$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa File: 33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa (raw, json) Hash identifier: 62VUGmbtk0DgfwVzXVdzuY51v97RDm5/WRK/pmdgmVU= Subject key identifier: D9:D9:35:13:5D:0F:F7:E0:76:B6:9A:B6:16:42:C5:13:63:66:62:7B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA53F466A4A43836A52380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.69.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:53:f4:66:a4:a4:38:36:a5:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=f0e1a300-2830-47cd-97a5-568ff70f365f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:6b:aa:66:6d:57:82:79:40:66:68:c2:c7: 6c:1d:60:b5:81:6e:95:f7:b6:db:dd:d8:24:a2:58: c2:1c:4c:c3:f5:14:d3:98:34:e9:08:88:2b:dd:3e: 4b:21:4b:2b:8a:57:d2:12:c9:16:88:52:83:b1:4a: 8a:41:16:60:65:77:17:d5:13:98:76:8d:cf:6c:b0: ea:c2:08:8c:53:92:fe:50:67:31:05:d3:52:1e:4f: df:14:b2:5d:38:c5:39:0b:bb:b6:19:3b:09:33:9c: 78:96:96:81:45:f1:95:b7:27:13:99:cf:e2:27:fb: b0:fb:b9:4b:18:37:63:ce:86:0c:70:8d:9b:af:45: d3:55:01:3b:39:f3:04:d7:99:d0:8e:58:42:32:5f: bf:8f:52:69:42:f7:44:cb:93:e6:a6:8d:8f:93:ab: c9:1f:8e:59:89:ed:bd:d5:ce:c8:15:99:95:2f:41: 43:83:5c:29:0a:ab:77:0f:26:67:6b:0a:a3:3d:3e: be:36:43:09:58:43:9f:15:e9:75:3b:7c:dc:38:0c: 37:be:fa:ab:63:fd:50:8f:a1:bf:c6:e3:15:76:e2: ab:bb:8c:c6:88:c0:ee:cf:c2:e4:cf:e4:49:db:a1: e0:72:d6:a6:59:13:66:b5:bb:81:17:38:94:15:00: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:35:13:5D:0F:F7:E0:76:B6:9A:B6:16:42:C5:13:63:66:62:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33fa3368-32bb-3ee2-966e-2a8ce76599e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d6:5b:28:63:20:c5:fd:e0:00:14:09:8b:69:19:0f:45:bc: 9e:d2:9f:89:ab:3d:80:a8:2d:47:72:14:67:85:df:f2:33:73: f7:4b:94:e3:5e:cf:8d:07:83:ee:84:d4:65:57:15:43:c0:c1: 4c:b3:de:8c:dc:09:9f:ba:56:cc:44:5f:61:90:0d:f8:11:d4: d1:86:c3:94:ac:43:c7:11:f3:fb:3c:05:9a:3c:a6:59:2f:33: 10:93:33:7d:8d:9c:97:f9:26:df:ce:53:a6:25:ee:4f:3c:fd: 81:35:3e:6d:8c:5d:39:57:d8:a4:bb:5a:3f:43:46:ad:d0:c4: 1f:26:47:b9:2d:b7:b1:8a:ea:77:3d:41:2e:f0:32:d7:4b:77: ec:c6:31:3b:2b:60:ed:0f:d4:a5:91:52:2e:21:23:74:74:36: fe:f5:dc:01:19:82:e8:b4:f2:27:00:d6:49:b3:77:f0:94:a7: db:b5:dc:f7:36:09:95:1c:12:50:2e:d9:c2:46:b7:2c:2a:16: 41:04:b1:f7:39:59:68:f0:26:c5:d6:af:ac:fe:ab:d4:b4:d8: 18:ae:71:fc:54:1c:80:db:5e:e1:98:91:e4:5c:26:aa:2c:0c: f7:7f:36:cb:f1:db:b4:52:76:d9:6a:49:50:8c:cb:65:2b:e2: 05:48:73:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlP0ZqSkODalI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZjBlMWEzMDAtMjgzMC00N2NkLTk3YTUtNTY4ZmY3MGYzNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYZrqmZtV4J5QGZowsdsHWC1gW6V97bb3dgk oljCHEzD9RTTmDTpCIgr3T5LIUsrilfSEskWiFKDsUqKQRZgZXcX1ROYdo3PbLDq wgiMU5L+UGcxBdNSHk/fFLJdOMU5C7u2GTsJM5x4lpaBRfGVtycTmc/iJ/uw+7lL GDdjzoYMcI2br0XTVQE7OfME15nQjlhCMl+/j1JpQvdEy5Pmpo2Pk6vJH45Zie29 1c7IFZmVL0FDg1wpCqt3DyZnawqjPT6+NkMJWEOfFel1O3zcOAw3vvqrY/1Qj6G/ xuMVduKru4zGiMDuz8Lkz+RJ26HgctamWRNmtbuBFziUFQCZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnZNRNdD/fgdraathZCxRNjZmJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNmYTMzNjgtMzJiYi0z ZWUyLTk2NmUtMmE4Y2U3NjU5OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjWWyhjIMX94AAUCYtpGQ9FvJ7Sn4mrPYCoLUdyFGeF3/Izc/dLlONe z40Hg+6E1GVXFUPAwUyz3ozcCZ+6VsxEX2GQDfgR1NGGw5SsQ8cR8/s8BZo8plkv MxCTM32NnJf5Jt/OU6Yl7k88/YE1Pm2MXTlX2KS7Wj9DRq3QxB8mR7ktt7GK6nc9 QS7wMtdLd+zGMTsrYO0P1KWRUi4hI3R0Nv713AEZgui08icA1kmzd/CUp9u13Pc2 CZUcElAu2cJGtywqFkEEsfc5WWjwJsXWr6z+q9S02BiucfxUHIDbXuGYkeRcJqos DPd/Nsvx27RSdtlqSVCMy2Ur4gVIc/c= -----END CERTIFICATE-----Generated at Thu Mar 26 17:23:31 2026 by rpki-client