$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa File: 7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa (raw, json) Hash identifier: a6LDVRy9q1AtSgQvPreey8s9Pyl/lbc3gSUwRGx7VXk= Subject key identifier: D6:3D:86:B9:1C:E6:95:3B:E7:28:94:5D:F3:D5:18:01:83:F6:08:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E041CCAC5495705913A200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.121.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:41:cc:ac:54:95:70:59:13:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5fee4536-6c52-4d64-9375-a2dbf457205f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:2f:f8:d1:82:bc:5d:29:f3:de:37:a7:4e: de:99:04:c4:80:e0:bc:f8:26:6d:0e:80:e2:1f:18: 11:a1:24:98:27:95:42:9a:f2:74:af:3a:7f:a1:c0: 9d:f9:97:1e:fd:95:2d:07:ad:52:67:f2:ad:ad:ea: ef:42:9c:6b:60:d1:2c:05:f9:95:fe:15:88:85:39: f5:fa:90:60:fe:e2:68:45:b2:ea:b5:9c:16:64:bb: 14:cb:ca:54:cb:3d:38:92:1e:35:cc:be:3e:e0:11: 8f:99:0d:1b:7c:ae:6e:88:40:ed:f3:4e:f1:08:92: a2:36:ef:99:1b:cc:c3:bf:8b:0d:47:e4:e2:88:f1: f1:01:a6:de:0c:c3:e6:7c:b7:38:f1:0e:38:dc:3e: bf:fb:69:dc:22:1b:68:8e:1a:93:56:fc:86:8d:81: 40:d6:97:e3:83:8a:6a:dc:89:ec:05:d4:f4:33:27: d6:4d:14:d0:4b:7e:46:e1:9f:b5:73:b2:45:61:f9: 6f:03:f2:c8:38:42:a0:5d:e4:46:1a:30:1a:eb:1b: f1:17:0c:b4:67:8f:fa:ec:f9:05:c8:24:d5:46:80: 40:86:16:1a:a6:28:71:e0:54:a6:36:46:0a:18:74: af:2f:ef:bc:ab:42:70:bb:c0:ee:9b:09:d2:17:e1: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3D:86:B9:1C:E6:95:3B:E7:28:94:5D:F3:D5:18:01:83:F6:08:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:36:e6:be:0e:6b:6f:b9:d5:d8:45:2c:0a:80:bb:76:27:ad: 3d:11:44:8e:4b:b5:31:99:4c:5e:11:50:e8:5a:6c:7c:06:e4: cd:82:90:e4:ab:c8:70:f1:8d:04:d7:8c:ca:aa:ea:e9:de:bf: 87:c7:f6:6a:59:b7:ae:9c:0e:7e:ae:0b:49:64:7c:b7:89:9a: ef:4a:b3:ab:00:90:c4:cf:86:6c:f3:6c:e1:aa:e2:f3:1f:5f: 52:ed:de:39:2d:c9:a8:df:e1:c0:7a:f1:45:01:65:ee:95:e5: f0:fe:e9:d9:20:ec:97:ff:46:03:5d:36:6d:18:3a:77:fb:a7: b4:75:ce:c9:9c:3c:6e:dc:6d:df:bc:4e:d4:7c:e1:68:10:9a: b1:af:68:db:47:be:e2:ee:b3:63:ab:4e:6c:46:5a:d9:39:5f: 38:a0:73:54:ff:b2:da:82:36:0e:1b:e0:ed:9e:ef:f9:03:18: 7e:a6:66:4a:96:d5:ff:59:9d:a4:dc:3f:5b:8d:73:f4:a4:3b: 77:41:51:c1:fa:74:79:2f:ef:b2:21:df:40:36:77:de:8d:e8: f8:4f:23:af:36:d7:01:9f:28:c8:34:1a:4d:03:e5:17:0e:a2: 40:6d:85:a3:a5:7f:e0:59:63:97:29:08:f7:53:12:7f:25:68: 7e:a8:f3:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EHMrFSVcFkTogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWZlZTQ1MzYtNmM1Mi00ZDY0LTkzNzUtYTJkYmY0NTcyMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+8v+NGCvF0p8943p07emQTEgOC8+CZtDoDi HxgRoSSYJ5VCmvJ0rzp/ocCd+Zce/ZUtB61SZ/KtrervQpxrYNEsBfmV/hWIhTn1 +pBg/uJoRbLqtZwWZLsUy8pUyz04kh41zL4+4BGPmQ0bfK5uiEDt807xCJKiNu+Z G8zDv4sNR+TiiPHxAabeDMPmfLc48Q443D6/+2ncIhtojhqTVvyGjYFA1pfjg4pq 3InsBdT0MyfWTRTQS35G4Z+1c7JFYflvA/LIOEKgXeRGGjAa6xvxFwy0Z4/67PkF yCTVRoBAhhYapihx4FSmNkYKGHSvL++8q0Jwu8DumwnSF+FDIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY9hrkc5pU75yiUXfPVGAGD9ghgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2Y4OGQyZDgtMWQ4MS0z MmMxLTk0ZDAtOTUwNjJiN2M1YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA25r4Oa2+51dhFLAqAu3YnrT0RRI5LtTGZTF4RUOhabHwG5M2CkOSr yHDxjQTXjMqq6unev4fH9mpZt66cDn6uC0lkfLeJmu9Ks6sAkMTPhmzzbOGq4vMf X1Lt3jktyajf4cB68UUBZe6V5fD+6dkg7Jf/RgNdNm0YOnf7p7R1zsmcPG7cbd+8 TtR84WgQmrGvaNtHvuLus2OrTmxGWtk5Xzigc1T/stqCNg4b4O2e7/kDGH6mZkqW 1f9ZnaTcP1uNc/SkO3dBUcH6dHkv77Ih30A2d96N6PhPI6821wGfKMg0Gk0D5RcO okBthaOlf+BZY5cpCPdTEn8laH6o870= -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:20 2026 by rpki-client