$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa File: 2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa (raw, json) Hash identifier: s08N0HyNh30bgVH3c+b4SLcBgu8h9tF1Tl+IALVsgiA= Subject key identifier: C5:6E:63:F7:E3:B2:5C:D1:4C:31:EC:AD:0B:A2:5C:9A:C6:71:3B:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA636A3B77E1D289E649E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:63:6a:3b:77:e1:d2:89:e6:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=16bc6671-506c-4046-87f8-15b24cbf6a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:59:c4:3f:70:82:73:b6:4c:2b:d8:ef:49:d9: f7:ec:16:05:64:7a:43:d2:ec:58:e4:c9:72:d2:b8: f4:47:ff:c6:42:41:7b:46:ff:5a:09:6f:ba:42:d7: f1:6f:92:57:32:61:f5:e7:3a:17:27:f0:86:d9:7c: df:80:dc:6f:9d:d8:c9:51:1d:04:f3:4a:70:62:a8: 75:9d:03:37:61:3b:f7:68:b3:e2:f6:79:33:0a:f0: 7d:70:b2:6c:3a:60:42:46:e9:59:eb:8e:94:8f:30: 5d:bd:06:cc:4e:42:d0:30:8a:73:a9:02:7b:3c:29: da:90:87:7b:aa:78:b5:6f:48:04:7e:65:ef:c6:51: d4:3d:bd:0e:78:4e:38:f5:7b:d4:de:e2:fd:d5:c6: 56:c5:e6:97:57:b1:fb:82:34:b8:3b:61:e9:d1:bb: d9:11:8c:9b:e9:da:ec:45:bb:cf:6b:d1:1e:5b:29: d4:e0:23:70:be:2a:4c:b5:74:4e:74:d4:ba:18:79: 7e:1c:66:67:06:79:9d:e2:0a:ba:a0:36:88:90:b6: 4b:74:d8:29:75:7e:6d:9d:ee:23:49:b2:64:82:c6: 8d:2e:74:15:96:24:6a:bc:df:10:2b:4d:6a:28:6f: 42:d1:69:c6:eb:c9:4c:29:bf:f9:82:84:f4:18:23: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6E:63:F7:E3:B2:5C:D1:4C:31:EC:AD:0B:A2:5C:9A:C6:71:3B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:24:e3:15:e4:06:05:a9:dc:92:56:39:63:9d:5d:77:67:9a: 0e:bf:7e:9b:c2:45:1e:86:c6:c3:4e:79:ac:f4:62:34:35:80: a8:e9:01:45:e7:63:67:29:01:3b:24:d9:e5:cf:8c:6e:22:9b: aa:c8:41:d2:f2:e8:91:b3:75:49:a6:9d:e2:09:89:92:fa:a8: ae:ac:08:3a:41:2d:33:8e:d9:61:d8:ca:e4:59:ab:2f:5e:cf: b4:3f:0c:20:7a:a4:1b:0e:75:22:8f:cd:5a:2b:18:16:72:32: ab:02:d0:5d:f3:05:e8:4c:61:4f:99:d0:50:2e:bb:79:40:4a: ed:0a:2b:27:68:5f:d4:fd:86:50:63:93:1b:bf:bf:60:39:0d: 22:43:e9:da:85:61:9b:6f:b8:6a:56:0e:38:83:fa:ad:63:b7: 8e:b2:33:58:9c:f7:75:88:59:5c:b1:80:b6:36:81:dd:65:bf: b1:a4:32:16:e9:a4:ec:f2:74:97:20:d6:18:36:0b:e5:7e:e0: 80:6c:8d:c2:54:4d:63:5b:4f:c9:db:80:fc:73:e8:e7:1a:c0: 50:47:97:98:60:96:60:22:c4:a3:d8:ea:f7:01:e4:8c:e6:ed: 18:f5:14:b5:4a:0c:a2:a8:4f:13:ed:97:dd:55:79:26:68:a4: ee:0d:ed:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmNqO3fh0onmSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MTZiYzY2NzEtNTA2Yy00MDQ2LTg3ZjgtMTViMjRjYmY2YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FnEP3CCc7ZMK9jvSdn37BYFZHpD0uxY5Mly 0rj0R//GQkF7Rv9aCW+6Qtfxb5JXMmH15zoXJ/CG2XzfgNxvndjJUR0E80pwYqh1 nQM3YTv3aLPi9nkzCvB9cLJsOmBCRulZ646UjzBdvQbMTkLQMIpzqQJ7PCnakId7 qni1b0gEfmXvxlHUPb0OeE449XvU3uL91cZWxeaXV7H7gjS4O2Hp0bvZEYyb6drs RbvPa9EeWynU4CNwvipMtXROdNS6GHl+HGZnBnmd4gq6oDaIkLZLdNgpdX5tne4j SbJkgsaNLnQVliRqvN8QK01qKG9C0WnG68lMKb/5goT0GCNVzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVuY/fjslzRTDHsrQuiXJrGcTuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZiMzI4MjQtMmRlMi0z OWMwLWEwZWYtMGUwNDE4Y2ZjMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkk4xXkBgWp3JJWOWOdXXdnmg6/fpvCRR6GxsNOeaz0YjQ1gKjpAUXn Y2cpATsk2eXPjG4im6rIQdLy6JGzdUmmneIJiZL6qK6sCDpBLTOO2WHYyuRZqy9e z7Q/DCB6pBsOdSKPzVorGBZyMqsC0F3zBehMYU+Z0FAuu3lASu0KKydoX9T9hlBj kxu/v2A5DSJD6dqFYZtvuGpWDjiD+q1jt46yM1ic93WIWVyxgLY2gd1lv7GkMhbp pOzydJcg1hg2C+V+4IBsjcJUTWNbT8nbgPxz6OcawFBHl5hglmAixKPY6vcB5Izm 7Rj1FLVKDKKoTxPtl91VeSZopO4N7ao= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:17 2026 by rpki-client