$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa File: 2c91055f-20da-3c23-b862-dcdd076e260e.roa (raw, json) Hash identifier: dc8iBqBAmIIjV2ACOdIRhPtL3vXbhzMj9f3AL0X9hY8= Subject key identifier: 69:A6:6E:0D:64:4E:5F:B8:31:97:3A:A9:5E:3D:15:09:6D:76:81:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB152270B2B42B583A880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.89.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b1:52:27:0b:2b:42:b5:83:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d964b8c5-e233-46d0-ac80-261465f84bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:c3:61:f3:a8:bc:40:5a:d2:18:63:83:fe: 33:4a:b7:c3:c7:d6:a6:60:13:c1:22:0e:70:8e:98: fc:5f:46:fb:7d:1a:37:92:5a:2e:40:0e:4c:f4:4d: a8:2e:87:fd:62:ce:de:75:59:c4:90:ca:77:fd:0d: 60:28:0b:5f:2e:8d:6b:d4:24:67:a0:83:48:98:b7: c6:0a:99:c3:c1:48:fd:e8:52:d0:2c:37:10:aa:a0: 99:68:a0:cd:48:45:e5:75:2a:e9:b9:24:e3:9a:f6: 13:90:39:bf:14:01:d3:11:27:d6:d9:f5:c7:39:e6: dc:7c:ad:dd:be:9d:e2:37:e8:6c:8a:fd:94:f8:38: b7:13:63:6e:fa:32:d4:d4:34:9e:03:12:38:93:5b: 87:e4:9b:96:ad:0b:37:78:25:db:39:44:6d:a4:11: 74:7f:76:a8:66:98:34:d9:47:a4:6b:91:95:01:08: 54:11:be:f1:f8:09:ed:30:f8:7e:28:6e:50:d0:53: 98:af:63:a3:e1:00:ca:85:83:7b:e3:71:ec:af:5a: cc:85:8f:c9:52:5b:e5:c3:c3:19:b3:be:53:de:d9: e0:a7:35:80:c7:06:37:f0:30:d6:78:1d:e4:56:a0: 19:80:ce:f7:36:2e:5f:60:29:41:af:ca:25:24:2c: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A6:6E:0D:64:4E:5F:B8:31:97:3A:A9:5E:3D:15:09:6D:76:81:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:11:81:1c:84:bf:45:a8:d5:55:ea:c8:e4:ad:42:d1:00:4d: a0:94:d7:aa:c0:07:2f:00:44:3e:a9:37:7b:f8:70:9e:78:bb: 34:41:76:64:ac:7f:be:8d:d5:3d:b0:fc:f7:54:56:e5:4b:87: fe:c7:d3:02:44:04:ec:64:c2:f6:c0:8d:2d:22:56:d5:7d:48: 0d:48:5e:f9:20:0c:d7:5a:e3:dd:7d:6e:f0:cc:e9:1f:87:02: 5c:e4:b9:ad:5b:4f:f7:b0:38:2a:b3:10:8d:e1:db:a7:8f:32: 8b:ac:d7:8e:f7:c4:36:09:94:6a:20:0b:e7:2f:81:b5:d0:47: 8b:a1:a1:1b:45:fa:4b:fe:ab:34:f4:3c:2b:b7:58:a4:42:e0: e8:de:49:c9:32:ff:1e:97:88:03:1b:75:7f:cd:ee:c6:cb:4f: ed:a1:45:9e:19:f7:1e:c3:49:bc:af:e6:ee:19:92:fe:dc:9c: 85:97:55:2d:69:e0:c2:9e:75:1e:ab:45:2a:f4:cf:61:48:6c: e0:61:00:c1:24:ba:c8:91:bd:79:c5:83:12:09:17:6d:4c:eb: e0:3c:b9:da:f9:58:97:1b:ce:5b:c3:b3:d8:83:bc:d9:bd:1e: 73:21:8c:b3:f0:fb:f1:67:8e:16:9f:de:a3:75:ff:4a:cf:ef: 54:83:31:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrFSJwsrQrWDqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDk2NGI4YzUtZTIzMy00NmQwLWFjODAtMjYxNDY1Zjg0YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPzDYfOovEBa0hhjg/4zSrfDx9amYBPBIg5w jpj8X0b7fRo3klouQA5M9E2oLof9Ys7edVnEkMp3/Q1gKAtfLo1r1CRnoINImLfG CpnDwUj96FLQLDcQqqCZaKDNSEXldSrpuSTjmvYTkDm/FAHTESfW2fXHOebcfK3d vp3iN+hsiv2U+Di3E2Nu+jLU1DSeAxI4k1uH5JuWrQs3eCXbOURtpBF0f3aoZpg0 2Ueka5GVAQhUEb7x+AntMPh+KG5Q0FOYr2Oj4QDKhYN743Hsr1rMhY/JUlvlw8MZ s75T3tngpzWAxwY38DDWeB3kVqAZgM73Ni5fYClBr8olJCz5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmmbg1kTl+4MZc6qV49FQltdoFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM5MTA1NWYtMjBkYS0z YzIzLWI4NjItZGNkZDA3NmUyNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgRgRyEv0Wo1VXqyOStQtEATaCU16rABy8ARD6pN3v4cJ54uzRBdmSs f76N1T2w/PdUVuVLh/7H0wJEBOxkwvbAjS0iVtV9SA1IXvkgDNda4919bvDM6R+H Alzkua1bT/ewOCqzEI3h26ePMous1473xDYJlGogC+cvgbXQR4uhoRtF+kv+qzT0 PCu3WKRC4OjeScky/x6XiAMbdX/N7sbLT+2hRZ4Z9x7DSbyv5u4Zkv7cnIWXVS1p 4MKedR6rRSr0z2FIbOBhAMEkusiRvXnFgxIJF21M6+A8udr5WJcbzlvDs9iDvNm9 HnMhjLPw+/Fnjhaf3qN1/0rP71SDMeo= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:18 2026 by rpki-client