$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa File: db2da034-1959-398c-97ed-ff47b60a9995.roa (raw, json) Hash identifier: 3fToaIjP/BiVR1xbafqeqIb0ayL9zFCRp8aFszvDkBk= Subject key identifier: 42:15:A4:05:7C:9B:43:FA:55:A7:C8:15:3B:76:59:D7:85:31:9F:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E0865F907F7B21461C9CC1480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:f9:07:f7:b2:14:61:c9:cc:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=1c841eda-d676-4c78-ac21-3ffe5e6b7761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:04:50:eb:9b:ab:56:f5:ca:29:f7:ca:fd:29: 05:68:d9:aa:70:de:00:d9:f3:90:03:07:04:4c:76: 8a:09:8d:42:20:d3:c1:47:92:b2:95:7b:07:a0:b9: e6:0f:6e:a8:de:64:ac:23:ae:3e:9a:f4:b3:74:ff: f1:fc:58:65:3f:2d:2d:60:08:ab:72:92:e7:26:44: 4d:25:e2:2d:fb:43:16:07:b1:d1:c7:0b:77:c3:ad: a7:50:0e:0c:85:1e:d6:c7:d1:59:31:5c:82:49:d6: b1:cd:36:a2:5d:93:88:42:a0:db:f2:61:54:8e:73: 20:56:bf:72:3d:75:21:19:ec:8d:da:69:51:a2:59: bc:90:0e:ab:a2:60:e4:2a:53:80:bd:67:ed:56:6a: a7:b7:36:37:7d:d1:9e:22:c3:2b:53:2d:1f:a3:d2: 0d:fd:c9:83:69:25:8f:18:c0:77:88:22:69:f6:e8: 34:3c:fd:86:c1:1a:08:61:69:6f:ac:70:bb:70:0e: 8d:23:c2:99:90:43:50:9c:2f:2e:1e:51:4c:82:2c: b7:b9:9d:b9:3e:bc:61:72:3b:ae:7c:b0:2f:99:61: 33:49:aa:55:a4:e3:bb:2c:01:4e:85:3e:32:90:39: 9e:6a:cc:1b:dd:ea:4c:63:18:cf:c2:c1:f8:7f:5f: 91:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:15:A4:05:7C:9B:43:FA:55:A7:C8:15:3B:76:59:D7:85:31:9F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cc:d0:08:c4:70:b1:51:81:8e:6c:35:15:53:77:bb:e4:de: 7c:0e:41:22:78:89:77:3a:74:ae:c4:76:e1:21:ac:80:16:b5: d5:55:ea:cb:0c:da:7c:62:9d:60:4d:02:43:97:a9:90:f3:e6: 85:f8:7a:18:0e:11:e0:fb:a1:cf:75:f2:93:64:78:29:8f:dc: 00:1b:af:08:95:ec:3a:9c:a8:f3:49:ed:54:0a:2c:ef:1e:62: 80:f6:b9:76:3a:fa:09:a5:c9:fa:b9:af:32:10:57:1e:d6:00: c2:dc:f3:da:a4:25:4a:7f:58:77:e7:58:75:bc:5d:2e:66:3b: 0d:9d:fe:69:1f:4f:68:23:cc:38:0d:7b:12:09:ad:83:47:74: 5d:36:d9:af:d0:0a:39:86:4b:ec:ec:90:cb:71:15:27:1d:4a: c0:8e:3c:9a:29:18:01:5f:7e:e1:a2:8a:75:36:02:8b:6e:96: fb:d5:db:31:a7:02:64:86:0c:cd:87:d0:c9:07:5c:dd:77:7d: c7:1e:ea:99:d3:3d:8c:7e:4d:29:9a:56:b6:13:08:7e:f2:67: 59:45:4f:0d:12:b9:2f:86:8b:75:c0:ae:ae:91:53:3f:e4:87: 33:47:fd:27:df:ce:8e:46:b5:0d:cd:d2:e7:99:8d:a5:d6:ce: 64:d8:ec:d3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4IZfkH97IUYcnMFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MWM4NDFlZGEtZDY3Ni00Yzc4LWFjMjEtM2ZmZTVlNmI3NzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggRQ65urVvXKKffK/SkFaNmqcN4A2fOQAwcE THaKCY1CINPBR5KylXsHoLnmD26o3mSsI64+mvSzdP/x/FhlPy0tYAircpLnJkRN JeIt+0MWB7HRxwt3w62nUA4MhR7Wx9FZMVyCSdaxzTaiXZOIQqDb8mFUjnMgVr9y PXUhGeyN2mlRolm8kA6romDkKlOAvWftVmqntzY3fdGeIsMrUy0fo9IN/cmDaSWP GMB3iCJp9ug0PP2GwRoIYWlvrHC7cA6NI8KZkENQnC8uHlFMgiy3uZ25Prxhcjuu fLAvmWEzSapVpOO7LAFOhT4ykDmeaswb3epMYxjPwsH4f1+RDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEIVpAV8m0P6VafIFTt2WdeFMZ9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIyZGEwMzQtMTk1OS0z OThjLTk3ZWQtZmY0N2I2MGE5OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIczQCMRwsVGBjmw1FVN3u+TefA5BIniJdzp0rsR24SGsgBa11VXqywza fGKdYE0CQ5epkPPmhfh6GA4R4Puhz3Xyk2R4KY/cABuvCJXsOpyo80ntVAos7x5i gPa5djr6CaXJ+rmvMhBXHtYAwtzz2qQlSn9Yd+dYdbxdLmY7DZ3+aR9PaCPMOA17 Egmtg0d0XTbZr9AKOYZL7OyQy3EVJx1KwI48mikYAV9+4aKKdTYCi26W+9XbMacC ZIYMzYfQyQdc3Xd9xx7qmdM9jH5NKZpWthMIfvJnWUVPDRK5L4aLdcCurpFTP+SH M0f9J9/Ojka1Dc3S55mNpdbOZNjs0w== -----END CERTIFICATE-----Generated at Sun Jun 14 05:24:36 2026 by rpki-client