:33:f6:4a:aa:9d:4a:d1:68:34:9b:0e:90:80: c9:93:81:d6:7c:59:fd:13:84:ec:b2:ca:ab:ec:82:e9:99:ae: 24:56:d2:6c:fc:ce:03:cf:c5:1f:b2:96:8e:6d:f1:ea:31:c1: 53:e8:51:ae:53:4e:a1:38:42:84:88:5e:96:be:f3:26:e2:7e: a7:ff:31:ba:d6:36:1c:9d:95:de:c6:28:76:a3:6c:17:38:10: a3:ba:1c:95:b7:3a:0d:92:f6:3f:55:bb:50:3b:b8:d5:b2:9e: 58:f9:f9:61:55:59:3d:ad:c5:0a:a6:52:52:54:89:2e:3b:07: 07:22:4c:9b:c9:bc:d3:a2:93:95:54:83:bd:78:13:9f:26:94: 84:26:65:0c:04:20:e8:25:d8:8b:d4:80:c6:69:f7:63:ce:d9: 0d:5a:2e:5b:5e:70:b6:3f:95:66:d6:38:67:77:7e:7b:dd:c2: d6:30:a4:5e:e3:59:b0:4c:df:fe:06:9d:f1:ca:86:42:2e:43: 20:3a:97:ab:78:33:36:a9:21:67:4a:e4:69:d5:98:ed:39:1b: 4d:8f:44:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTQe4q64ut39u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MWIzMmI1YWMtNWM1MS00YmNiLTkxN2EtNDFiMDU1Y2I0NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkG0J6+tlXuLs5BYEfE/iiNff91xwQjb7zZq qg3oV4pjgTpO3ixsi09N/vJuW8dmtLWmgFe2axJ4tVShgxw5HxCFkJyOx+h+r9Qo 89sPp6O1zIVcL+4uWMjPZjvJsZWiTBNrJotV+PH6xJsL7SL2m6dnp2TJ5aNInm3y Pyuvft+tZ+sJw/9w+eta+0/7D0aUdKAqEp4HXE5zpgtAMXIdSMZkpw5w96JdeEzY vYMIpOHtnKIgdzd2u0oimGBYJRA/GzfShP+k8MERvodHhIsHzZGc1pq9dhg6+cRp tYkMQp5MBRsdtIPGkZAT8tegXcHwc11z5DY2Xx71mO56eAS0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTNTytTVBH1N4jdpDTmTyPFvfR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjMWI5OTktN2Q3NC0z NjM4LWE0OGQtOTI2MjRhOWU0ODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKBSr2HC3T4AIkLUWBIqYYlNtLGFu/siq7f0a4k+BnH09JQMi3VrY0+ M/ZKqp1K0Wg0mw6QgMmTgdZ8Wf0ThOyyyqvsgumZriRW0mz8zgPPxR+ylo5t8eox wVPoUa5TTqE4QoSIXpa+8ybifqf/MbrWNhydld7GKHajbBc4EKO6HJW3Og2S9j9V u1A7uNWynlj5+WFVWT2txQqmUlJUiS47BwciTJvJvNOik5VUg714E58mlIQmZQwE IOgl2IvUgMZp92PO2Q1aLltecLY/lWbWOGd3fnvdwtYwpF7jWbBM3/4GnfHKhkIu QyA6l6t4MzapIWdK5GnVmO05G02PROA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:05:52 2026 by rpki-client