$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa File: dd865953-ecca-346e-bd8e-2ad11918a410.roa (raw, json) Hash identifier: JNT8UI0ughqwNX1VC2iJuaPC3ZPu6SIbspMZT91UCVE= Subject key identifier: 3D:15:A2:DD:05:80:FB:34:62:66:B8:E6:14:AE:58:B2:6C:6C:A2:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D7B6A98CD8E1579D6F52825C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 34.13.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:98:cd:8e:15:79:d6:f5:28:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=b1e62f77-8ce9-4185-94cc-2b1022a38c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:1f:e7:42:7e:f3:a9:4c:8a:f1:dc:87:1c: 8d:5a:4e:fc:58:fd:ad:26:28:88:78:92:c8:3d:08: 97:7e:60:3c:9b:10:d3:32:2f:2f:ca:f2:05:d5:f2: f7:c3:02:c6:0e:7e:90:08:04:7d:71:8c:aa:db:ad: 1d:44:ad:06:c9:94:cb:93:e4:de:8e:40:6f:f3:02: 4f:4e:2b:ec:69:6e:ff:57:38:81:5a:90:6b:5f:a8: 75:85:8c:4c:11:fe:ac:02:48:cb:37:8a:2e:bf:4f: e3:89:bb:74:2d:77:33:7f:73:0d:ac:90:58:d7:03: df:71:f2:ad:69:52:da:c7:6e:78:b0:a4:62:f1:84: 66:fb:93:f0:2c:db:e8:eb:78:85:34:1e:89:45:26: a7:48:be:47:28:0e:06:1b:93:a0:c9:23:93:fd:13: 2c:b5:57:97:b6:c2:40:cd:f8:b7:19:8f:ac:41:55: 49:cb:50:92:3d:f5:88:40:82:01:61:e8:f8:b1:b4: 37:cd:fa:e5:9e:49:15:ff:ae:08:65:2e:d5:9e:f4: 47:c5:22:8d:25:12:23:e0:f4:fb:63:54:ec:2a:73: 39:f0:15:c4:62:b2:8b:77:e9:2a:61:7d:a3:65:ac: cd:fd:d9:d3:33:a6:4f:e4:6e:ba:31:34:16:ec:43: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:A2:DD:05:80:FB:34:62:66:B8:E6:14:AE:58:B2:6C:6C:A2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd865953-ecca-346e-bd8e-2ad11918a410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:04:16:1c:2f:d8:86:31:9f:eb:ac:84:99:ad:da:16:b6:cb: 33:e2:23:d3:79:90:dc:97:97:e2:f8:d3:91:18:8f:4d:3c:c4: 22:0b:3f:97:24:42:6c:3d:68:cc:e8:a5:c6:d7:84:63:5e:5f: 5b:9c:7c:9a:1f:0c:26:e1:90:cc:a1:f0:38:e5:77:5d:16:6a: 6d:08:a5:69:ff:4e:af:ec:42:37:05:46:41:9b:70:b4:d5:e4: 0c:01:03:8a:44:a4:8c:ec:5e:ab:eb:87:19:8d:61:d7:0b:69: aa:10:7a:3c:4b:c8:7a:4b:4e:db:d2:c4:6b:50:cf:91:94:db: fd:15:f3:61:d1:39:3d:e9:0b:42:18:d6:5e:50:47:09:e6:5a: 5d:56:e1:ba:90:e5:49:36:ad:4b:30:dc:90:59:7b:d1:bc:9b: 55:c5:dc:cd:e9:65:38:4f:6f:29:fb:48:61:2e:54:30:79:f0: bc:db:87:67:83:5c:b2:e6:db:95:1e:62:28:97:83:9a:ab:ab: 40:5b:c7:33:65:16:26:2c:75:c2:28:27:cf:f9:9d:72:ee:3b: 63:cd:5a:95:da:d9:8c:78:55:48:19:d8:70:f6:28:9a:f8:10: 64:0b:a4:67:7a:c0:34:51:cf:be:58:5f:73:e7:a1:df:ad:92: 76:24:16:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apjNjhV51vUoJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk YjFlNjJmNzctOGNlOS00MTg1LTk0Y2MtMmIxMDIyYTM4YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Uf50J+86lMivHchxyNWk78WP2tJiiIeJLI PQiXfmA8mxDTMi8vyvIF1fL3wwLGDn6QCAR9cYyq260dRK0GyZTLk+TejkBv8wJP TivsaW7/VziBWpBrX6h1hYxMEf6sAkjLN4ouv0/jibt0LXczf3MNrJBY1wPfcfKt aVLax254sKRi8YRm+5PwLNvo63iFNB6JRSanSL5HKA4GG5OgySOT/RMstVeXtsJA zfi3GY+sQVVJy1CSPfWIQIIBYej4sbQ3zfrlnkkV/64IZS7VnvRHxSKNJRIj4PT7 Y1TsKnM58BXEYrKLd+kqYX2jZazN/dnTM6ZP5G66MTQW7EP+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0Vot0FgPs0Yma45hSuWLJsbKJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ4NjU5NTMtZWNjYS0z NDZlLWJkOGUtMmFkMTE5MThhNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIg2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwEFhwv2IYxn+ushJmt2ha2yzPiI9N5kNyXl+L405EYj008xCILP5ck Qmw9aMzopcbXhGNeX1ucfJofDCbhkMyh8Djld10Wam0IpWn/Tq/sQjcFRkGbcLTV 5AwBA4pEpIzsXqvrhxmNYdcLaaoQejxLyHpLTtvSxGtQz5GU2/0V82HROT3pC0IY 1l5QRwnmWl1W4bqQ5Uk2rUsw3JBZe9G8m1XF3M3pZThPbyn7SGEuVDB58Lzbh2eD XLLm25UeYiiXg5qrq0BbxzNlFiYsdcIoJ8/5nXLuO2PNWpXa2Yx4VUgZ2HD2KJr4 EGQLpGd6wDRRz75YX3Pnod+tknYkFsM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:15:53 2026 by rpki-client