$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/314be2c2-5673-3493-8bbd-d94de191f6c6.roa File: 314be2c2-5673-3493-8bbd-d94de191f6c6.roa (raw, json) Hash identifier: N10X1Kg2TE9vbTQhd3CcVRw1VLl4hid1JZ5az8MY3dY= Subject key identifier: AE:95:78:2E:F1:47:0D:58:26:E8:8C:44:FD:B8:55:09:88:5D:E8:CB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA5C479F992AC14B1D900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/314be2c2-5673-3493-8bbd-d94de191f6c6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.176.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a5:c4:79:f9:92:ac:14:b1:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=b1c118b3-32fb-4751-a763-29d0e9b9ac90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:74:04:07:ed:b3:a7:27:76:29:a7:4a:95:96: a2:b8:77:f1:ee:12:04:79:f6:f8:92:f5:47:a3:ea: 72:4d:fd:5e:cd:4c:20:b2:9d:47:5c:64:33:33:16: 78:c3:38:96:ce:5d:72:2e:97:61:77:c8:e5:e8:f0: 5d:cc:d8:b0:5c:cb:4e:a5:5f:54:d8:d5:a3:8f:1c: 10:78:9e:35:70:fe:a2:82:d5:3f:fc:d1:3d:28:55: da:01:0d:51:14:20:77:36:ba:29:a8:e6:2c:f0:f9: 3d:c6:90:e2:41:fd:8f:9e:23:ac:ec:8b:28:35:55: 00:4b:b4:df:7a:cc:c4:1d:29:74:4f:f9:f3:0c:c6: a5:56:33:71:3f:c9:84:3f:6a:dc:f1:a8:a7:3f:40: 5d:eb:74:6d:d6:86:12:38:54:91:0a:ca:21:16:10: 65:67:b1:78:15:38:f9:f4:b9:b6:b6:41:f7:13:8b: 0c:ae:9e:d7:a0:42:20:b3:a5:52:4f:d5:cd:c7:55: ff:3f:e5:a6:2f:cc:a4:a7:51:a8:95:d3:ef:0f:6c: 6f:fa:bf:02:80:ba:a0:33:ea:19:96:38:41:20:56: 21:e9:90:0f:c6:88:6c:ea:6e:ad:fc:26:ef:22:6f: b5:19:34:c4:41:41:a2:e0:5f:83:b7:b5:00:15:7c: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:95:78:2E:F1:47:0D:58:26:E8:8C:44:FD:B8:55:09:88:5D:E8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/314be2c2-5673-3493-8bbd-d94de191f6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:42:ea:b0:67:4c:57:f0:0c:06:d2:c5:24:34:1e:f3:78:5d: 34:b1:2e:2b:5e:0e:46:c1:4e:10:3c:b3:45:a4:41:1b:c5:42: 14:c6:36:4b:7f:6d:3b:35:f8:e6:d9:02:6a:d9:5e:c2:11:88: f7:2e:3f:ec:ac:9b:03:68:e5:21:9a:b3:23:4f:75:c3:4f:ed: 75:c4:37:d9:ba:a6:69:43:5f:97:cd:ae:29:21:e6:49:a2:85: 3f:2d:8e:9f:ce:eb:b6:f9:17:2f:3e:20:05:ca:91:2c:cc:98: b1:1d:19:fd:73:07:f0:78:6b:aa:a7:c4:3f:14:67:33:6f:d6: 48:70:9f:9a:af:72:c2:4f:cd:9f:e2:f3:7d:58:63:27:d3:39: f6:22:0f:a4:b8:44:ce:68:6c:a9:05:5a:0e:42:d5:be:da:6a: 17:2c:69:88:27:79:f5:90:44:11:db:96:ab:8c:a1:f2:4b:19: 52:17:27:72:b4:36:3a:d0:95:5c:68:13:cf:ef:75:e0:f3:46: 81:e0:af:61:ae:b3:3d:14:b6:55:12:51:9b:9a:fe:b2:d4:d5: 76:1d:b2:d0:a1:5e:f9:39:4c:80:c6:a4:f4:53:35:3e:99:3b: f4:a7:0f:31:0d:79:40:a2:bc:21:22:40:dc:43:02:99:79:96: b8:80:dc:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqXEefmSrBSx2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YjFjMTE4YjMtMzJmYi00NzUxLWE3NjMtMjlkMGU5YjlhYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnQEB+2zpyd2KadKlZaiuHfx7hIEefb4kvVH o+pyTf1ezUwgsp1HXGQzMxZ4wziWzl1yLpdhd8jl6PBdzNiwXMtOpV9U2NWjjxwQ eJ41cP6igtU//NE9KFXaAQ1RFCB3NropqOYs8Pk9xpDiQf2PniOs7IsoNVUAS7Tf eszEHSl0T/nzDMalVjNxP8mEP2rc8ainP0Bd63Rt1oYSOFSRCsohFhBlZ7F4FTj5 9Lm2tkH3E4sMrp7XoEIgs6VST9XNx1X/P+WmL8ykp1GoldPvD2xv+r8CgLqgM+oZ ljhBIFYh6ZAPxohs6m6t/CbvIm+1GTTEQUGi4F+Dt7UAFXweQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6VeC7xRw1YJuiMRP24VQmIXejLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE0YmUyYzItNTY3My0z NDkzLThiYmQtZDk0ZGUxOTFmNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRC6rBnTFfwDAbSxSQ0HvN4XTSxLiteDkbBThA8s0WkQRvFQhTGNkt/ bTs1+ObZAmrZXsIRiPcuP+ysmwNo5SGasyNPdcNP7XXEN9m6pmlDX5fNrikh5kmi hT8tjp/O67b5Fy8+IAXKkSzMmLEdGf1zB/B4a6qnxD8UZzNv1khwn5qvcsJPzZ/i 831YYyfTOfYiD6S4RM5obKkFWg5C1b7aahcsaYgnefWQRBHblquMofJLGVIXJ3K0 NjrQlVxoE8/vdeDzRoHgr2Gusz0UtlUSUZua/rLU1XYdstChXvk5TIDGpPRTNT6Z O/SnDzENeUCivCEiQNxDApl5lriA3OM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:05:28 2026 by rpki-client