$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120e2c94-e561-3ace-aec1-dd04636e8749.roa File: 120e2c94-e561-3ace-aec1-dd04636e8749.roa (raw, json) Hash identifier: APIzN7tyGgGvznwjLowltpa5JS/fsXP9D6s7JdOiXs0= Subject key identifier: 7D:A2:0D:2B:59:22:D3:1D:7B:CD:12:41:C2:07:8F:85:8C:EE:70:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D44FA71652D7CE8434FA50040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120e2c94-e561-3ace-aec1-dd04636e8749.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19527 IP address blocks: 34.190.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:71:65:2d:7c:e8:43:4f:a5:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=7f6b50d8-d1a5-4d2e-8a63-8f84770a00c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:34:ac:87:bb:23:e4:0c:c5:79:2c:38:7d: 9b:e9:27:9f:38:9f:fe:2a:5d:da:3b:34:a1:b5:2b: 16:3e:97:b1:46:c4:76:df:2e:11:15:42:15:15:1b: d3:b9:9a:7e:5c:d9:f4:84:58:d3:5e:70:43:a3:10: 99:75:e5:75:1c:f6:e4:11:93:3e:2f:a3:8e:02:93: 60:2b:3a:cd:3c:6a:16:5a:3d:dd:5e:16:f9:75:e9: 80:03:27:c6:36:34:a7:4d:29:af:0f:0a:dc:35:e4: fd:60:41:78:86:12:6e:db:e5:80:7e:7c:10:03:b8: e8:bc:db:a2:52:4d:ab:cd:13:89:4d:05:fc:10:5a: 8e:dd:ce:d0:95:e3:2a:a4:22:ed:3c:13:c4:6c:9a: d8:8d:1d:b1:ce:2c:63:9b:74:c0:91:bb:aa:b0:76: 26:b7:6b:17:13:83:99:49:de:02:b4:f6:e8:17:8b: 4c:a5:06:47:86:d9:30:4d:e5:49:a7:9c:6a:40:22: 6a:28:81:be:51:3c:cd:5e:14:ac:ec:8d:12:d7:42: fe:64:1c:57:86:79:65:f0:63:f5:47:5b:2b:41:82: 91:49:71:99:80:56:f8:21:73:57:8c:f0:58:b2:7a: 57:a8:50:89:bf:9d:df:86:74:f5:3e:46:5b:cc:e5: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:0D:2B:59:22:D3:1D:7B:CD:12:41:C2:07:8F:85:8C:EE:70:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/120e2c94-e561-3ace-aec1-dd04636e8749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4c:c6:57:eb:25:74:11:55:91:ee:cd:75:74:74:93:d4:bc: 18:e1:10:5d:8a:e1:1f:b6:5c:6f:df:75:7d:76:16:d2:4e:47: a0:9c:97:b5:97:59:7f:fb:72:cc:c6:17:c6:3d:21:12:03:07: d5:0b:59:22:78:b0:da:b6:d4:63:f5:4d:95:cf:af:6c:2f:2e: b3:20:92:41:7e:eb:c6:6c:e5:a3:f8:6d:3c:e9:3e:70:db:c8: 85:6b:c7:79:dd:f1:9c:58:d2:f0:d3:f9:f5:61:a4:bf:26:b2: df:2a:d1:87:1d:5a:e2:12:9d:d3:0b:55:a7:e7:fd:2d:de:3b: 6d:ed:05:44:08:4a:ab:70:51:cb:37:17:2a:12:13:ba:95:14: d1:0c:14:21:89:ef:91:84:5e:57:6d:2d:3b:1b:6e:15:c6:b5: 15:25:e8:a4:ca:89:90:d7:68:ea:45:07:5e:d6:90:98:24:e4: ad:66:33:a4:ac:f1:5e:24:3c:2c:be:e0:e9:c4:f6:57:0e:02: 75:92:d0:7d:4f:ff:1c:aa:b3:21:45:61:29:7e:ac:ad:05:3b: 92:32:fd:37:1b:d4:fb:53:81:fd:4d:82:ba:b6:2b:14:3b:88: c6:4a:dd:6a:b9:c5:bb:54:da:22:c9:3a:10:12:81:ad:80:9f: c1:82:95:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nFlLXzoQ0+lAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk N2Y2YjUwZDgtZDFhNS00ZDJlLThhNjMtOGY4NDc3MGEwMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFw0rIe7I+QMxXksOH2b6SefOJ/+Kl3aOzSh tSsWPpexRsR23y4RFUIVFRvTuZp+XNn0hFjTXnBDoxCZdeV1HPbkEZM+L6OOApNg KzrNPGoWWj3dXhb5demAAyfGNjSnTSmvDwrcNeT9YEF4hhJu2+WAfnwQA7jovNui Uk2rzROJTQX8EFqO3c7QleMqpCLtPBPEbJrYjR2xzixjm3TAkbuqsHYmt2sXE4OZ Sd4CtPboF4tMpQZHhtkwTeVJp5xqQCJqKIG+UTzNXhSs7I0S10L+ZBxXhnll8GP1 R1srQYKRSXGZgFb4IXNXjPBYsnpXqFCJv53fhnT1PkZbzOVsdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2iDStZItMde80SQcIHj4WM7nDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTIwZTJjOTQtZTU2MS0z YWNlLWFlYzEtZGQwNDYzNmU4NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFMxlfrJXQRVZHuzXV0dJPUvBjhEF2K4R+2XG/fdX12FtJOR6Ccl7WX WX/7cszGF8Y9IRIDB9ULWSJ4sNq21GP1TZXPr2wvLrMgkkF+68Zs5aP4bTzpPnDb yIVrx3nd8ZxY0vDT+fVhpL8mst8q0YcdWuISndMLVafn/S3eO23tBUQISqtwUcs3 FyoSE7qVFNEMFCGJ75GEXldtLTsbbhXGtRUl6KTKiZDXaOpFB17WkJgk5K1mM6Ss 8V4kPCy+4OnE9lcOAnWS0H1P/xyqsyFFYSl+rK0FO5Iy/Tcb1PtTgf1Ngrq2KxQ7 iMZK3Wq5xbtU2iLJOhASga2An8GClfM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:05 2026 by rpki-client