$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa File: 8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa (raw, json) Hash identifier: IRTc5kuHT7S2kqPGC5Vr/EmgJ9WdNdFeOX52u9CDCY0= Subject key identifier: BD:81:F3:7D:E7:C3:10:B6:DB:74:EA:3D:D4:D1:92:2D:78:EF:CF:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D492A496696586621C1154920 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 34.158.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:49:66:96:58:66:21:c1:15:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=f8aa7036-eff5-4b2e-8da2-ff2dafa2a4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:2d:52:84:35:95:22:bd:b4:55:af:45:04: 38:22:97:93:72:2b:7d:b9:cd:47:df:62:02:1b:f8: 54:a0:49:5e:eb:21:a4:47:73:f9:3f:58:98:10:4d: 9f:8a:2f:48:47:ac:49:b8:50:25:f5:17:37:b9:06: 92:eb:88:de:f5:5c:0f:45:69:4c:51:37:58:b9:c6: dc:84:bb:70:a9:8e:c1:a0:17:d8:f0:40:ab:75:2c: e0:2d:bc:67:e8:fc:58:40:80:9e:55:9b:35:ff:24: f8:51:e6:25:ad:6d:0b:c0:60:9c:7e:7e:0e:ad:33: 3a:42:af:bc:a9:d2:88:07:38:42:24:ad:8a:2b:67: 75:38:0d:a6:05:d5:71:49:9e:06:fb:b9:de:37:61: 3d:74:45:7f:5f:5e:8d:37:f4:39:30:a5:ec:45:63: d5:eb:5f:25:34:56:b2:a6:60:0f:e1:10:21:ba:17: 7c:6f:d8:e1:7f:f2:b9:f3:28:9c:cf:88:f0:99:27: 80:4b:a5:bd:b9:fa:68:2e:98:54:6c:35:26:49:13: e8:be:f0:82:fb:89:db:7b:64:e3:cd:b9:9f:3a:e2: e2:a9:77:1d:64:38:83:dc:e6:57:06:d2:ea:a3:8f: 42:b2:d3:f7:a3:4f:99:7c:f2:16:d5:79:d3:0a:83: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:F3:7D:E7:C3:10:B6:DB:74:EA:3D:D4:D1:92:2D:78:EF:CF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1e:4e:68:06:b6:da:30:6d:dc:74:ee:b2:19:f5:31:d1:36: 9c:a4:8b:cf:54:a7:ab:dd:b1:fd:cf:40:6d:dd:25:50:19:0e: 72:64:e8:af:b0:cc:0e:45:fb:a5:60:e9:90:1b:ff:53:d9:ee: 6a:d3:85:51:38:76:fd:0c:95:c5:f2:7c:5d:5a:fc:8f:40:36: 4a:1b:09:60:3e:9c:4c:f8:95:47:9c:1e:a2:69:9b:7e:fb:dc: e0:8c:3d:94:0d:62:9e:f9:de:38:96:f1:5b:da:32:2b:40:ed: 6e:01:8e:49:43:94:5d:cb:44:af:fb:3a:51:78:f5:b8:2b:2b: bd:d8:4b:67:af:24:86:68:23:e2:23:ab:aa:88:2d:2e:43:73: b8:dd:b2:7f:d4:cc:0b:d2:be:da:aa:d6:ae:cf:41:2f:b8:8e: d8:45:86:49:04:1e:1f:d4:a1:43:71:25:8e:ee:b3:ef:ae:0a: 39:72:b0:0a:6b:b0:13:03:f1:c0:f5:7d:18:e2:2e:66:e2:4d: 1d:50:96:34:29:42:c1:ce:f0:dc:37:47:30:0c:84:00:d0:39: 26:44:58:77:ed:8b:ae:af:40:b7:98:af:ae:84:84:87:88:8b: 59:80:29:78:f0:d4:64:b4:8f:8a:b1:b5:96:88:d1:73:86:d4: d3:28:92:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKklmllhmIcEVSSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjhhYTcwMzYtZWZmNS00YjJlLThkYTItZmYyZGFmYTJhNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeQtUoQ1lSK9tFWvRQQ4IpeTcit9uc1H32IC G/hUoEle6yGkR3P5P1iYEE2fii9IR6xJuFAl9Rc3uQaS64je9VwPRWlMUTdYucbc hLtwqY7BoBfY8ECrdSzgLbxn6PxYQICeVZs1/yT4UeYlrW0LwGCcfn4OrTM6Qq+8 qdKIBzhCJK2KK2d1OA2mBdVxSZ4G+7neN2E9dEV/X16NN/Q5MKXsRWPV618lNFay pmAP4RAhuhd8b9jhf/K58yicz4jwmSeAS6W9ufpoLphUbDUmSRPovvCC+4nbe2Tj zbmfOuLiqXcdZDiD3OZXBtLqo49CstP3o0+ZfPIW1XnTCoMMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2B833nwxC223TqPdTRki1478+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODI3MGE2OGItMmM0Yy0z MTU1LTkwMjMtNWExYmQ0YjJjMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIp4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIweTmgGttowbdx07rIZ9THRNpyki89Up6vdsf3PQG3dJVAZDnJk6K+w zA5F+6Vg6ZAb/1PZ7mrThVE4dv0MlcXyfF1a/I9ANkobCWA+nEz4lUecHqJpm377 3OCMPZQNYp753jiW8VvaMitA7W4BjklDlF3LRK/7OlF49bgrK73YS2evJIZoI+Ij q6qILS5Dc7jdsn/UzAvSvtqq1q7PQS+4jthFhkkEHh/UoUNxJY7us++uCjlysApr sBMD8cD1fRjiLmbiTR1QljQpQsHO8Nw3RzAMhADQOSZEWHfti66vQLeYr66EhIeI i1mAKXjw1GS0j4qxtZaI0XOG1NMokug= -----END CERTIFICATE-----Generated at Thu Mar 26 03:59:08 2026 by rpki-client