$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa File: 4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa (raw, json) Hash identifier: Qncu60GtTyKhxwNFgwSpfjT4YOlGcXwInpXraOxCSvA= Subject key identifier: 94:F4:4F:8C:68:11:89:9D:B6:04:35:49:A8:4C:CB:3B:32:89:35:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D1F4A562CEA723A7E50A76000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 104.198.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:56:2c:ea:72:3a:7e:50:a7:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=e85f88a9-503b-41ea-bc0a-98fdd0f1d612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0c:6b:24:40:26:5c:8f:fe:e6:d2:de:2c:ee: 0a:55:19:c8:e1:4e:6a:3b:c1:37:0d:51:b4:7a:9c: 94:7f:8b:3f:05:1f:42:a0:df:45:f6:c9:df:23:e9: 16:94:df:19:f9:fa:fd:4a:4c:12:d9:77:3a:5e:2e: e2:fc:79:3d:7a:bf:88:94:1a:f3:52:f2:dd:8c:cc: f9:00:55:6c:04:ca:12:83:3c:c0:fa:35:fc:09:af: 54:d5:64:25:f0:28:ea:80:68:80:15:3f:05:04:c0: 64:c2:88:0d:c9:d6:c1:1e:f9:42:f2:06:0b:ff:0a: fe:cb:db:76:84:d6:39:27:a6:2b:73:ab:84:53:5b: bf:ff:7c:dc:ea:86:39:fd:49:e8:e7:27:18:1c:db: 1c:f9:4b:28:2c:62:82:27:a6:5b:e2:5c:ec:26:89: 03:12:2a:3c:1e:bc:84:e5:ae:cd:f7:eb:39:ea:ce: 4d:69:28:82:fb:ce:b6:31:35:dd:89:c3:07:31:2d: d2:06:94:26:ea:79:0e:42:4d:d4:d6:c0:44:08:17: d6:5b:0b:79:84:77:24:a4:37:8b:1a:fb:7e:a1:f1: cf:d9:09:aa:b1:69:59:95:61:93:32:40:c1:01:e5: 43:af:96:de:11:09:9c:a3:63:de:17:a1:95:70:7b: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:4F:8C:68:11:89:9D:B6:04:35:49:A8:4C:CB:3B:32:89:35:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:be:d7:3a:49:ec:2b:3d:8b:fd:6f:3e:d4:0e:43:c6:cf:e6: 8b:62:53:a3:4c:fd:4a:5c:a4:96:7b:76:8f:6a:a6:b3:7c:cc: 36:ab:a1:89:3d:a6:57:c8:21:47:dd:99:77:52:f8:0a:2d:1c: 54:f5:10:f1:e5:3d:79:21:d0:bb:58:72:ff:b3:3c:0b:42:6a: ec:45:f3:d1:64:6d:60:5c:b6:90:43:aa:99:b5:94:79:f2:e8: 9f:64:24:36:bc:d1:f4:0d:82:d6:af:b4:b1:03:a9:f0:14:c4: ab:4b:c2:85:7e:8a:33:3a:8a:cf:ba:96:53:e1:c0:f7:32:60: 2a:07:1f:e3:94:0d:7a:b2:c2:ee:12:2e:43:4d:38:65:11:e2: ed:65:34:e9:3a:f5:94:fa:1b:bd:a3:78:b9:4f:4c:84:29:ed: 16:94:bc:78:14:f1:aa:26:7b:12:9e:20:26:70:3c:2c:e2:1b: d1:5c:ef:3e:56:b0:df:b8:70:43:5c:c4:fb:8a:2e:21:c0:5a: b9:72:66:ba:3f:c8:11:cc:41:f5:bd:3a:eb:b0:90:ba:13:81: 61:ed:27:de:c7:17:05:d9:83:db:90:2f:54:d6:d2:04:5b:3d: e4:02:e5:9a:64:0c:30:68:35:a6:c2:35:5c:bb:db:8d:4d:32: 86:86:22:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlYs6nI6flCnYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZTg1Zjg4YTktNTAzYi00MWVhLWJjMGEtOThmZGQwZjFkNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQxrJEAmXI/+5tLeLO4KVRnI4U5qO8E3DVG0 epyUf4s/BR9CoN9F9snfI+kWlN8Z+fr9SkwS2Xc6Xi7i/Hk9er+IlBrzUvLdjMz5 AFVsBMoSgzzA+jX8Ca9U1WQl8CjqgGiAFT8FBMBkwogNydbBHvlC8gYL/wr+y9t2 hNY5J6Yrc6uEU1u//3zc6oY5/Uno5ycYHNsc+UsoLGKCJ6Zb4lzsJokDEio8HryE 5a7N9+s56s5NaSiC+862MTXdicMHMS3SBpQm6nkOQk3U1sBECBfWWwt5hHckpDeL Gvt+ofHP2QmqsWlZlWGTMkDBAeVDr5beEQmco2PeF6GVcHu1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT0T4xoEYmdtgQ1SahMyzsyiTVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM5MWFlYTctMjU4Ny0z YjE2LWEyZWMtY2NiMmI1ZWUwMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa+1zpJ7Cs9i/1vPtQOQ8bP5otiU6NM/UpcpJZ7do9qprN8zDaroYk9 plfIIUfdmXdS+AotHFT1EPHlPXkh0LtYcv+zPAtCauxF89FkbWBctpBDqpm1lHny 6J9kJDa80fQNgtavtLEDqfAUxKtLwoV+ijM6is+6llPhwPcyYCoHH+OUDXqywu4S LkNNOGUR4u1lNOk69ZT6G72jeLlPTIQp7RaUvHgU8aomexKeICZwPCziG9Fc7z5W sN+4cENcxPuKLiHAWrlyZro/yBHMQfW9OuuwkLoTgWHtJ97HFwXZg9uQL1TW0gRb PeQC5ZpkDDBoNabCNVy7241NMoaGIoA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:27 2026 by rpki-client