$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12bac064-7c28-35b1-a4f9-034fe918400d.roa File: 12bac064-7c28-35b1-a4f9-034fe918400d.roa (raw, json) Hash identifier: 5cAe9pKoFUAYSuIbn5atvu/6f+yYH01B4FEgW8XXlm8= Subject key identifier: 02:EF:0B:D7:0A:48:19:19:B5:57:A6:0E:9C:BD:83:41:58:75:6D:7E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0F6A1621BFCA475BE7078 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12bac064-7c28-35b1-a4f9-034fe918400d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.118.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f6:a1:62:1b:fc:a4:75:be:70:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=168979b1-3744-4e1c-8898-92c12e21ce70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:8c:14:89:a6:41:1d:0f:64:00:fd:78:20: bf:32:16:cb:48:ad:16:11:b8:3e:0e:76:d6:57:64: aa:84:4c:3a:67:b3:28:71:40:7f:2c:d0:5b:75:3f: 61:bb:d8:b2:56:bf:1c:3d:c0:7f:ff:e2:d4:75:7f: 54:01:e3:05:cb:8c:3c:0b:52:7f:d6:a3:8f:12:de: 38:34:3c:31:60:20:98:4b:25:65:14:0c:93:41:b3: 6a:73:fc:3f:25:71:3f:67:12:5c:cb:e2:b3:3b:b7: 87:6f:fe:1c:6f:27:b8:0c:f4:72:85:40:73:cc:d9: 57:7f:89:dc:a9:eb:8f:04:49:db:66:d4:38:02:cc: a4:36:0e:77:77:98:c6:bb:7c:07:00:89:11:60:60: d8:49:e8:30:6c:f1:9c:4e:ea:a4:da:e9:a9:97:72: 85:d5:70:1f:3b:ed:54:99:f5:77:56:33:15:36:f8: 88:73:91:90:85:ae:bd:28:48:16:a3:97:96:90:bf: 58:bf:a4:ad:cd:c8:53:c3:e5:de:7e:65:1f:e7:41: 8e:91:94:08:92:42:41:c8:ea:31:42:1e:8f:61:96: 7a:29:17:19:e7:04:2a:ef:00:3b:f8:7c:4c:25:c9: d0:4c:d5:78:a0:8b:80:62:ae:3b:30:6c:1e:47:19: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EF:0B:D7:0A:48:19:19:B5:57:A6:0E:9C:BD:83:41:58:75:6D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12bac064-7c28-35b1-a4f9-034fe918400d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d3:e0:ce:19:39:a2:6a:0b:76:c6:01:01:5d:24:ff:17:c1: bd:95:88:5c:07:6f:81:39:ed:6a:a1:52:fa:e8:20:3d:17:e1: 34:ba:d8:f0:96:b4:52:a7:47:02:23:2b:b4:66:dc:e8:e3:3a: d8:51:d5:80:ec:a3:cd:63:cf:fa:f3:d5:08:fb:1f:a5:fc:95: c1:76:13:ad:60:8b:51:21:3d:94:81:15:d7:6c:1d:af:98:2d: 33:63:85:40:47:d5:67:6a:4f:42:4b:d8:e9:1b:aa:a0:92:4b: 94:02:12:c1:fd:4b:1b:a1:9d:42:e0:28:28:af:2b:ef:67:97: 18:f6:eb:38:f5:f9:a4:04:98:07:40:04:5e:e1:e2:3c:5a:a6: 34:6b:7b:e6:da:5b:74:e0:ef:2c:a1:ef:3b:58:4c:dc:ea:77: 05:26:59:c7:95:bc:6d:2d:7e:14:9a:44:53:f0:67:94:0e:70: 2b:ca:b1:45:03:20:d8:a0:b1:60:a2:03:dc:d4:1e:fc:41:1a: 3c:47:52:20:d1:6c:8d:ad:94:60:4a:52:76:f2:2b:0a:00:28: 31:eb:17:cb:5e:a9:4d:18:a6:01:58:99:3b:8b:e6:12:92:15: ae:c0:1d:50:18:c1:b6:0e:b5:c3:ee:e9:f2:59:2a:11:e1:ca: 31:35:63:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PahYhv8pHW+cHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTY4OTc5YjEtMzc0NC00ZTFjLTg4OTgtOTJjMTJlMjFjZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDqMFImmQR0PZAD9eCC/MhbLSK0WEbg+DnbW V2SqhEw6Z7MocUB/LNBbdT9hu9iyVr8cPcB//+LUdX9UAeMFy4w8C1J/1qOPEt44 NDwxYCCYSyVlFAyTQbNqc/w/JXE/ZxJcy+KzO7eHb/4cbye4DPRyhUBzzNlXf4nc qeuPBEnbZtQ4AsykNg53d5jGu3wHAIkRYGDYSegwbPGcTuqk2umpl3KF1XAfO+1U mfV3VjMVNviIc5GQha69KEgWo5eWkL9Yv6StzchTw+XefmUf50GOkZQIkkJByOox Qh6PYZZ6KRcZ5wQq7wA7+HxMJcnQTNV4oIuAYq47MGweRxkSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALvC9cKSBkZtVemDpy9g0FYdW1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTJiYWMwNjQtN2MyOC0z NWIxLWE0ZjktMDM0ZmU5MTg0MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjT4M4ZOaJqC3bGAQFdJP8Xwb2ViFwHb4E57WqhUvroID0X4TS62PCW tFKnRwIjK7Rm3OjjOthR1YDso81jz/rz1Qj7H6X8lcF2E61gi1EhPZSBFddsHa+Y LTNjhUBH1WdqT0JL2OkbqqCSS5QCEsH9SxuhnULgKCivK+9nlxj26zj1+aQEmAdA BF7h4jxapjRre+baW3Tg7yyh7ztYTNzqdwUmWceVvG0tfhSaRFPwZ5QOcCvKsUUD INigsWCiA9zUHvxBGjxHUiDRbI2tlGBKUnbyKwoAKDHrF8teqU0YpgFYmTuL5hKS Fa7AHVAYwbYOtcPu6fJZKhHhyjE1Yz8= -----END CERTIFICATE-----Generated at Thu Mar 26 23:04:02 2026 by rpki-client