$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa File: d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa (raw, json) Hash identifier: 9mu3bx0RJOzrWpvgdlhIdwNvwsu26gY286n8ZY0e2Oc= Subject key identifier: C6:D1:9F:D6:DE:A0:C4:1C:74:50:67:29:F6:E4:9B:31:79:94:A1:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E059C488EDDCB1A22E3CD2700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.108.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:48:8e:dd:cb:1a:22:e3:cd:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=80a76f50-5c53-44ea-89d7-d1b46f257af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:be:d5:7a:1a:eb:a9:ce:87:15:a0:eb:b9: 5e:59:06:65:0f:72:c8:ef:f6:65:d6:54:79:ce:0d: 1b:ed:5f:a6:cc:12:98:f8:b3:8f:d6:96:e1:2a:8e: 7e:8d:d3:aa:89:04:02:10:47:4e:8c:6e:df:03:7c: 99:4f:c0:9e:5e:12:aa:39:ca:2d:8f:55:bd:2c:9f: a2:75:9b:23:49:7e:cd:99:d7:f3:c5:b9:75:10:98: ca:c7:21:34:13:80:7f:e4:e1:37:fc:c0:c7:ba:c3: 20:57:64:78:12:3b:6e:8e:6a:da:f2:ab:28:29:4d: c0:20:60:23:b2:a3:cd:a4:6c:4f:b3:64:eb:b4:1b: 75:1f:f1:fb:24:a2:e4:67:05:ec:f3:fe:ca:48:f3: 05:04:c4:e7:74:d8:87:cf:6e:3d:61:f7:87:07:fe: 8b:31:6c:a9:84:ae:ab:ae:7e:47:03:88:4a:1e:b1: e3:c3:db:06:d2:b9:88:8d:09:17:71:bd:d6:2f:1a: a5:47:b6:82:ae:1f:17:a6:17:19:51:7d:c0:7a:80: 62:b7:23:02:8a:41:a0:de:c2:32:18:20:b6:f9:aa: e3:1a:9c:f4:8f:bd:62:c8:30:60:6f:fa:37:eb:74: 1a:6a:1c:a9:ae:2a:65:f6:9e:39:e6:76:c7:f9:b2: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D1:9F:D6:DE:A0:C4:1C:74:50:67:29:F6:E4:9B:31:79:94:A1:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2a:5d:6d:54:ad:25:8d:ad:83:1b:65:c1:74:21:97:d6:cd: db:57:11:92:9b:68:56:66:b8:6b:96:24:27:5c:61:83:2b:61: 95:42:4b:a6:18:94:ef:92:fe:7c:08:d6:90:8c:8b:df:a6:96: a7:c6:db:41:49:65:72:71:2c:c1:5b:f1:9a:d2:bf:c2:b3:97: 69:1e:d6:47:27:7e:c3:f2:71:2e:2e:b6:ad:ed:3d:ed:7b:5d: 33:a1:55:d2:1a:f6:e7:02:d5:9b:34:be:a3:67:67:4d:9a:00: 08:ba:3a:12:e7:31:c1:20:9a:a3:e0:99:d1:ee:fd:8d:6b:bf: 58:78:0e:90:73:ca:8c:16:8d:cc:42:9a:df:e4:e5:ad:17:c5: ac:28:ed:fc:dc:a9:ec:26:69:96:db:dd:a1:59:a8:14:a2:78: 19:b8:2e:8c:04:34:b0:64:81:c5:51:9b:d6:8b:b1:62:4c:88: 0e:bb:47:f1:97:8b:74:b6:9b:08:b9:59:5e:42:07:5f:56:31: 2d:a0:69:13:f0:eb:2d:db:ea:9c:e5:d9:87:3e:68:87:26:e8: 11:36:f1:80:70:53:38:93:5f:49:08:90:bd:ba:cf:c5:c0:cf: ac:7a:93:4c:43:70:ba:55:4f:c7:b5:b4:b4:bb:3d:8c:71:26: 1e:e7:a2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEiO3csaIuPNJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODBhNzZmNTAtNWM1My00NGVhLTg5ZDctZDFiNDZmMjU3YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+i+1Xoa66nOhxWg67leWQZlD3LI7/Zl1lR5 zg0b7V+mzBKY+LOP1pbhKo5+jdOqiQQCEEdOjG7fA3yZT8CeXhKqOcotj1W9LJ+i dZsjSX7Nmdfzxbl1EJjKxyE0E4B/5OE3/MDHusMgV2R4Ejtujmra8qsoKU3AIGAj sqPNpGxPs2TrtBt1H/H7JKLkZwXs8/7KSPMFBMTndNiHz249YfeHB/6LMWyphK6r rn5HA4hKHrHjw9sG0rmIjQkXcb3WLxqlR7aCrh8XphcZUX3AeoBityMCikGg3sIy GCC2+arjGpz0j71iyDBgb/o363Qaahypripl9p455nbH+bIPhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbRn9beoMQcdFBnKfbkmzF5lKEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJhMTI1YTktMjViZi0z OTM3LWJkYzktN2FhYTQ2MGZmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAqXW1UrSWNrYMbZcF0IZfWzdtXEZKbaFZmuGuWJCdcYYMrYZVCS6YY lO+S/nwI1pCMi9+mlqfG20FJZXJxLMFb8ZrSv8Kzl2ke1kcnfsPycS4utq3tPe17 XTOhVdIa9ucC1Zs0vqNnZ02aAAi6OhLnMcEgmqPgmdHu/Y1rv1h4DpBzyowWjcxC mt/k5a0Xxawo7fzcqewmaZbb3aFZqBSieBm4LowENLBkgcVRm9aLsWJMiA67R/GX i3S2mwi5WV5CB19WMS2gaRPw6y3b6pzl2Yc+aIcm6BE28YBwUziTX0kIkL26z8XA z6x6k0xDcLpVT8e1tLS7PYxxJh7novI= -----END CERTIFICATE-----Generated at Sun Jun 14 00:43:28 2026 by rpki-client