$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa File: 3522a44b-9834-3ba3-bf38-77634819db56.roa (raw, json) Hash identifier: Z0fmJ4P4zGFP6wUWrOHPMiCvU+ELLHajDw5B5APo4Ls= Subject key identifier: 44:9F:2A:A9:AF:79:1B:58:D1:7A:F5:7C:B1:75:AB:96:19:1C:81:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA626D9EDAB06CA75A5300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.72.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:62:6d:9e:da:b0:6c:a7:5a:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=8cce9b87-9296-493a-b32c-26dfdf2ddec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:42:ab:98:15:06:5d:5d:55:07:86:df:8f: 5f:09:40:91:57:0b:1b:7b:72:53:24:9b:76:31:f0: b6:07:a6:00:3d:dd:f6:a0:fc:a1:91:84:4b:e2:53: 4e:47:6d:64:d1:48:0a:c6:44:db:9b:c2:73:64:40: 01:00:68:9d:6a:a1:5d:a7:29:6b:a2:6b:91:b8:b3: 9a:07:e3:0f:14:d6:53:67:b2:82:73:fb:0e:f8:a2: c6:71:70:20:c2:27:60:20:4f:f1:80:9f:04:d5:db: f9:77:66:00:ab:04:17:65:78:c8:1f:b4:6e:c9:1b: a1:01:9e:aa:54:18:12:0a:39:2c:56:a7:d1:cb:6b: 62:34:13:43:c6:ef:6e:af:de:e2:7e:d8:b3:46:16: ad:48:39:0f:12:f5:41:2e:fa:42:e1:1c:1f:a2:56: ed:e7:ea:30:d8:10:86:17:30:ca:c6:1f:a1:03:88: 0d:b0:23:b3:cc:53:90:6b:27:c0:90:07:4c:c2:07: 93:7a:9f:2c:e3:84:e0:8a:95:65:70:81:b3:5e:bc: 5f:31:9a:e9:61:62:58:a2:2d:9d:df:a2:ab:9f:d8: 0a:09:e4:21:27:a0:00:f3:91:08:44:4a:49:29:59: 20:ff:2f:cd:80:5a:f5:ad:b4:4a:c5:9c:8c:5d:92: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9F:2A:A9:AF:79:1B:58:D1:7A:F5:7C:B1:75:AB:96:19:1C:81:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0a:63:4b:e1:8f:e6:10:c9:be:02:ce:64:5f:2d:70:aa:ca: f2:d1:b8:f8:68:4f:f3:a9:7b:ed:1f:23:75:c6:27:a7:f6:2f: 32:72:1c:40:df:91:b7:5f:92:16:8a:06:f5:af:ee:2c:1e:f3: c2:8a:b4:4b:e3:bf:a4:ad:2b:b6:dc:66:6e:2c:0c:2a:22:07: 19:79:50:1b:07:6e:bf:43:b3:29:2f:23:81:fb:a4:56:9e:be: 6b:c9:b7:a1:4b:dd:4c:17:0f:f1:ec:16:a5:aa:81:f3:b0:1f: 45:41:d9:d6:26:7f:c4:26:6b:62:ad:31:e5:42:21:83:06:4f: 07:51:fa:12:44:9c:f7:d6:07:6c:d8:2e:1d:4b:b3:76:24:b2: e5:d3:d3:cc:e7:89:e2:47:9c:96:62:44:17:09:28:5f:c7:d9: cd:be:cb:a2:0d:48:4d:b1:08:ba:43:f9:43:68:00:1e:5e:6f: 55:1c:7d:4d:a3:d2:3f:cf:f8:f6:12:cb:6d:b9:bc:98:88:c7: 01:af:2a:c8:e0:b5:62:8d:d7:24:73:7b:be:86:42:3d:54:85: 59:7b:3f:ed:14:3b:c4:14:30:69:b1:da:d7:f4:a8:07:19:cc: 16:16:03:08:60:eb:ce:2d:79:54:9a:d2:ee:2f:60:46:9f:4f: 38:75:dd:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmJtntqwbKdaUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OGNjZTliODctOTI5Ni00OTNhLWIzMmMtMjZkZmRmMmRkZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cBCq5gVBl1dVQeG349fCUCRVwsbe3JTJJt2 MfC2B6YAPd32oPyhkYRL4lNOR21k0UgKxkTbm8JzZEABAGidaqFdpylromuRuLOa B+MPFNZTZ7KCc/sO+KLGcXAgwidgIE/xgJ8E1dv5d2YAqwQXZXjIH7RuyRuhAZ6q VBgSCjksVqfRy2tiNBNDxu9ur97iftizRhatSDkPEvVBLvpC4Rwfolbt5+ow2BCG FzDKxh+hA4gNsCOzzFOQayfAkAdMwgeTep8s44TgipVlcIGzXrxfMZrpYWJYoi2d 36Krn9gKCeQhJ6AA85EIREpJKVkg/y/NgFr1rbRKxZyMXZKZWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESfKqmveRtY0Xr1fLF1q5YZHIG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzUyMmE0NGItOTgzNC0z YmEzLWJmMzgtNzc2MzQ4MTlkYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIKY0vhj+YQyb4CzmRfLXCqyvLRuPhoT/Ope+0fI3XGJ6f2LzJyHEDf kbdfkhaKBvWv7iwe88KKtEvjv6StK7bcZm4sDCoiBxl5UBsHbr9DsykvI4H7pFae vmvJt6FL3UwXD/HsFqWqgfOwH0VB2dYmf8Qma2KtMeVCIYMGTwdR+hJEnPfWB2zY Lh1Ls3YksuXT08znieJHnJZiRBcJKF/H2c2+y6INSE2xCLpD+UNoAB5eb1UcfU2j 0j/P+PYSy225vJiIxwGvKsjgtWKN1yRze76GQj1UhVl7P+0UO8QUMGmx2tf0qAcZ zBYWAwhg684teVSa0u4vYEafTzh13YU= -----END CERTIFICATE-----Generated at Thu Mar 26 23:06:48 2026 by rpki-client