$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa File: 5d882b6f-6155-399f-a616-a5e871d1bf1a.roa (raw, json) Hash identifier: qTY2KyEuYfi8TDuz0NvOmjGupNHRAk+2oiff63oZyNs= Subject key identifier: F1:84:E6:23:7D:35:D7:B0:69:8B:B5:5E:20:FA:D5:8A:14:6C:65:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0F4AD0882AAE3A0CDE5A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.119.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f4:ad:08:82:aa:e3:a0:cd:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3468520f-4b38-41d6-9515-8a69d344e2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:81:f8:07:15:f8:65:b8:f0:a8:9a:51:80: 23:66:9d:07:e0:b4:1f:22:f0:eb:dc:f9:2c:94:5e: cd:f2:c9:58:de:00:d6:eb:87:84:06:6c:c2:36:ed: e5:50:ad:6a:cd:1d:a3:1f:fc:2a:f8:8a:de:25:d4: 2a:e3:e0:72:d6:7e:68:20:e2:9a:d8:6f:1f:87:64: 91:1d:09:5b:6a:f3:04:a8:1c:5c:0f:d3:44:e4:9d: f3:41:d1:97:01:a9:1c:50:ff:36:57:e5:c2:40:85: c8:8b:2b:f7:47:7e:82:bf:e4:cd:01:08:3b:84:11: 91:7b:c9:1a:c4:3e:20:b7:2a:c7:f2:03:bd:9e:ea: f8:6f:47:d8:ce:dd:4a:61:a9:49:84:15:ba:b8:63: fa:36:1c:ca:5a:61:99:76:ea:6e:c1:52:87:3a:d8: c5:71:b6:87:b3:0e:da:d9:d6:b4:51:1a:8a:cb:ce: 1d:b1:32:36:14:93:37:22:b6:79:14:c4:42:71:85: 16:32:17:8b:e1:da:38:58:d2:a3:bd:e1:ef:00:8b: 5d:a8:5e:1b:14:86:f8:cd:53:d7:41:86:0e:34:79: e5:7c:a6:c0:d3:97:cd:68:50:10:06:52:83:bb:4c: 44:0f:a3:9c:1d:d3:5e:d1:cb:48:97:2d:5e:5a:09: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:84:E6:23:7D:35:D7:B0:69:8B:B5:5E:20:FA:D5:8A:14:6C:65:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e9:6a:a9:19:81:e8:6f:f0:d2:88:11:e8:d7:62:bf:08:9b: 4c:61:04:00:f7:8b:c9:df:e6:25:f7:d8:94:7e:59:aa:f9:03: 8d:36:d5:ac:05:1a:ce:ab:47:27:cf:e7:8b:0b:a7:ec:70:7a: f5:00:5d:fc:28:2a:02:30:22:92:e8:f5:ad:fc:34:5b:d8:44: a2:74:83:68:3f:b7:1d:b3:a6:a8:d3:6d:03:73:d0:84:95:88: 99:24:7c:4c:bc:ed:03:a3:1c:01:06:de:7a:1d:ce:54:42:52: 4f:e6:98:cc:29:e6:47:92:86:15:1a:a9:35:7f:a5:cd:fc:0c: 03:b5:fd:2b:b0:90:0e:45:76:04:1c:5f:5e:f0:ca:54:ea:0d: fe:63:f8:e5:77:6a:78:9d:b8:a2:5e:df:bb:f5:74:60:ab:e6: 03:23:bb:09:c2:9f:9b:9f:06:55:9c:c2:59:7a:1b:a4:9c:34: bf:62:81:a4:f4:f8:b2:e6:f1:6e:f5:aa:65:d2:6c:5e:b9:26: 99:7a:37:66:9a:98:b2:47:47:49:67:7a:e9:91:f7:46:bc:3c: dd:8d:36:3b:c9:41:2e:9b:50:fb:99:45:36:e9:99:84:35:b7: f6:ea:3d:06:15:f0:67:28:f6:c6:05:ee:90:08:ec:1b:6f:8e: ff:72:31:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PStCIKq46DN5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzQ2ODUyMGYtNGIzOC00MWQ2LTk1MTUtOGE2OWQzNDRlMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0iB+AcV+GW48KiaUYAjZp0H4LQfIvDr3Pks lF7N8slY3gDW64eEBmzCNu3lUK1qzR2jH/wq+IreJdQq4+By1n5oIOKa2G8fh2SR HQlbavMEqBxcD9NE5J3zQdGXAakcUP82V+XCQIXIiyv3R36Cv+TNAQg7hBGRe8ka xD4gtyrH8gO9nur4b0fYzt1KYalJhBW6uGP6NhzKWmGZdupuwVKHOtjFcbaHsw7a 2da0URqKy84dsTI2FJM3IrZ5FMRCcYUWMheL4do4WNKjveHvAItdqF4bFIb4zVPX QYYONHnlfKbA05fNaFAQBlKDu0xED6OcHdNe0ctIly1eWgnwCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGE5iN9NdewaYu1XiD61YoUbGU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQ4ODJiNmYtNjE1NS0z OTlmLWE2MTYtYTVlODcxZDFiZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIncQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3paqkZgehv8NKIEejXYr8Im0xhBAD3i8nf5iX32JR+War5A4021awF Gs6rRyfP54sLp+xwevUAXfwoKgIwIpLo9a38NFvYRKJ0g2g/tx2zpqjTbQNz0ISV iJkkfEy87QOjHAEG3nodzlRCUk/mmMwp5keShhUaqTV/pc38DAO1/SuwkA5FdgQc X17wylTqDf5j+OV3aniduKJe37v1dGCr5gMjuwnCn5ufBlWcwll6G6ScNL9igaT0 +LLm8W71qmXSbF65Jpl6N2aamLJHR0lneumR90a8PN2NNjvJQS6bUPuZRTbpmYQ1 t/bqPQYV8Gco9sYF7pAI7Btvjv9yMZ4= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:06 2026 by rpki-client