$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa File: ffd4d11b-7be4-3453-ad82-0b71adf00095.roa (raw, json) Hash identifier: NC0wzryqR3wpDqS4Twc1jCsP2wOzVOCSs3iK7o1JvYU= Subject key identifier: D3:BD:75:09:FE:05:53:6B:F4:FB:DD:B7:A5:93:06:44:E4:D0:E8:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E086641CFFC9C2808CF6E3100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 34.94.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:41:cf:fc:9c:28:08:cf:6e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=0c8c4c2a-59ae-45cb-b2e7-a382f42dc046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:39:e4:44:c6:41:eb:6c:45:8d:59:82:0a:4d: a9:65:93:84:56:bd:f7:f7:c3:dd:f7:0c:0f:45:70: b1:e7:fb:03:d1:89:b4:73:54:68:75:b5:6a:44:20: e2:19:04:11:fe:e1:c4:a6:21:09:1a:6b:5e:27:a1: 10:0d:0c:2d:99:c0:ab:91:fb:22:2f:c1:a1:66:db: 14:ba:9b:bf:1d:7f:40:5e:4e:2d:e4:e8:0a:b8:17: f2:28:64:7f:c4:17:80:0f:fb:93:38:1d:6c:66:08: 38:a2:f2:56:e2:ba:7a:ed:bd:a0:22:61:d4:c4:cd: 64:d3:e5:8b:58:80:5c:92:00:0e:66:b0:2f:6e:6e: 6d:7d:9b:47:99:c9:91:53:c2:b8:4f:1c:a6:46:d6: fc:d6:8d:2a:f5:93:cb:4a:a5:a0:b6:ed:dd:0d:73: d2:8f:a2:49:f8:25:2a:9a:f5:06:7d:2d:5c:e7:c3: b5:77:55:48:1b:84:25:bc:c7:fe:e9:81:2d:67:e4: 33:d0:c1:d1:ba:16:d4:32:fe:2a:2d:65:4d:96:46: 0a:da:be:37:b9:3b:06:f5:fe:43:6b:23:d4:b7:1b: 5a:44:d1:93:95:cd:f0:03:d2:66:90:6e:a2:da:ad: db:a5:38:80:1a:b6:e8:f9:bd:1f:6c:a1:a6:0d:35: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BD:75:09:FE:05:53:6B:F4:FB:DD:B7:A5:93:06:44:E4:D0:E8:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3f:8c:2b:a4:cf:73:b3:66:8b:2f:49:6a:8b:af:cd:c0:4b: b2:1a:21:37:51:66:f3:18:9e:cc:5f:f5:74:5e:15:5a:e6:7f: 84:c1:6e:79:24:9d:43:e5:bd:4c:d4:f4:92:a9:cf:f1:74:a6: fc:99:ed:3f:d0:e4:1c:4b:fc:95:59:b6:4e:0b:88:56:36:12: 0e:6a:96:72:65:e1:4b:d6:bd:8e:0a:88:18:f0:97:f2:94:68: d3:64:3a:5c:c6:27:b9:41:59:33:17:d2:82:fc:09:c8:e9:1d: b0:bb:67:2f:98:24:a0:39:6a:4e:33:22:3d:a6:41:fa:78:c8: 3c:1e:8e:3c:76:02:9d:46:71:86:0a:97:dd:a9:e6:b0:c2:f3: ac:d7:12:32:cb:7b:53:64:bf:a3:e0:a9:d7:42:3a:27:a5:4c: 01:36:54:10:5c:ae:75:03:d8:34:d9:cd:31:19:e1:85:d2:4c: 89:59:53:b9:40:5a:c8:6d:3d:e5:08:1f:82:94:bc:02:76:8b: f3:85:b0:a6:ce:3e:48:2c:42:1a:30:c7:4a:a9:f9:dd:28:ce: df:4a:65:a7:52:82:3e:94:a4:2c:ee:41:28:e2:23:c1:37:6c: c9:e5:27:74:80:81:04:47:44:f2:d6:84:6c:7f:34:00:c8:09: 6d:52:33:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZkHP/JwoCM9uMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MGM4YzRjMmEtNTlhZS00NWNiLWIyZTctYTM4MmY0MmRjMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDnkRMZB62xFjVmCCk2pZZOEVr3398Pd9wwP RXCx5/sD0Ym0c1RodbVqRCDiGQQR/uHEpiEJGmteJ6EQDQwtmcCrkfsiL8GhZtsU upu/HX9AXk4t5OgKuBfyKGR/xBeAD/uTOB1sZgg4ovJW4rp67b2gImHUxM1k0+WL WIBckgAOZrAvbm5tfZtHmcmRU8K4TxymRtb81o0q9ZPLSqWgtu3dDXPSj6JJ+CUq mvUGfS1c58O1d1VIG4QlvMf+6YEtZ+Qz0MHRuhbUMv4qLWVNlkYK2r43uTsG9f5D ayPUtxtaRNGTlc3wA9JmkG6i2q3bpTiAGrbo+b0fbKGmDTV0xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO9dQn+BVNr9Pvdt6WTBkTk0OgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZkNGQxMWItN2JlNC0z NDUzLWFkODItMGI3MWFkZjAwMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0/jCukz3OzZosvSWqLr83AS7IaITdRZvMYnsxf9XReFVrmf4TBbnkk nUPlvUzU9JKpz/F0pvyZ7T/Q5BxL/JVZtk4LiFY2Eg5qlnJl4UvWvY4KiBjwl/KU aNNkOlzGJ7lBWTMX0oL8CcjpHbC7Zy+YJKA5ak4zIj2mQfp4yDwejjx2Ap1GcYYK l92p5rDC86zXEjLLe1Nkv6PgqddCOielTAE2VBBcrnUD2DTZzTEZ4YXSTIlZU7lA WshtPeUIH4KUvAJ2i/OFsKbOPkgsQhowx0qp+d0ozt9KZadSgj6UpCzuQSjiI8E3 bMnlJ3SAgQRHRPLWhGx/NADICW1SM/I= -----END CERTIFICATE-----Generated at Sun Jun 14 00:32:13 2026 by rpki-client