$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f618a155-a386-38b2-b4ff-fe8a3d850900.roa File: f618a155-a386-38b2-b4ff-fe8a3d850900.roa (raw, json) Hash identifier: TOkmQHuzTDpnxE5LIKef4WhHO1USZFUHajJ9TYLxGQ8= Subject key identifier: B1:97:01:7B:FB:7C:15:6E:A2:6B:4C:CA:4B:F0:89:8A:D9:37:78:44 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D746FB7C176A6416653F70580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f618a155-a386-38b2-b4ff-fe8a3d850900.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 396982 IP address blocks: 34.7.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:b7:c1:76:a6:41:66:53:f7:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=b20e6ebc-fed4-4598-b63b-454dc3341459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:fc:e5:fe:3a:f0:94:53:3d:33:5d:8a:a2: a4:2a:8e:6f:7f:a8:ba:34:03:b7:3d:1f:01:71:17: 65:40:e2:d7:2a:1d:81:eb:4a:b0:7e:fc:b5:ab:f3: 0d:89:1b:b9:5d:e1:4b:4b:24:be:24:34:38:de:4d: 66:a8:fb:ca:38:e2:2b:7c:bd:94:29:d8:92:b0:1b: 12:0f:68:aa:a9:0b:7a:32:2e:70:4c:71:5d:88:87: 07:db:e1:1c:ed:a3:d3:89:e3:38:74:df:40:b7:ab: b6:40:5a:8d:3a:a2:63:37:a7:d4:8a:4d:07:d0:c6: f7:7e:f1:84:6a:d6:a6:bb:0d:2e:98:53:55:9b:ec: 1e:41:32:c9:05:2a:53:0e:e6:a8:66:9b:da:01:f0: 61:81:51:7c:7d:8a:81:1d:f0:44:e7:ef:69:37:03: 10:c4:3d:a7:41:fb:23:37:5c:4c:7c:fa:26:49:65: 77:1f:54:81:0e:25:43:ad:f8:a8:df:9d:3d:12:f5: 46:f4:df:8e:58:a0:c9:87:0f:c2:e6:b4:66:98:19: 75:e7:e2:88:28:9d:94:ec:ef:4b:3f:7e:0f:21:d9: f4:d9:bf:00:0e:f4:51:c1:30:06:b7:c5:27:bc:f5: 0f:fb:8f:f4:9d:38:10:82:23:60:25:0a:7c:e1:70: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:97:01:7B:FB:7C:15:6E:A2:6B:4C:CA:4B:F0:89:8A:D9:37:78:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f618a155-a386-38b2-b4ff-fe8a3d850900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.7.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cb:fc:39:d2:0d:85:88:9a:5b:00:98:20:17:b6:8f:f6:ef: bb:9a:19:d2:dc:b2:57:fc:f0:86:e8:d6:32:64:34:c5:61:e0: 87:28:34:1c:a0:d2:ba:4f:3f:e2:d2:d6:fe:0d:56:6c:d9:0d: 4f:60:01:4a:1e:e2:5c:81:1b:c2:e4:8a:ba:63:72:fb:b9:06: 46:2b:ff:7c:54:46:99:a7:8b:e9:2a:ca:27:5a:3e:af:bf:42: b9:2d:61:8a:01:70:40:13:6f:95:b9:45:59:db:3e:d2:0a:7d: 65:40:41:13:93:cd:b5:26:7f:83:b8:0f:0e:66:0e:b3:fc:4d: e7:bd:9e:b3:8d:91:a9:2f:c3:c3:1e:02:4f:07:5f:4d:5e:1a: a4:77:88:e6:1f:30:2f:8d:fb:cc:a6:67:6c:7e:4d:35:a8:e8: e1:99:26:3e:89:9e:39:37:a5:5b:d3:04:a4:5d:76:d6:8f:d3: 35:e9:6c:c0:68:4a:e4:6d:87:bb:f1:aa:21:57:bb:2f:f8:24: bf:ac:02:ba:47:45:32:e1:cf:63:90:be:6c:a8:f9:c5:19:c7: 86:d0:46:42:2f:e3:b7:05:ed:58:9c:5a:6f:79:d8:ee:3f:a4: 27:f4:3f:4b:b8:bd:e5:38:71:32:69:af:bd:b5:9b:be:e8:cc: 3b:1a:4b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b7fBdqZBZlP3BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YjIwZTZlYmMtZmVkNC00NTk4LWI2M2ItNDU0ZGMzMzQxNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLz85f468JRTPTNdiqKkKo5vf6i6NAO3PR8B cRdlQOLXKh2B60qwfvy1q/MNiRu5XeFLSyS+JDQ43k1mqPvKOOIrfL2UKdiSsBsS D2iqqQt6Mi5wTHFdiIcH2+Ec7aPTieM4dN9At6u2QFqNOqJjN6fUik0H0Mb3fvGE atamuw0umFNVm+weQTLJBSpTDuaoZpvaAfBhgVF8fYqBHfBE5+9pNwMQxD2nQfsj N1xMfPomSWV3H1SBDiVDrfio3509EvVG9N+OWKDJhw/C5rRmmBl15+KIKJ2U7O9L P34PIdn02b8ADvRRwTAGt8UnvPUP+4/0nTgQgiNgJQp84XC0BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGXAXv7fBVuomtMykvwiYrZN3hEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjYxOGExNTUtYTM4Ni0z OGIyLWI0ZmYtZmU4YTNkODUwOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXL/DnSDYWImlsAmCAXto/277uaGdLcslf88Ibo1jJkNMVh4IcoNByg 0rpPP+LS1v4NVmzZDU9gAUoe4lyBG8Lkirpjcvu5BkYr/3xURpmni+kqyidaPq+/ QrktYYoBcEATb5W5RVnbPtIKfWVAQROTzbUmf4O4Dw5mDrP8Tee9nrONkakvw8Me Ak8HX01eGqR3iOYfMC+N+8ymZ2x+TTWo6OGZJj6Jnjk3pVvTBKRddtaP0zXpbMBo SuRth7vxqiFXuy/4JL+sArpHRTLhz2OQvmyo+cUZx4bQRkIv47cF7VicWm952O4/ pCf0P0u4veU4cTJpr721m77ozDsaS+s= -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:34 2026 by rpki-client