$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb85719-2ef4-3289-aa50-3faceec2bede.roa File: 8eb85719-2ef4-3289-aa50-3faceec2bede.roa (raw, json) Hash identifier: g+OxHcj2AC7GR1OQVZ6pFaaxi6PRyEqKsZkAm6iFu1w= Subject key identifier: 3F:98:D6:65:0B:09:F9:68:BE:71:FB:F3:1B:0E:37:81:53:0B:DB:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA8BC7CD3B085D4DED3F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb85719-2ef4-3289-aa50-3faceec2bede.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.86.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:8b:c7:cd:3b:08:5d:4d:ed:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a85ca501-8e9d-457e-a6a9-f151b621ed4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f0:02:26:f8:12:53:5b:5b:85:ae:bf:0e:2b: ac:3c:81:1f:25:69:65:17:55:6a:1d:87:aa:12:05: 69:83:1e:52:6e:c1:bf:1d:18:51:43:54:73:6c:fc: b0:31:97:c5:db:c1:70:25:62:fd:45:a5:90:df:d2: 13:5a:5a:50:95:3e:f4:4b:ed:7c:16:84:1e:48:97: 0b:7a:01:c2:24:45:aa:39:1b:f9:9c:8d:56:b3:dd: 80:2d:81:89:ac:80:ec:d4:1e:b4:69:3c:48:33:41: 27:55:3e:2f:fe:1d:b4:ea:2b:ee:de:18:69:60:7d: e9:c7:a3:9d:0e:23:05:a7:9a:f5:53:51:2c:fd:eb: 84:e7:b5:22:6e:c4:5d:90:59:72:96:41:10:47:c0: db:15:4d:0a:c8:ee:94:84:b4:fa:a7:08:94:94:82: 37:26:dd:39:ef:d9:c3:34:2d:d3:13:a7:54:97:de: a4:5d:a2:dc:8a:c3:6e:43:49:4d:7d:80:b1:19:11: e6:96:37:6a:6e:2f:59:90:7f:2e:2b:6f:54:cc:96: e1:12:e9:77:f7:d0:7d:ef:a4:92:4f:cf:c1:2a:96: 80:7c:75:39:bc:a2:86:fe:96:1d:11:1b:73:dc:be: cf:b3:6b:ac:c9:de:75:4e:90:b9:9c:57:46:3c:86: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:98:D6:65:0B:09:F9:68:BE:71:FB:F3:1B:0E:37:81:53:0B:DB:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb85719-2ef4-3289-aa50-3faceec2bede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:60:55:93:d4:54:e9:19:78:96:23:46:73:20:f5:50:2a:43: 1f:02:22:8e:32:f1:55:15:1c:c8:0d:1b:fd:31:ce:49:d6:69: 52:b1:83:36:cc:ea:6c:73:1a:9d:a0:6f:55:05:f6:53:23:6e: 89:e7:e0:2b:94:1e:2f:64:94:10:42:0e:6f:62:30:ad:8a:68: cf:76:09:60:3f:8d:fe:64:39:a2:26:82:39:19:05:10:31:24: eb:04:e5:36:9b:0b:2f:be:72:71:9c:cc:db:11:b2:8b:8b:3c: 04:17:74:67:ad:a5:d8:72:ed:2a:83:27:71:07:07:dd:4f:2c: 7d:b9:5e:b1:04:f0:38:2b:ee:27:ef:6d:ab:7a:98:9f:f2:b3: 53:0c:61:17:31:5a:60:71:bc:78:bb:bf:ea:91:f4:a3:85:da: d1:c6:36:f7:ad:c2:48:46:5d:95:40:56:59:fe:2c:bd:f3:2b: 5f:4c:2f:4e:b3:29:96:b8:76:7d:62:7f:78:bd:a4:67:2b:ae: 87:b3:3d:f3:f4:34:11:ca:7e:6d:24:73:1a:ad:aa:99:21:da: 87:33:e8:29:16:09:63:fe:a0:75:48:7f:5a:30:36:f2:f6:bf: e2:21:07:67:26:1d:5d:ea:bc:34:74:78:3e:7a:f9:7c:8b:d2: b6:a9:be:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqovHzTsIXU3tPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YTg1Y2E1MDEtOGU5ZC00NTdlLWE2YTktZjE1MWI2MjFlZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPACJvgSU1tbha6/DiusPIEfJWllF1VqHYeq EgVpgx5SbsG/HRhRQ1RzbPywMZfF28FwJWL9RaWQ39ITWlpQlT70S+18FoQeSJcL egHCJEWqORv5nI1Ws92ALYGJrIDs1B60aTxIM0EnVT4v/h206ivu3hhpYH3px6Od DiMFp5r1U1Es/euE57UibsRdkFlylkEQR8DbFU0KyO6UhLT6pwiUlII3Jt0579nD NC3TE6dUl96kXaLcisNuQ0lNfYCxGRHmljdqbi9ZkH8uK29UzJbhEul399B976SS T8/BKpaAfHU5vKKG/pYdERtz3L7Ps2usyd51TpC5nFdGPIbwEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+Y1mULCflovnH78xsON4FTC9swMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGViODU3MTktMmVmNC0z Mjg5LWFhNTAtM2ZhY2VlYzJiZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9gVZPUVOkZeJYjRnMg9VAqQx8CIo4y8VUVHMgNG/0xzknWaVKxgzbM 6mxzGp2gb1UF9lMjbonn4CuUHi9klBBCDm9iMK2KaM92CWA/jf5kOaImgjkZBRAx JOsE5TabCy++cnGczNsRsouLPAQXdGetpdhy7SqDJ3EHB91PLH25XrEE8Dgr7ifv bat6mJ/ys1MMYRcxWmBxvHi7v+qR9KOF2tHGNvetwkhGXZVAVln+LL3zK19ML06z KZa4dn1if3i9pGcrroezPfP0NBHKfm0kcxqtqpkh2ocz6CkWCWP+oHVIf1owNvL2 v+IhB2cmHV3qvDR0eD56+XyL0rapvqY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:14 2026 by rpki-client