$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa File: cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa (raw, json) Hash identifier: rDuHlEB7tSKv4HBnlzGHL2uRKz0VF/aAQJLXhJImd4c= Subject key identifier: 0F:5A:08:6A:06:9D:35:D4:5A:F4:15:0C:98:00:1A:BE:99:43:FA:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E08664D5AF7A4CDF584027340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.123.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:4d:5a:f7:a4:cd:f5:84:02:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=3fbb52ba-9a8f-43ab-b115-e552e3aa6cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:bf:c9:d2:49:3c:bc:91:b4:e9:e3:10:0f: 09:52:67:9f:00:19:0a:96:b7:3a:a4:66:cf:cb:d2: 35:a4:40:5d:be:a4:51:b8:c3:2c:a7:d1:ec:4d:e1: 12:56:25:b9:95:0d:65:b6:10:51:67:b6:a3:5e:5a: 65:2e:68:c0:ee:61:35:3b:83:63:97:63:30:d9:42: 4a:fb:98:af:02:af:40:3e:b0:1d:ca:68:0b:e5:6a: ea:c2:17:04:68:3c:f4:b9:07:8a:78:b3:45:3d:71: 12:33:8b:e3:95:aa:71:f1:08:de:dd:61:c7:08:72: ad:e1:35:e6:b9:ec:9b:5b:5d:8a:1b:cc:90:61:be: 67:08:0e:54:33:f9:48:63:e9:07:99:62:8c:4a:c2: 63:20:1f:a8:a3:31:f6:d2:a2:ae:06:59:c4:ad:0a: 27:00:c0:5c:5b:4f:38:07:d7:8d:12:8d:27:66:22: c8:bd:a7:d2:2b:31:e6:1b:d8:0b:fc:e3:2a:a2:ce: b2:e4:f9:25:f1:7f:44:50:eb:29:1c:27:dd:bc:54: da:fa:ce:87:dd:fb:64:ac:c1:50:9e:eb:7e:2a:4a: 10:43:31:73:6a:71:be:67:50:de:e0:e4:d8:11:6a: 78:f9:38:a9:aa:bc:7d:71:1d:5a:11:d9:df:7a:85: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:08:6A:06:9D:35:D4:5A:F4:15:0C:98:00:1A:BE:99:43:FA:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:73:cd:d4:ea:5a:8a:78:bf:bc:57:b9:9b:c0:46:87:7d:86: 48:92:c2:1b:00:2a:db:4e:08:75:7e:a9:fb:56:44:88:10:4d: 7b:f1:e4:b1:9b:09:de:d7:61:0c:8d:51:f4:a7:8b:5d:68:d0: 43:22:41:d2:19:3f:08:5b:37:29:f4:09:ed:01:e5:7d:e7:10: e7:98:8f:6a:d7:8f:8a:6a:2c:f1:8a:4e:18:b2:76:70:f1:0a: 5f:6c:43:07:7c:dc:89:25:80:04:63:0d:bc:4b:37:7d:be:66: 41:ab:d2:05:21:60:30:f9:dd:cb:c6:58:43:79:68:71:79:5d: 9e:c2:9c:e5:03:38:e7:22:15:25:90:3d:86:64:13:21:bc:27: b4:35:24:ad:6c:0f:56:3e:43:28:34:ea:b3:b7:d5:32:14:8e: 97:a2:d3:71:a8:26:6b:20:62:a9:3e:b3:66:b9:e7:9b:7f:63: cb:5c:00:51:3d:38:72:46:ea:ce:af:ff:82:16:61:ca:1d:a0: 13:60:7c:1e:df:d3:c0:62:5d:57:a9:ea:56:99:50:ba:09:68: 63:4f:b8:92:db:32:6d:2f:3e:af:1b:fd:e6:19:5b:ff:eb:d2: 94:b3:73:48:a6:e9:77:93:58:7c:ef:70:7c:c4:bc:13:6c:51: 9f:8e:a3:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZk1a96TN9YQCc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk M2ZiYjUyYmEtOWE4Zi00M2FiLWIxMTUtZTU1MmUzYWE2Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDG/ydJJPLyRtOnjEA8JUmefABkKlrc6pGbP y9I1pEBdvqRRuMMsp9HsTeESViW5lQ1lthBRZ7ajXlplLmjA7mE1O4Njl2Mw2UJK +5ivAq9APrAdymgL5WrqwhcEaDz0uQeKeLNFPXESM4vjlapx8Qje3WHHCHKt4TXm ueybW12KG8yQYb5nCA5UM/lIY+kHmWKMSsJjIB+oozH20qKuBlnErQonAMBcW084 B9eNEo0nZiLIvafSKzHmG9gL/OMqos6y5Pkl8X9EUOspHCfdvFTa+s6H3ftkrMFQ nut+KkoQQzFzanG+Z1De4OTYEWp4+Tipqrx9cR1aEdnfeoVAwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9aCGoGnTXUWvQVDJgAGr6ZQ/qhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZmZGVhYjgtNGIxYi0z OTI4LTkxNmUtMWRlZGMxODlkZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpzzdTqWop4v7xXuZvARod9hkiSwhsAKttOCHV+qftWRIgQTXvx5LGb Cd7XYQyNUfSni11o0EMiQdIZPwhbNyn0Ce0B5X3nEOeYj2rXj4pqLPGKThiydnDx Cl9sQwd83IklgARjDbxLN32+ZkGr0gUhYDD53cvGWEN5aHF5XZ7CnOUDOOciFSWQ PYZkEyG8J7Q1JK1sD1Y+Qyg06rO31TIUjpei03GoJmsgYqk+s2a555t/Y8tcAFE9 OHJG6s6v/4IWYcodoBNgfB7f08BiXVep6laZULoJaGNPuJLbMm0vPq8b/eYZW//r 0pSzc0im6XeTWHzvcHzEvBNsUZ+Oo3k= -----END CERTIFICATE-----Generated at Sun Jun 14 01:03:06 2026 by rpki-client