$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa File: 90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa (raw, json) Hash identifier: APP4PkfWlLdc6RMb5A5CrCb3JqYVbn3wgZLJzNY3nQ8= Subject key identifier: A7:E5:BA:4B:40:F5:2A:59:23:73:78:B7:75:DE:9A:21:EB:F7:FA:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB3DC1F022D35ED331240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.71.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b3:dc:1f:02:2d:35:ed:33:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c751380a-1d14-42d9-bff3-6c3104e8a197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:81:9a:91:2d:23:b1:40:3e:ac:94:f7:a4: 18:3c:d7:2f:38:58:f0:27:04:b9:19:ac:a0:70:8a: 5e:3a:7d:d3:1d:58:fb:6a:f0:17:88:81:e0:5c:d4: 50:a6:26:6c:4d:f8:4e:14:fd:37:8f:dc:b6:bd:e0: 7b:bd:16:f5:da:38:15:ef:57:b7:86:aa:39:4d:52: 6a:0f:ee:d3:8d:19:b4:2b:aa:65:a9:27:cb:6e:0d: 03:ed:4a:76:1e:62:e4:16:23:06:22:3b:fb:c1:55: 7d:51:d3:af:f5:c4:dd:3c:68:46:6c:04:6a:71:d9: 77:d1:17:2f:1e:2c:19:87:e8:02:7e:0d:9b:ca:f0: 14:01:d6:6b:f8:2d:7f:db:7d:8f:80:1f:84:8a:21: d5:f3:4b:78:1f:b7:52:cd:44:d9:a4:60:7d:d3:9b: 3b:61:f2:b9:62:27:4d:20:cb:6e:8a:d0:fe:c1:57: 21:37:a1:f6:c8:f9:7f:f3:b6:b6:50:de:5e:19:44: 78:3a:23:75:f7:39:ca:9a:4c:0a:e1:d5:01:3b:60: 81:aa:39:0e:83:83:d0:47:32:30:70:7e:2e:ec:5a: 9c:d5:fc:e7:0d:5e:be:f1:7f:b5:0a:ad:d5:77:89: 8b:f7:50:42:23:b4:43:b6:8b:ac:df:13:21:23:7b: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E5:BA:4B:40:F5:2A:59:23:73:78:B7:75:DE:9A:21:EB:F7:FA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:52:ad:18:5a:05:73:a9:9e:b4:2d:50:10:04:19:e9:e5:0c: df:6f:52:59:4b:c7:1c:92:fd:91:0e:80:66:e9:6f:87:49:90: ad:ea:41:36:b2:29:5b:e1:be:4f:4d:6b:6f:b5:fa:38:15:95: 2e:b5:d7:c6:8f:7c:6c:94:a1:cf:17:67:0d:62:7a:95:6b:79: c4:d8:f0:65:29:4d:9a:08:11:71:d6:6c:86:b4:58:37:de:89: fd:48:ff:20:e4:d8:2b:e5:a4:42:8f:83:f7:d5:74:f6:04:bb: 1e:ea:81:6f:1f:eb:28:88:2b:6c:a2:a0:16:1d:2c:b6:c0:35: 85:78:d7:11:ec:18:b7:65:ee:d2:8a:53:f4:dc:49:17:7d:82: 6e:d3:e1:86:06:6d:0d:7d:85:22:d3:2b:27:7f:92:bc:be:4d: 96:ce:59:63:64:9f:df:83:95:cf:c2:ff:e2:4f:69:1d:e0:48: 66:df:26:18:2f:b8:9d:55:78:8e:8a:74:b8:ab:de:7d:d2:2a: 1d:87:0c:65:34:23:eb:74:b7:b1:4d:31:31:88:ed:d7:80:d5: d2:43:1f:e2:40:5b:55:b1:b9:a2:7d:93:2b:5d:c1:f8:0b:47: 6b:bd:5c:02:9b:1e:64:86:f9:c1:74:45:91:84:8d:1a:46:4a: 92:4b:e1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrPcHwItNe0zEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Yzc1MTM4MGEtMWQxNC00MmQ5LWJmZjMtNmMzMTA0ZThhMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEWBmpEtI7FAPqyU96QYPNcvOFjwJwS5Gayg cIpeOn3THVj7avAXiIHgXNRQpiZsTfhOFP03j9y2veB7vRb12jgV71e3hqo5TVJq D+7TjRm0K6plqSfLbg0D7Up2HmLkFiMGIjv7wVV9UdOv9cTdPGhGbARqcdl30Rcv HiwZh+gCfg2byvAUAdZr+C1/232PgB+EiiHV80t4H7dSzUTZpGB905s7YfK5YidN IMtuitD+wVchN6H2yPl/87a2UN5eGUR4OiN19znKmkwK4dUBO2CBqjkOg4PQRzIw cH4u7Fqc1fznDV6+8X+1Cq3Vd4mL91BCI7RDtous3xMhI3vnywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfluktA9SpZI3N4t3XemiHr9/rBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBjZWIwZGUtNWE1OS0z ZDM3LWIzMDgtNWY0M2M1ZjlhZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5SrRhaBXOpnrQtUBAEGenlDN9vUllLxxyS/ZEOgGbpb4dJkK3qQTay KVvhvk9Na2+1+jgVlS6118aPfGyUoc8XZw1iepVrecTY8GUpTZoIEXHWbIa0WDfe if1I/yDk2CvlpEKPg/fVdPYEux7qgW8f6yiIK2yioBYdLLbANYV41xHsGLdl7tKK U/TcSRd9gm7T4YYGbQ19hSLTKyd/kry+TZbOWWNkn9+Dlc/C/+JPaR3gSGbfJhgv uJ1VeI6KdLir3n3SKh2HDGU0I+t0t7FNMTGI7deA1dJDH+JAW1WxuaJ9kytdwfgL R2u9XAKbHmSG+cF0RZGEjRpGSpJL4ZY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:29 2026 by rpki-client