$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbe13df-df8f-34d2-b195-1163c4ff6908.roa File: 3dbe13df-df8f-34d2-b195-1163c4ff6908.roa (raw, json) Hash identifier: WY1+2vZpgTnm45e79RNlhidjfdFr6dE/tauaNSYKKl8= Subject key identifier: 60:B0:FA:84:D4:29:80:D9:15:59:21:46:38:61:44:31:E9:DE:E0:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA95A11B90DB2675FA8180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbe13df-df8f-34d2-b195-1163c4ff6908.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.138.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:95:a1:1b:90:db:26:75:fa:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ccdf0e22-223f-4735-82dd-827531f95cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:58:b5:57:16:0b:17:e9:c8:4f:9c:bc:b0:77: bb:1a:f1:8a:f5:e4:7c:a1:93:04:75:50:85:5f:61: e5:f9:f4:ff:89:ad:7b:a8:62:67:41:b5:72:cd:a6: b6:b4:c0:a5:50:26:f4:67:db:b3:ef:b3:f2:1c:b6: f3:40:40:d0:c6:fe:4e:0b:bb:b8:c8:b0:e8:3f:04: 96:6b:da:64:d8:5f:95:4f:40:9f:3f:a5:1f:49:a8: b3:f6:2e:f2:0a:23:1a:3b:8e:03:5d:2e:52:e3:15: ae:c7:f4:13:af:36:51:a3:b8:bd:22:93:a6:15:52: cd:1c:a0:91:85:8d:43:e6:c6:25:2e:bd:45:af:e0: e6:f1:d4:a9:cc:a2:b4:0b:9d:e7:28:39:3a:fe:47: 2f:82:37:61:f8:7e:c3:5f:71:9f:7a:de:d9:02:a0: f5:a0:19:ab:03:49:68:9f:50:18:76:ca:bd:7a:fb: d4:33:1d:57:4a:d8:65:ff:ff:42:34:50:98:46:c9: 6b:aa:8d:e1:30:71:60:b8:4d:6b:19:6a:bb:fe:ca: 82:4e:1a:fe:b1:18:29:69:a8:71:ba:52:3c:f1:74: 02:35:b1:3a:28:a1:b4:59:f2:6f:ed:c7:65:d2:36: 00:42:0b:7b:71:13:c7:a4:85:7e:a1:da:dc:b3:68: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:FA:84:D4:29:80:D9:15:59:21:46:38:61:44:31:E9:DE:E0:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbe13df-df8f-34d2-b195-1163c4ff6908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:22:2a:36:22:ab:6c:53:7b:3e:50:5c:15:8d:73:94:ff:a8: 49:84:c7:c6:ac:3b:33:d1:00:68:cc:51:3b:f7:67:2b:fe:3a: b0:0f:d3:cf:b1:08:c1:ab:f9:4e:37:38:13:9b:85:18:5d:0b: ff:04:af:11:9a:2b:11:1e:10:e2:c4:3e:71:ae:dc:3c:6b:5c: aa:9b:c0:b9:d3:ce:c7:dc:04:e9:a7:be:14:f8:13:4a:f1:02: ad:c5:8a:c7:0b:6d:d7:51:b5:98:a3:be:8a:96:06:a7:85:5f: b6:00:2f:ef:2c:8c:44:11:b6:91:31:a8:be:71:00:13:64:6d: 39:3e:f5:c7:49:f1:53:88:6f:1e:17:31:c4:b9:97:a5:18:4a: d7:c4:02:ca:ca:18:fc:3f:70:b2:97:e5:a9:8a:2a:ee:e4:77: c5:e7:d6:2d:ad:77:d5:5b:1c:a9:7e:fe:70:38:64:00:1f:75: 8d:52:e0:5c:2c:73:dd:89:47:16:ec:0e:04:2c:5d:ca:5e:30: 24:90:7d:ba:5c:a2:16:77:c0:48:11:72:69:c7:6d:5f:fd:45: d0:f0:cb:d5:d0:65:b2:c4:2c:41:bb:af:68:bf:b8:30:5b:1c: 91:a6:9a:92:59:79:27:87:0c:20:bb:97:a6:04:e3:8b:60:c6: be:43:87:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpWhG5DbJnX6gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2NkZjBlMjItMjIzZi00NzM1LTgyZGQtODI3NTMxZjk1Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vi1VxYLF+nIT5y8sHe7GvGK9eR8oZMEdVCF X2Hl+fT/ia17qGJnQbVyzaa2tMClUCb0Z9uz77PyHLbzQEDQxv5OC7u4yLDoPwSW a9pk2F+VT0CfP6UfSaiz9i7yCiMaO44DXS5S4xWux/QTrzZRo7i9IpOmFVLNHKCR hY1D5sYlLr1Fr+Dm8dSpzKK0C53nKDk6/kcvgjdh+H7DX3Gfet7ZAqD1oBmrA0lo n1AYdsq9evvUMx1XSthl//9CNFCYRslrqo3hMHFguE1rGWq7/sqCThr+sRgpaahx ulI88XQCNbE6KKG0WfJv7cdl0jYAQgt7cRPHpIV+odrcs2j6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCw+oTUKYDZFVkhRjhhRDHp3uBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2RiZTEzZGYtZGY4Zi0z NGQyLWIxOTUtMTE2M2M0ZmY2OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgiKjYiq2xTez5QXBWNc5T/qEmEx8asOzPRAGjMUTv3Zyv+OrAP08+x CMGr+U43OBObhRhdC/8ErxGaKxEeEOLEPnGu3DxrXKqbwLnTzsfcBOmnvhT4E0rx Aq3FiscLbddRtZijvoqWBqeFX7YAL+8sjEQRtpExqL5xABNkbTk+9cdJ8VOIbx4X McS5l6UYStfEAsrKGPw/cLKX5amKKu7kd8Xn1i2td9VbHKl+/nA4ZAAfdY1S4Fws c92JRxbsDgQsXcpeMCSQfbpcohZ3wEgRcmnHbV/9RdDwy9XQZbLELEG7r2i/uDBb HJGmmpJZeSeHDCC7l6YE44tgxr5Dh/E= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:02 2026 by rpki-client