$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa File: 5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa (raw, json) Hash identifier: MWBvneDiJqvaVqCwa2kn1tnyFKtL5kYTmWa9bTNNc64= Subject key identifier: 5B:DD:8E:49:BF:5A:C4:7A:27:09:47:A2:93:20:1B:51:34:79:AC:00 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6DAEEB98D3B05FA68380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.68.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6d:ae:eb:98:d3:b0:5f:a6:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=82ff900b-2313-4457-81bb-f3fb6f42b842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:33:16:dd:70:ae:0c:e8:b7:4b:02:98:69: 48:b0:ee:48:a0:99:cb:f5:7f:d8:32:93:e9:78:90: fa:d3:a6:d0:17:28:cd:bb:b5:a8:1e:44:82:e1:1a: ee:97:44:ce:41:03:c6:0f:2d:42:9e:08:4f:2e:86: 41:ec:3f:52:11:91:2d:5e:6d:76:ae:d4:f9:b1:df: 4b:6e:d6:fa:b3:9d:8e:df:e2:47:07:22:23:5b:5f: 02:b4:5d:fd:40:40:20:ab:98:1a:76:c4:96:9d:b1: fb:77:f5:4d:83:54:dd:16:c5:d5:e0:11:d0:30:c0: 72:f6:77:a5:34:d9:cb:e3:80:9e:7f:a3:82:49:99: 16:28:e0:8a:35:60:5c:ab:be:cc:8b:8e:6f:ca:0c: af:08:24:ab:81:8e:1d:0a:7f:a1:da:40:03:d5:a4: 58:bb:0d:c1:ae:d0:77:a9:77:22:f5:f0:57:9c:48: a0:86:45:b8:53:55:a5:86:a2:76:f6:56:51:04:06: 86:30:b4:bb:91:39:b8:97:40:46:25:51:bc:f3:3d: c1:bf:cc:ad:fe:2c:db:a2:c0:8d:59:af:47:d9:e3: 43:14:bc:8e:68:19:22:3d:40:2d:27:e4:c2:62:44: 68:19:9e:9a:0a:18:28:44:d8:15:78:dc:46:fc:c4: 33:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DD:8E:49:BF:5A:C4:7A:27:09:47:A2:93:20:1B:51:34:79:AC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d0:7a:96:a7:cf:6b:59:f5:a5:19:4d:a7:f8:9f:37:55:17: c1:ef:2f:4d:b5:d4:7f:e5:75:01:8c:f9:28:b1:24:98:29:8a: 8c:a7:62:06:2a:b8:2f:cf:3c:22:71:b0:1a:bb:d3:63:23:26: 05:c9:80:56:e2:5c:a6:b4:74:44:ae:e7:f9:86:4a:ed:da:55: b5:ed:82:75:b1:63:4d:3d:16:58:87:88:dc:1d:4b:6f:ce:36: ba:2e:15:61:f3:b9:e3:06:04:7f:b6:71:d6:0e:a9:5b:b5:58: 45:eb:e2:4b:cf:0b:ca:06:7e:0c:77:e2:03:9b:35:aa:a5:5c: d1:bb:69:5f:6c:68:60:1c:0c:98:48:0b:87:d5:04:91:ea:f2: 56:14:77:93:a9:ab:b6:de:58:dd:40:68:93:a8:c0:3a:87:d7: 36:fe:a1:6f:c7:c1:52:4a:d1:de:a5:35:a5:78:75:20:e3:a5: 0f:d6:ec:a5:b6:1d:0a:fb:cd:09:73:13:85:f3:68:5d:04:c5: f2:79:d4:79:be:b0:01:a2:06:23:6e:74:02:03:a0:c9:4d:e6: 87:b2:70:a0:e7:79:7b:aa:22:d2:a2:40:d1:de:9b:3b:1a:a2: 94:df:e1:10:8e:b4:8f:df:23:b4:5d:f5:2e:f7:b2:31:22:14: 5b:ec:aa:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqm2u65jTsF+mg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODJmZjkwMGItMjMxMy00NDU3LTgxYmItZjNmYjZmNDJiODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49kzFt1wrgzot0sCmGlIsO5IoJnL9X/YMpPp eJD606bQFyjNu7WoHkSC4Rrul0TOQQPGDy1CnghPLoZB7D9SEZEtXm12rtT5sd9L btb6s52O3+JHByIjW18CtF39QEAgq5gadsSWnbH7d/VNg1TdFsXV4BHQMMBy9nel NNnL44Cef6OCSZkWKOCKNWBcq77Mi45vygyvCCSrgY4dCn+h2kAD1aRYuw3BrtB3 qXci9fBXnEighkW4U1WlhqJ29lZRBAaGMLS7kTm4l0BGJVG88z3Bv8yt/izbosCN Wa9H2eNDFLyOaBkiPUAtJ+TCYkRoGZ6aChgoRNgVeNxG/MQzjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvdjkm/WsR6JwlHopMgG1E0eawAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmYTk3MGItYTUwZS0z Yjk4LWFmMzYtN2E0ODQ1NGNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrQepanz2tZ9aUZTaf4nzdVF8HvL0211H/ldQGM+SixJJgpioynYgYq uC/PPCJxsBq702MjJgXJgFbiXKa0dESu5/mGSu3aVbXtgnWxY009FliHiNwdS2/O NrouFWHzueMGBH+2cdYOqVu1WEXr4kvPC8oGfgx34gObNaqlXNG7aV9saGAcDJhI C4fVBJHq8lYUd5Opq7beWN1AaJOowDqH1zb+oW/HwVJK0d6lNaV4dSDjpQ/W7KW2 HQr7zQlzE4XzaF0ExfJ51Hm+sAGiBiNudAIDoMlN5oeycKDneXuqItKiQNHemzsa opTf4RCOtI/fI7Rd9S73sjEiFFvsqiY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:16 2026 by rpki-client