$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa File: 398fb419-e600-3f6a-a695-bd52e5c106cb.roa (raw, json) Hash identifier: gYgpbeKrSmsK2afDAQ+zzMRRj/GkLWKgQ1TNFRNkS3A= Subject key identifier: 5A:3B:8D:55:62:E5:F4:F5:FE:7C:D0:4E:4E:41:31:58:03:F2:C4:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0EF0B0C786F150E4786C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.122.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ef:0b:0c:78:6f:15:0e:47:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=def7037b-e3f6-46ff-9dae-c73cc9c6efdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:9b:c3:40:2c:55:d4:b8:41:8e:9f:51:8f: 42:e2:cb:b5:65:53:50:08:6b:c5:39:c0:5e:69:f0: d1:0f:bc:11:45:f2:54:e8:f0:4e:77:de:37:20:2a: 54:ce:4b:fa:1f:c4:c7:f0:ec:08:0f:0d:e4:8a:a5: 29:61:04:22:6e:9b:11:09:42:20:f1:ad:24:e3:fb: 15:4f:c1:4c:c7:ab:52:b5:f3:40:36:6e:52:09:4e: 25:5c:26:f5:90:3c:d8:fe:aa:0a:51:d8:5d:f8:6e: 50:67:30:aa:a4:1f:d9:75:bd:46:45:dc:cc:d9:b4: f8:db:76:d0:5e:53:26:47:ac:b7:90:35:5c:6e:43: 6a:a5:9c:70:ab:26:74:2a:ca:7b:c9:72:0c:1e:be: aa:ea:ea:38:a8:ab:f8:5c:0b:47:6a:37:93:43:85: 77:6a:72:b9:07:04:34:9a:6a:0b:7d:28:ba:e2:59: e4:eb:4e:17:0c:39:6f:cd:de:43:0b:f3:cf:f1:64: 61:d7:71:5b:07:db:71:35:df:da:25:f1:eb:c2:a4: dd:f0:a1:3d:4b:95:0e:f0:80:ac:a8:94:79:db:c4: 5d:37:d3:76:72:d5:fe:5a:b3:56:7a:9d:62:f1:d5: 5b:3b:1b:0f:db:45:a0:53:fc:37:12:f0:38:b1:de: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3B:8D:55:62:E5:F4:F5:FE:7C:D0:4E:4E:41:31:58:03:F2:C4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:82:d3:32:61:9d:76:ac:ef:df:76:d7:d3:96:01:84:0a:15: c7:d6:94:30:63:68:5b:c6:3d:9c:fd:6a:45:ec:1e:e3:3e:10: 43:41:20:18:d9:f2:f7:ed:ee:01:c5:78:17:ab:b2:95:e6:a1: 32:98:44:1e:e6:ac:d9:91:3f:42:29:a5:d6:04:17:64:90:ae: 2b:c2:6f:9e:85:62:73:b8:a0:9d:e5:e5:c5:cf:b2:3c:54:02: 19:b8:71:87:f3:32:ab:9e:42:28:53:40:e6:89:f5:d6:42:f8: 24:a5:f0:3f:0c:7c:3a:91:b2:d8:84:39:10:de:6c:f7:a1:cc: e2:74:ce:e0:1a:07:4d:3d:80:21:1f:3a:96:8d:e5:ff:3a:71: ee:10:a8:f9:e5:0c:ba:46:9a:d7:2c:ac:b6:fd:26:27:d0:a5: 5e:8f:e2:81:a7:e6:85:ec:f9:98:02:94:95:88:df:4e:50:c4: 00:8a:fc:ef:ce:df:27:20:2c:29:5f:1f:2c:2b:4e:ab:63:ec: c8:8b:73:59:11:c7:8d:59:b9:22:cd:9a:a5:97:f2:e1:68:43: e3:15:ef:2e:a0:3f:5c:e4:64:81:57:94:b5:8a:d2:87:a5:14: 5b:69:05:98:52:67:6e:a6:90:1a:df:20:19:bb:bb:17:0c:e6: a7:a7:08:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O8LDHhvFQ5HhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGVmNzAzN2ItZTNmNi00NmZmLTlkYWUtYzczY2M5YzZlZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wqbw0AsVdS4QY6fUY9C4su1ZVNQCGvFOcBe afDRD7wRRfJU6PBOd943ICpUzkv6H8TH8OwIDw3kiqUpYQQibpsRCUIg8a0k4/sV T8FMx6tStfNANm5SCU4lXCb1kDzY/qoKUdhd+G5QZzCqpB/Zdb1GRdzM2bT423bQ XlMmR6y3kDVcbkNqpZxwqyZ0Ksp7yXIMHr6q6uo4qKv4XAtHajeTQ4V3anK5BwQ0 mmoLfSi64lnk604XDDlvzd5DC/PP8WRh13FbB9txNd/aJfHrwqTd8KE9S5UO8ICs qJR528RdN9N2ctX+WrNWep1i8dVbOxsP20WgU/w3EvA4sd7ALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo7jVVi5fT1/nzQTk5BMVgD8sQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzk4ZmI0MTktZTYwMC0z ZjZhLWE2OTUtYmQ1MmU1YzEwNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOC0zJhnXas799219OWAYQKFcfWlDBjaFvGPZz9akXsHuM+EENBIBjZ 8vft7gHFeBerspXmoTKYRB7mrNmRP0IppdYEF2SQrivCb56FYnO4oJ3l5cXPsjxU Ahm4cYfzMqueQihTQOaJ9dZC+CSl8D8MfDqRstiEORDebPehzOJ0zuAaB009gCEf OpaN5f86ce4QqPnlDLpGmtcsrLb9JifQpV6P4oGn5oXs+ZgClJWI305QxACK/O/O 3ycgLClfHywrTqtj7MiLc1kRx41ZuSLNmqWX8uFoQ+MV7y6gP1zkZIFXlLWK0oel FFtpBZhSZ26mkBrfIBm7uxcM5qenCA8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:12 2026 by rpki-client