$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7560ecd3-a824-3e4e-a6ed-448dfc853874.roa File: 7560ecd3-a824-3e4e-a6ed-448dfc853874.roa (raw, json) Hash identifier: 5JPZ9z2S6LDwHFhWVMBqtocc8plLiXovzOfiXlFreo4= Subject key identifier: 19:73:80:20:34:E5:F6:C7:B8:F3:CB:5B:DB:48:FF:58:93:4A:9E:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D386A566DD325762E514C9480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7560ecd3-a824-3e4e-a6ed-448dfc853874.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 34.14.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:56:6d:d3:25:76:2e:51:4c:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=73848230-afd7-4113-b382-9ddaf945a5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:1d:35:2e:15:c1:b6:a1:66:d5:0e:86:33: 82:e0:b0:38:d4:39:59:04:8f:ab:1d:3a:2b:77:97: 5d:63:cb:34:42:18:84:19:9d:99:6d:04:23:8f:9c: 5d:fb:0a:e6:7e:67:e7:be:f8:e7:9d:96:64:69:65: 99:ca:9e:74:2c:a4:14:a2:c6:4f:e0:36:3e:16:e8: 83:66:af:a9:99:52:f1:d3:ae:96:d4:6a:6a:6c:80: 42:ff:97:e0:31:d7:87:32:61:18:49:83:a4:ff:fc: ab:ee:7a:15:ce:32:9c:0e:7a:ab:bf:f2:51:af:33: 0b:2b:f3:e4:ac:fb:7d:bb:60:28:02:73:2b:60:d1: e3:f0:53:2c:22:d8:50:bb:f7:eb:9f:aa:f6:4a:df: 6b:8e:4a:d1:ec:20:45:25:83:24:eb:b6:82:50:4b: 04:18:44:88:76:99:21:93:64:94:19:a9:e4:d3:3c: a2:6c:8c:08:b7:05:93:bc:08:fd:2c:dd:ab:be:11: 3e:2a:f5:ee:38:fc:0e:00:14:b8:a2:b5:74:c3:2e: fc:81:22:bf:bc:e8:91:b5:2d:a3:8f:e5:64:e9:f5: 0c:6c:61:70:9b:0a:1f:00:b5:d6:f0:40:cf:b5:8c: fd:af:0c:30:25:a4:55:ae:1e:09:00:d4:7e:89:db: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:73:80:20:34:E5:F6:C7:B8:F3:CB:5B:DB:48:FF:58:93:4A:9E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7560ecd3-a824-3e4e-a6ed-448dfc853874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.14.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:34:b7:2c:7b:19:22:4c:bf:cb:ed:7c:ed:46:b8:a3:4f:3d: c1:33:2b:e7:51:5e:52:0d:e7:45:ed:d6:f3:5b:36:b6:0d:a8: 2d:6d:a6:a7:f8:09:80:df:1b:04:ec:cd:1d:5e:e3:f2:0a:ed: 63:d0:3f:2e:79:c8:a0:6d:12:0a:d1:30:13:e0:57:e7:68:2a: 0c:e8:ea:3a:21:5c:ae:0d:81:d8:1d:1e:9c:14:e5:65:1c:79: 83:00:87:84:af:6f:57:60:21:cf:f8:17:69:5c:3f:72:f6:30: b8:3a:55:25:bd:2f:8a:cc:a3:46:86:81:93:be:ed:c1:54:21: 6e:ba:d9:a2:ed:d5:c9:a6:cb:39:5f:f3:7a:3c:99:ad:69:c3: 73:21:d6:23:f7:f5:71:c7:9e:7c:61:73:26:21:90:cb:4c:f1: 7a:c0:6f:9b:43:4f:ee:12:e0:36:b4:4f:ee:d1:c7:4e:d5:72: a6:5c:f3:f9:1c:fc:7e:b9:6b:ef:8d:ea:86:5d:a6:6a:0a:56: 74:d1:64:3f:b8:8f:69:e7:46:99:27:75:b7:f1:32:9c:3a:4f: 29:53:e8:7b:42:c9:1a:de:65:3f:b0:8f:8f:a5:d1:78:c3:7f: 60:2b:da:3d:49:a0:42:10:dd:78:80:4b:e4:22:a4:9a:4f:37: e0:c0:b5:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alZt0yV2LlFMlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzM4NDgyMzAtYWZkNy00MTEzLWIzODItOWRkYWY5NDVhNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEgdNS4VwbahZtUOhjOC4LA41DlZBI+rHTor d5ddY8s0QhiEGZ2ZbQQjj5xd+wrmfmfnvvjnnZZkaWWZyp50LKQUosZP4DY+FuiD Zq+pmVLx066W1GpqbIBC/5fgMdeHMmEYSYOk//yr7noVzjKcDnqrv/JRrzMLK/Pk rPt9u2AoAnMrYNHj8FMsIthQu/frn6r2St9rjkrR7CBFJYMk67aCUEsEGESIdpkh k2SUGank0zyibIwItwWTvAj9LN2rvhE+KvXuOPwOABS4orV0wy78gSK/vOiRtS2j j+Vk6fUMbGFwmwofALXW8EDPtYz9rwwwJaRVrh4JANR+idvguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlzgCA05fbHuPPLW9tI/1iTSp5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzU2MGVjZDMtYTgyNC0z ZTRlLWE2ZWQtNDQ4ZGZjODUzODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIg6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk0tyx7GSJMv8vtfO1GuKNPPcEzK+dRXlIN50Xt1vNbNrYNqC1tpqf4 CYDfGwTszR1e4/IK7WPQPy55yKBtEgrRMBPgV+doKgzo6johXK4NgdgdHpwU5WUc eYMAh4Svb1dgIc/4F2lcP3L2MLg6VSW9L4rMo0aGgZO+7cFUIW662aLt1cmmyzlf 83o8ma1pw3Mh1iP39XHHnnxhcyYhkMtM8XrAb5tDT+4S4Da0T+7Rx07VcqZc8/kc /H65a++N6oZdpmoKVnTRZD+4j2nnRpkndbfxMpw6TylT6HtCyRreZT+wj4+l0XjD f2Ar2j1JoEIQ3XiAS+QipJpPN+DAtUA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:25:00 2026 by rpki-client