$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa File: 4215d1e7-5573-3392-ba71-d93fac0fd31a.roa (raw, json) Hash identifier: FXrcIuk/WECylLNQh6E/ADH2f24LEvNLter5AiVRiwY= Subject key identifier: 16:63:EF:AA:18:E6:B7:BC:F3:18:1C:C6:62:0A:79:93:D2:CD:76:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA449BC74DA6CD1A7DAB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.147.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:44:9b:c7:4d:a6:cd:1a:7d:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=fab9a8d7-03f5-4f53-a503-adf67780aee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:b5:e1:c0:40:ef:f6:ad:09:40:c9:84:4a: 3b:62:58:78:a3:0b:bc:94:d6:81:1a:c1:95:08:49: 5b:53:e1:5e:e4:87:c2:e4:7c:db:c4:8e:28:7b:dd: 30:77:1f:62:56:fd:94:29:86:c3:59:48:6e:34:1d: c2:d8:74:63:35:fb:d1:55:a5:6c:ac:9e:7d:3e:8d: df:a1:b8:cf:27:32:e4:59:09:06:44:63:cb:2f:e0: af:bb:e2:37:36:7a:b2:db:84:96:b5:c5:51:c7:ed: c7:f2:d9:c8:2f:a5:69:1e:51:f5:19:87:f8:0a:73: 64:33:76:ca:15:f1:dd:c7:29:e4:0e:c5:42:35:2a: b5:7c:c1:74:7a:4b:62:8d:5a:13:75:7a:fa:8c:5b: 2c:f3:e5:0f:81:6f:45:f8:d1:45:af:58:01:41:11: 54:07:a2:b5:97:7d:aa:c4:be:bf:90:42:63:9c:fb: 46:d6:af:44:ed:85:b6:b1:b9:cf:70:3f:a7:96:46: 6f:6a:0f:24:cc:f9:0c:2e:c9:76:ce:4b:10:8a:b9: 69:9c:e3:7e:a1:58:52:74:14:28:e3:af:b6:5d:b4: d6:55:09:bc:cb:28:cc:f4:b0:a5:e3:c3:49:98:93: a4:78:83:17:ad:da:68:b7:37:d9:bd:c0:48:c3:30: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:63:EF:AA:18:E6:B7:BC:F3:18:1C:C6:62:0A:79:93:D2:CD:76:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f8:c6:a9:f6:a1:17:2c:cc:7a:e0:94:63:77:75:b9:84:d6: 1b:d1:67:6e:7a:74:d0:eb:12:25:b9:e2:0b:57:8b:cd:38:55: b4:0d:db:91:56:7f:16:9a:5b:55:f1:59:7f:e7:eb:e0:8b:3a: 5c:46:74:35:e9:96:e6:b3:0b:d2:ab:7e:5d:88:97:08:de:a0: b3:ec:54:fe:b0:e7:3f:53:c7:18:33:42:75:1f:60:8d:49:f0: 08:b8:de:70:85:78:0b:85:3f:c7:4a:b2:a3:02:1e:c5:cf:bb: 37:a0:c3:0b:71:d2:82:81:cf:cc:de:30:78:6e:a6:fc:8b:c8: 31:43:a4:6c:16:0f:77:c1:0c:71:bf:e8:80:2d:41:04:38:d0: 16:73:6d:d5:02:bc:07:1c:c2:0b:5a:27:ce:8f:fa:65:9b:de: da:6f:4e:57:d1:f6:be:28:e2:74:22:90:35:91:c2:0e:5c:b5: 8a:d1:dc:f0:58:6e:f1:5a:04:e2:93:2a:c0:40:e9:27:25:68: 3a:e1:57:e2:02:33:5d:27:cf:63:05:06:55:96:05:bd:2d:13: 8a:cb:9c:3f:87:89:d6:c0:93:1c:5b:9a:16:3a:70:97:61:68: 48:7e:c1:eb:00:99:27:ee:08:38:f9:6d:0d:0a:64:59:ea:60: 20:1b:61:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkSbx02mzRp9q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmFiOWE4ZDctMDNmNS00ZjUzLWE1MDMtYWRmNjc3ODBhZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTa14cBA7/atCUDJhEo7Ylh4owu8lNaBGsGV CElbU+Fe5IfC5HzbxI4oe90wdx9iVv2UKYbDWUhuNB3C2HRjNfvRVaVsrJ59Po3f objPJzLkWQkGRGPLL+Cvu+I3Nnqy24SWtcVRx+3H8tnIL6VpHlH1GYf4CnNkM3bK FfHdxynkDsVCNSq1fMF0ektijVoTdXr6jFss8+UPgW9F+NFFr1gBQRFUB6K1l32q xL6/kEJjnPtG1q9E7YW2sbnPcD+nlkZvag8kzPkMLsl2zksQirlpnON+oVhSdBQo 46+2XbTWVQm8yyjM9LCl48NJmJOkeIMXrdpotzfZvcBIwzCSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZj76oY5re88xgcxmIKeZPSzXasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDIxNWQxZTctNTU3My0z MzkyLWJhNzEtZDkzZmFjMGZkMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj4xqn2oRcszHrglGN3dbmE1hvRZ256dNDrEiW54gtXi804VbQN25FW fxaaW1XxWX/n6+CLOlxGdDXpluazC9Krfl2IlwjeoLPsVP6w5z9TxxgzQnUfYI1J 8Ai43nCFeAuFP8dKsqMCHsXPuzegwwtx0oKBz8zeMHhupvyLyDFDpGwWD3fBDHG/ 6IAtQQQ40BZzbdUCvAccwgtaJ86P+mWb3tpvTlfR9r4o4nQikDWRwg5ctYrR3PBY bvFaBOKTKsBA6SclaDrhV+ICM10nz2MFBlWWBb0tE4rLnD+HidbAkxxbmhY6cJdh aEh+wesAmSfuCDj5bQ0KZFnqYCAbYbo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:14 2026 by rpki-client