$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa File: 4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa (raw, json) Hash identifier: NVU3En3qfKFQQ4F8Gj8gzIe2HP8UwGnteb7+kbYP5Ro= Subject key identifier: 78:96:B4:44:E8:24:A0:BF:2E:12:24:83:30:CA:EA:8B:F0:EC:C8:FC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D422F80AF3B1316D2527E6480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 19527 IP address blocks: 34.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:80:af:3b:13:16:d2:52:7e:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=61e90e1f-b957-4fe6-b2f9-dccba57086a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:cc:e0:18:1e:91:6b:78:42:eb:78:54:ca: bc:4a:85:e9:65:56:ca:c1:0d:0c:02:f3:78:49:ed: f1:4d:bd:66:f8:f5:dc:17:a0:a5:db:c1:55:eb:87: 92:8e:67:60:33:fe:80:5b:35:0a:82:52:a8:21:d8: 02:33:f5:6a:cc:76:9f:5b:89:f7:76:ac:27:85:06: 6a:32:4f:74:72:08:3c:45:2c:4b:ae:ec:81:c8:4a: 27:6d:29:fe:46:29:7b:a0:39:a5:44:0e:93:38:fc: af:a8:04:d4:b7:fc:11:e6:c9:61:84:7d:54:a9:c0: 3d:6f:bc:21:bf:f5:d7:ac:5e:13:9d:69:38:4c:b4: cf:a9:b5:6f:a8:e9:d9:79:06:ed:be:95:18:d1:52: dc:1c:93:43:99:5a:01:bd:26:f6:af:9b:e7:87:4c: 4a:32:0a:1b:5e:80:b1:4d:43:db:9f:b8:cd:46:68: 3c:0d:c9:de:3f:08:3a:65:30:ac:6c:43:68:40:30: 9f:2c:3e:12:b5:b8:6e:94:2a:75:68:6d:f0:3c:3f: 6c:1c:da:51:a5:02:08:ec:fb:90:a6:9c:ee:75:65: 1b:da:e9:7a:71:94:cf:b2:f9:f8:d3:d7:f9:e2:54: 5b:03:0b:14:43:4d:35:f4:32:93:ed:f8:9b:b5:61: 6b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:96:B4:44:E8:24:A0:BF:2E:12:24:83:30:CA:EA:8B:F0:EC:C8:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fdd7d61-65c1-3b65-8847-2632ed99fda9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5d:1d:47:63:9b:c0:6b:4f:27:57:36:9f:dc:9d:5e:b2:78: 0d:20:32:85:d2:e5:bf:e0:f7:26:2b:a4:12:d1:3c:ea:ee:3c: a9:1d:d6:db:8e:a2:34:35:a1:ec:f6:c2:8e:be:aa:2f:bc:19: f4:cf:66:7a:8e:b8:a5:74:dd:3f:67:f6:d5:f4:8d:c3:b7:99: da:92:a8:d2:0a:ee:8f:8b:2f:be:9b:06:ae:6c:44:f6:ed:a9: b6:ab:0c:58:e5:15:ee:b6:35:95:cc:b4:a9:c6:31:51:62:4a: 25:d8:1c:3f:a5:37:f9:45:c4:d1:a3:f0:a2:81:48:f3:60:57: 81:ae:3c:9d:2b:7d:5b:00:f4:1a:4b:79:49:65:29:cd:1e:78: 79:33:57:42:c0:24:46:16:05:f1:05:09:05:48:07:da:75:8c: ad:f3:88:7f:f6:43:fd:65:1c:8f:b5:bf:f8:a4:76:7a:e9:e4: 59:c4:fc:c8:e9:e3:62:2b:ae:7b:35:ca:4b:52:34:c6:bd:3f: 22:bd:15:c5:cc:58:a3:e4:02:69:2e:4c:e4:cf:b6:d9:8a:5b: 6f:cf:ca:f0:b6:ae:6d:4f:08:23:bb:b9:ae:7b:db:c8:d4:2c: f2:bf:f9:3f:e4:73:97:98:d1:3c:a0:b9:21:5e:f5:72:9d:e7: 5d:71:42:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4CvOxMW0lJ+ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NjFlOTBlMWYtYjk1Ny00ZmU2LWIyZjktZGNjYmE1NzA4NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP7M4BgekWt4Qut4VMq8SoXpZVbKwQ0MAvN4 Se3xTb1m+PXcF6Cl28FV64eSjmdgM/6AWzUKglKoIdgCM/VqzHafW4n3dqwnhQZq Mk90cgg8RSxLruyByEonbSn+Ril7oDmlRA6TOPyvqATUt/wR5slhhH1UqcA9b7wh v/XXrF4TnWk4TLTPqbVvqOnZeQbtvpUY0VLcHJNDmVoBvSb2r5vnh0xKMgobXoCx TUPbn7jNRmg8DcnePwg6ZTCsbENoQDCfLD4StbhulCp1aG3wPD9sHNpRpQII7PuQ ppzudWUb2ul6cZTPsvn409f54lRbAwsUQ0019DKT7fibtWFrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiWtEToJKC/LhIkgzDK6ovw7Mj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGZkZDdkNjEtNjVjMS0z YjY1LTg4NDctMjYzMmVkOTlmZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACddHUdjm8BrTydXNp/cnV6yeA0gMoXS5b/g9yYrpBLRPOruPKkd1tuO ojQ1oez2wo6+qi+8GfTPZnqOuKV03T9n9tX0jcO3mdqSqNIK7o+LL76bBq5sRPbt qbarDFjlFe62NZXMtKnGMVFiSiXYHD+lN/lFxNGj8KKBSPNgV4GuPJ0rfVsA9BpL eUllKc0eeHkzV0LAJEYWBfEFCQVIB9p1jK3ziH/2Q/1lHI+1v/ikdnrp5FnE/Mjp 42Irrns1yktSNMa9PyK9FcXMWKPkAmkuTOTPttmKW2/PyvC2rm1PCCO7ua5728jU LPK/+T/kc5eY0TyguSFe9XKd511xQi0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:29 2026 by rpki-client