$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14721baa-42aa-304a-96f8-bdae0eba9f8b.roa File: 14721baa-42aa-304a-96f8-bdae0eba9f8b.roa (raw, json) Hash identifier: oGNKv6r99Fdj7qJBXXECJH20Z9vOKhuie6ZEP/MXJh4= Subject key identifier: 61:5C:6F:EF:AE:C3:07:A1:62:35:ED:98:D4:F8:AC:0E:D8:D9:03:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAADAFE8BF4D876048B780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14721baa-42aa-304a-96f8-bdae0eba9f8b.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.66.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ad:af:e8:bf:4d:87:60:48:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=862fca93-8b16-409d-ac00-de689e050f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:22:e5:1a:4c:e6:bf:ab:3b:95:78:6e:72: 46:07:f8:63:83:78:55:f4:7a:8c:22:ec:1f:b3:7d: 2d:62:53:54:d2:1c:6b:c4:43:bc:bd:b0:f6:a2:cb: 22:2b:fb:92:b9:9d:63:c8:f6:26:64:6b:b9:d0:7c: ad:3a:24:94:54:42:5f:b8:3f:d9:99:50:40:84:b8: 56:1c:e6:77:9e:88:87:78:17:ba:b9:52:72:db:b9: 34:e7:da:ab:87:30:8e:9e:39:0c:86:8a:27:6b:75: d6:a5:e7:1f:28:09:7e:58:1c:e6:29:db:2b:fc:c8: 5d:1f:a3:ba:b2:0f:87:59:47:74:f6:d7:70:30:2b: dd:18:df:d9:f3:31:b7:51:2e:9b:f7:e2:6c:a0:3f: 0f:77:50:bf:29:30:14:a0:31:f5:f9:9c:9e:f0:13: d4:bb:75:ce:68:b7:c1:17:52:92:90:1d:f6:15:c5: f9:86:86:b6:0c:6b:c4:b8:d2:62:9e:17:c9:3e:f5: 81:3c:79:6e:36:cf:09:14:a3:dc:e9:51:47:e9:c3: ea:17:0d:c6:6b:b7:87:11:e3:82:f3:1a:63:88:a1: 8d:4d:b3:78:8e:3e:3c:39:7d:86:26:65:00:e6:fb: 02:3f:f0:da:ef:86:fa:04:93:00:50:25:8a:56:a8: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:6F:EF:AE:C3:07:A1:62:35:ED:98:D4:F8:AC:0E:D8:D9:03:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14721baa-42aa-304a-96f8-bdae0eba9f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f5:46:35:15:95:72:24:05:5f:9f:34:fd:86:69:1e:92:c1: 90:0b:1c:c0:ae:e0:c1:f5:f3:01:f1:d1:2b:e8:c7:8d:86:47: f1:3c:79:87:a8:02:a2:62:82:21:97:d9:d5:13:6d:96:b8:6a: fd:4e:f0:1f:1d:c3:38:e3:0a:c9:82:b2:22:9c:51:b5:e0:c7: ef:4d:e8:b9:83:0b:4c:dd:09:17:1e:e9:b4:d2:99:34:6d:de: 8c:4c:b8:f2:9e:71:3a:fa:41:89:b1:86:21:59:e1:52:5b:d3: f8:72:df:a8:bd:9f:90:1a:c4:15:61:7c:99:0d:2d:9a:d2:42: 74:fd:38:e0:d3:4a:41:81:20:2c:16:ab:f0:1a:03:00:d3:98: 86:0b:4a:a1:e5:49:7d:82:44:cc:ac:d7:bb:c0:93:0e:e8:2a: 14:f4:11:ba:86:af:92:f3:0e:de:86:9f:2e:84:cb:e6:57:8c: 7f:be:43:84:4a:d0:b8:84:29:4b:5c:b3:d0:79:ab:0f:e4:45: 21:fd:a1:f1:fd:9a:73:5d:25:f3:2e:8c:9a:14:74:3a:84:41: 4c:dd:6c:ab:44:78:d2:bd:d4:d9:00:38:cc:b9:22:a5:78:36: 9b:4a:85:ef:78:bd:c4:0b:6a:98:8c:27:a3:72:0e:cd:97:52: c7:2a:fc:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqq2v6L9Nh2BIt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODYyZmNhOTMtOGIxNi00MDlkLWFjMDAtZGU2ODllMDUwZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/si5RpM5r+rO5V4bnJGB/hjg3hV9HqMIuwf s30tYlNU0hxrxEO8vbD2ossiK/uSuZ1jyPYmZGu50HytOiSUVEJfuD/ZmVBAhLhW HOZ3noiHeBe6uVJy27k059qrhzCOnjkMhoona3XWpecfKAl+WBzmKdsr/MhdH6O6 sg+HWUd09tdwMCvdGN/Z8zG3US6b9+JsoD8Pd1C/KTAUoDH1+Zye8BPUu3XOaLfB F1KSkB32FcX5hoa2DGvEuNJinhfJPvWBPHluNs8JFKPc6VFH6cPqFw3Ga7eHEeOC 8xpjiKGNTbN4jj48OX2GJmUA5vsCP/Da74b6BJMAUCWKVqjx0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFcb++uwwehYjXtmNT4rA7Y2QMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTQ3MjFiYWEtNDJhYS0z MDRhLTk2ZjgtYmRhZTBlYmE5ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb1RjUVlXIkBV+fNP2GaR6SwZALHMCu4MH18wHx0Svox42GR/E8eYeo AqJigiGX2dUTbZa4av1O8B8dwzjjCsmCsiKcUbXgx+9N6LmDC0zdCRce6bTSmTRt 3oxMuPKecTr6QYmxhiFZ4VJb0/hy36i9n5AaxBVhfJkNLZrSQnT9OODTSkGBICwW q/AaAwDTmIYLSqHlSX2CRMys17vAkw7oKhT0EbqGr5LzDt6Gny6Ey+ZXjH++Q4RK 0LiEKUtcs9B5qw/kRSH9ofH9mnNdJfMujJoUdDqEQUzdbKtEeNK91NkAOMy5IqV4 NptKhe94vcQLapiMJ6NyDs2XUscq/AA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:24 2026 by rpki-client