$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa File: a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa (raw, json) Hash identifier: Epmtuhy4VoZ56Okz4Vupp1dg5axnOpiJQT0Nn7Qz03Q= Subject key identifier: 8B:A3:DE:81:A2:A7:A7:68:04:58:F5:F4:49:AC:06:20:E0:74:39:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E08660ECA0EF4412996D9B900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 34.3.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:0e:ca:0e:f4:41:29:96:d9:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=31b13bc5-ce0c-4de6-888c-f0bc2adae9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:02:4e:ec:5f:a5:4e:3b:4e:f8:c7:81:7c: 14:a7:bc:6b:c7:8c:cb:6c:f5:71:f8:8b:89:ba:89: 6f:aa:46:66:43:a3:6f:f9:45:2c:3e:65:2d:8d:86: c3:8a:1f:ae:64:1e:df:77:f3:50:da:7e:60:5c:dd: e0:b3:87:e5:94:ae:b6:6a:22:10:9e:17:f0:9b:6d: f6:b4:b9:a4:d3:ae:9d:93:b1:19:08:86:88:5b:c1: a3:1c:85:4b:38:93:ca:33:21:89:7a:b8:65:15:ae: e2:39:aa:e9:73:72:67:34:a9:06:bf:8d:30:f5:41: 6a:cb:53:b7:92:30:3e:41:cb:4e:c0:01:84:ad:f9: 09:48:23:d6:07:46:c8:c4:06:07:a1:67:91:70:22: e1:68:f4:98:41:e1:9c:0d:f2:4c:e0:9b:f7:fa:8c: b9:e7:a7:76:01:f0:0e:6e:95:8c:c1:2a:1c:f6:76: c1:54:dd:86:51:b8:e8:87:61:8b:19:13:34:c1:e4: 2b:f9:8b:82:3e:07:97:86:97:49:f5:5d:7f:c2:f7: 73:69:9f:09:fc:50:39:fd:aa:5e:b9:94:d9:40:bb: 3d:f2:89:2c:5b:03:74:47:f8:20:fb:b8:17:04:92: f7:c3:6d:78:58:fc:e9:93:8e:af:3d:c4:4e:3b:de: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A3:DE:81:A2:A7:A7:68:04:58:F5:F4:49:AC:06:20:E0:74:39:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.3.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7b:7b:15:7f:58:a6:3b:84:18:ca:26:d5:20:90:86:5e:16: c4:d0:9f:65:2b:49:65:e9:a9:8a:66:01:9b:5c:7e:20:50:97: 89:26:f3:07:21:be:ee:eb:a0:27:ca:9f:1b:fd:53:70:ce:b9: 40:15:33:c6:34:e4:a4:58:5c:62:84:c6:1b:ad:00:79:f3:f5: 04:cf:d8:ae:25:ae:34:31:0c:36:97:b4:5c:d2:35:de:42:60: 78:94:34:52:0c:28:5e:b4:0c:81:0c:ea:c7:00:e2:b5:e7:dc: e9:01:b7:7d:ad:5f:c8:fc:ce:21:23:04:22:f4:0d:74:74:39: bc:5f:66:1b:8c:16:68:6e:63:2c:5e:1d:2d:c7:71:0a:81:68: 86:f2:c0:a0:3c:d9:4b:67:61:bb:4b:ac:67:c6:3f:11:de:6c: a7:58:e4:a8:a9:38:3b:46:33:29:94:a6:93:56:c0:d3:f4:b9: 87:81:e2:13:a4:4a:1a:64:ad:76:7c:50:43:c0:96:ef:f2:05: bf:06:9c:bf:79:e5:57:01:1c:5d:cb:e7:4e:ac:d7:70:d5:cd: 76:48:b2:3c:79:a9:df:77:b2:dc:f9:fc:6f:71:70:27:17:0a: 40:9f:e2:70:8a:6a:86:79:b7:7c:19:53:f0:a0:90:95:98:d4: 0d:24:93:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZg7KDvRBKZbZuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MzFiMTNiYzUtY2UwYy00ZGU2LTg4OGMtZjBiYzJhZGFlOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/kCTuxfpU47TvjHgXwUp7xrx4zLbPVx+IuJ uolvqkZmQ6Nv+UUsPmUtjYbDih+uZB7fd/NQ2n5gXN3gs4fllK62aiIQnhfwm232 tLmk066dk7EZCIaIW8GjHIVLOJPKMyGJerhlFa7iOarpc3JnNKkGv40w9UFqy1O3 kjA+QctOwAGErfkJSCPWB0bIxAYHoWeRcCLhaPSYQeGcDfJM4Jv3+oy556d2AfAO bpWMwSoc9nbBVN2GUbjoh2GLGRM0weQr+YuCPgeXhpdJ9V1/wvdzaZ8J/FA5/ape uZTZQLs98oksWwN0R/gg+7gXBJL3w214WPzpk46vPcROO9773wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuj3oGip6doBFj19EmsBiDgdDlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5NmUzYmMtZThhNi0z MTk2LWFmYWYtYTIwYWNmNTM3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV7exV/WKY7hBjKJtUgkIZeFsTQn2UrSWXpqYpmAZtcfiBQl4km8wch vu7roCfKnxv9U3DOuUAVM8Y05KRYXGKExhutAHnz9QTP2K4lrjQxDDaXtFzSNd5C YHiUNFIMKF60DIEM6scA4rXn3OkBt32tX8j8ziEjBCL0DXR0ObxfZhuMFmhuYyxe HS3HcQqBaIbywKA82UtnYbtLrGfGPxHebKdY5KipODtGMymUppNWwNP0uYeB4hOk ShpkrXZ8UEPAlu/yBb8GnL955VcBHF3L506s13DVzXZIsjx5qd93stz5/G9xcCcX CkCf4nCKaoZ5t3wZU/CgkJWY1A0kk34= -----END CERTIFICATE-----Generated at Sat Jun 13 14:22:38 2026 by rpki-client