$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86796759-6f2c-3a01-8b85-cc789074e62a.roa File: 86796759-6f2c-3a01-8b85-cc789074e62a.roa (raw, json) Hash identifier: gUhtwblz+cVd0HR1ET9pODuq7NSeDmh/ZlqvIMNd8ns= Subject key identifier: 8C:97:6E:97:83:A2:EF:F7:04:95:C0:C4:DF:F0:85:FF:6E:4F:EC:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA71BFC17340D0A1631700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86796759-6f2c-3a01-8b85-cc789074e62a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.70.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:71:bf:c1:73:40:d0:a1:63:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=b23a2f4c-c9f7-425b-9ad2-5a159338c8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:0e:c5:7b:01:5e:e1:34:0f:52:a5:94:1f: c9:80:3e:ca:b5:d7:1e:b1:2d:28:b2:4f:d6:45:77: 50:d9:85:f4:2f:68:7e:fc:70:61:1d:0a:5b:6a:d5: 60:19:74:d7:c8:cb:15:d9:6c:fe:f5:f3:fc:c7:8b: d7:4e:6d:88:00:9a:a6:b1:d8:87:3e:70:34:21:99: 0f:f9:49:12:04:35:b1:bc:8d:39:bd:27:cd:48:aa: 20:0a:3f:2b:0b:26:59:e5:ab:86:65:7c:3c:f6:a3: 3c:b7:bf:2b:8f:66:7c:5f:ab:8a:6a:af:82:ed:67: 79:93:f0:52:ec:51:15:f4:4a:1f:8a:9b:4a:b6:ef: f5:d0:dd:80:2b:55:37:75:ac:e7:44:d0:ca:a0:97: 68:ca:6c:1a:bc:a5:97:ea:bd:cf:93:51:07:8f:0e: 4c:fa:af:96:b0:4e:26:fe:0e:5f:82:d6:9c:f6:cc: 7e:24:63:56:9d:03:fa:ae:44:b8:2e:4b:9b:93:6d: 92:01:06:60:2e:02:21:ca:e9:5f:7a:be:61:1e:f5: 76:f5:b8:39:e5:8d:f6:ed:a3:2b:e1:aa:1e:66:61: 02:dd:b4:70:58:ce:95:b0:7f:d6:d1:59:dd:f3:f9: aa:87:e9:3a:63:96:e5:c0:00:65:ea:7d:49:ce:d8: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:6E:97:83:A2:EF:F7:04:95:C0:C4:DF:F0:85:FF:6E:4F:EC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86796759-6f2c-3a01-8b85-cc789074e62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a3:e3:70:7c:f4:c6:71:77:7c:ec:a1:1b:02:19:b7:ba:f6: fe:2c:b0:0e:b1:d2:ac:1b:c5:0f:84:c1:6c:b3:e3:da:9f:4c: 05:a3:1e:1a:aa:b7:19:0d:d5:e2:4a:28:be:22:47:be:67:15: bc:61:6f:41:c5:92:b9:c4:c8:f2:cf:1e:c2:b1:30:04:4a:6b: 9a:48:0f:74:e4:1d:22:02:ad:65:b9:bb:1c:bc:b4:5b:cf:f5: 94:41:a3:4b:71:26:58:55:7d:55:8c:a7:5e:f5:76:e3:b2:63: 99:2f:29:d8:46:57:a4:09:e1:32:12:c0:a0:3b:3e:64:e3:a1: cc:b3:fe:ff:79:0e:75:2a:f8:36:3f:e5:06:57:ac:7a:83:d9: 68:7a:1e:53:85:f5:15:d8:08:e9:0a:07:7e:f9:7c:a2:46:70: 03:27:fe:14:ab:65:4d:18:a2:c3:fa:59:a9:2b:4a:41:4f:6d: 9b:4e:c4:3a:06:ac:40:0a:3e:50:79:c7:7b:b2:cb:54:b9:7f: b9:35:0d:e5:67:30:96:d2:b9:46:e5:03:9d:c9:a5:06:9e:c6: aa:30:50:f7:4d:31:f0:a2:e8:5e:80:ea:d5:9b:66:7a:74:6a: a1:c1:55:66:50:de:81:f7:f0:8c:ff:91:56:47:59:7a:4f:5e: fa:29:64:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnG/wXNA0KFjFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YjIzYTJmNGMtYzlmNy00MjViLTlhZDItNWExNTkzMzhjOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXsOxXsBXuE0D1KllB/JgD7KtdcesS0osk/W RXdQ2YX0L2h+/HBhHQpbatVgGXTXyMsV2Wz+9fP8x4vXTm2IAJqmsdiHPnA0IZkP +UkSBDWxvI05vSfNSKogCj8rCyZZ5auGZXw89qM8t78rj2Z8X6uKaq+C7Wd5k/BS 7FEV9EofiptKtu/10N2AK1U3daznRNDKoJdoymwavKWX6r3Pk1EHjw5M+q+WsE4m /g5fgtac9sx+JGNWnQP6rkS4Lkubk22SAQZgLgIhyulfer5hHvV29bg55Y327aMr 4aoeZmEC3bRwWM6VsH/W0Vnd8/mqh+k6Y5blwABl6n1JztiwkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyXbpeDou/3BJXAxN/whf9uT+yEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODY3OTY3NTktNmYyYy0z YTAxLThiODUtY2M3ODkwNzRlNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6j43B89MZxd3zsoRsCGbe69v4ssA6x0qwbxQ+EwWyz49qfTAWjHhqq txkN1eJKKL4iR75nFbxhb0HFkrnEyPLPHsKxMARKa5pID3TkHSICrWW5uxy8tFvP 9ZRBo0txJlhVfVWMp171duOyY5kvKdhGV6QJ4TISwKA7PmTjocyz/v95DnUq+DY/ 5QZXrHqD2Wh6HlOF9RXYCOkKB375fKJGcAMn/hSrZU0YosP6WakrSkFPbZtOxDoG rEAKPlB5x3uyy1S5f7k1DeVnMJbSuUblA53JpQaexqowUPdNMfCi6F6A6tWbZnp0 aqHBVWZQ3oH38Iz/kVZHWXpPXvopZLs= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:52 2026 by rpki-client