$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa File: 890641f9-0aae-3a09-b375-d5faed4942f2.roa (raw, json) Hash identifier: Gyk5vwJwSCXQvtY0dNs4xpLyeZWakIm6fwPdagwKCA0= Subject key identifier: 01:BD:DF:F9:89:0D:E4:A2:BC:BB:89:7E:04:74:C1:1F:2F:92:06:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3A21763122CCF4152880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.64.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3a:21:76:31:22:cc:f4:15:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a3b50bc5-6af3-4c47-ac8f-4c15a173b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:6d:8a:62:36:69:71:15:c9:29:e4:d5:09: e1:d2:6b:ae:ed:cb:cd:58:03:59:ea:11:9c:20:0b: 2a:24:13:52:04:a1:42:f5:f0:9a:07:f8:7e:7a:a2: 6e:b4:f8:bd:55:c5:fe:1b:90:9f:61:d8:97:6a:fb: 9f:b5:ae:12:00:9a:59:7d:01:59:b9:98:69:91:0a: 76:ea:1f:c0:e6:22:15:f5:93:15:ad:1e:04:76:d4: b7:1a:fb:3e:78:bd:4e:e0:65:a1:1a:f6:e7:bf:dd: ff:69:c5:45:9f:3a:f7:26:d6:71:8e:3b:34:93:a5: 27:9c:dc:be:3c:0d:fe:9f:7b:47:52:20:3d:28:73: 2e:7f:41:62:8b:cc:4c:a8:b5:54:e4:49:d9:68:94: 8f:6f:ee:fd:17:79:07:1b:8c:d2:14:2e:28:58:9c: fc:07:28:f9:39:f0:47:67:af:3f:4a:97:6c:99:ee: f0:0c:12:b5:33:c3:26:c8:41:0e:3f:e4:75:7e:32: b7:a7:14:d6:17:9e:cd:b1:6f:d2:d4:4b:e0:24:64: 9f:f0:7b:d9:93:15:46:11:96:dc:9f:8b:8a:ce:b2: 73:e9:e9:56:35:c3:6b:e8:19:f3:0f:5a:c1:4f:dd: 79:18:0d:3c:73:b8:88:79:53:64:fb:b2:db:46:9a: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:DF:F9:89:0D:E4:A2:BC:BB:89:7E:04:74:C1:1F:2F:92:06:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:3f:05:93:11:11:b3:e6:5c:48:7d:1c:bd:de:b3:93:81:c1: e8:df:ec:36:0c:ac:e3:d1:71:6e:21:8c:6e:bb:d4:16:32:28: a0:e7:e9:15:12:0d:6d:4c:5c:f1:11:6c:d8:20:e8:fc:ef:a4: aa:a5:93:b4:49:13:36:b6:2e:fe:30:a8:d8:39:e5:e9:31:2a: d8:e4:8e:60:ca:35:96:e7:41:57:53:9a:31:2a:cc:57:a7:be: 0d:28:ab:e0:6e:78:ab:73:ff:cb:5a:32:69:a6:5e:bb:0a:8f: 74:f6:23:6c:31:3a:dd:24:31:07:4e:37:5c:ab:18:30:b8:26: b3:8f:51:9e:80:02:57:da:79:c4:a1:e2:cb:7d:44:9b:b7:8d: 4f:c0:5d:88:d6:49:4f:cf:cd:e3:9b:dc:ba:7b:cd:59:bc:68: 21:6a:07:6c:c6:4a:c5:ce:88:2e:24:f2:d3:ca:f9:ea:1a:f3: 36:76:49:cb:91:6f:c6:af:ad:d6:ed:e6:32:10:16:4b:75:62: 40:75:a0:0d:8a:43:dc:45:44:cb:b2:a0:9a:60:f6:4d:a6:a4: 2c:9a:13:32:5b:70:39:15:0d:f9:b8:46:6b:cb:14:bd:21:33: 56:d9:db:cd:ad:ee:59:ce:16:9f:a3:d1:da:b8:a1:47:16:65: 01:09:a9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjohdjEizPQVKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YTNiNTBiYzUtNmFmMy00YzQ3LWFjOGYtNGMxNWExNzNiMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzVtimI2aXEVySnk1Qnh0muu7cvNWANZ6hGc IAsqJBNSBKFC9fCaB/h+eqJutPi9VcX+G5CfYdiXavufta4SAJpZfQFZuZhpkQp2 6h/A5iIV9ZMVrR4EdtS3Gvs+eL1O4GWhGvbnv93/acVFnzr3JtZxjjs0k6UnnNy+ PA3+n3tHUiA9KHMuf0Fii8xMqLVU5EnZaJSPb+79F3kHG4zSFC4oWJz8Byj5OfBH Z68/Spdsme7wDBK1M8MmyEEOP+R1fjK3pxTWF57NsW/S1EvgJGSf8HvZkxVGEZbc n4uKzrJz6elWNcNr6BnzD1rBT915GA08c7iIeVNk+7LbRpqjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG93/mJDeSivLuJfgR0wR8vkgbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODkwNjQxZjktMGFhZS0z YTA5LWIzNzUtZDVmYWVkNDk0MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKI/BZMREbPmXEh9HL3es5OBwejf7DYMrOPRcW4hjG671BYyKKDn6RUS DW1MXPERbNgg6PzvpKqlk7RJEza2Lv4wqNg55ekxKtjkjmDKNZbnQVdTmjEqzFen vg0oq+BueKtz/8taMmmmXrsKj3T2I2wxOt0kMQdON1yrGDC4JrOPUZ6AAlfaecSh 4st9RJu3jU/AXYjWSU/PzeOb3Lp7zVm8aCFqB2zGSsXOiC4k8tPK+eoa8zZ2ScuR b8avrdbt5jIQFkt1YkB1oA2KQ9xFRMuyoJpg9k2mpCyaEzJbcDkVDfm4RmvLFL0h M1bZ282t7lnOFp+j0dq4oUcWZQEJqVM= -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:10 2026 by rpki-client