$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/955daadb-8e8a-3141-a041-0f213dd4c87a.roa File: 955daadb-8e8a-3141-a041-0f213dd4c87a.roa (raw, json) Hash identifier: U/wIU0vzmekob2ZNDV3o1CseMusJdiAR3pPaNttd/O8= Subject key identifier: 82:32:FB:B6:EC:A9:D9:E9:3B:04:CF:14:CB:A0:4D:AF:D5:AD:3B:44 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA7A2391129198A8555080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/955daadb-8e8a-3141-a041-0f213dd4c87a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.73.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:7a:23:91:12:91:98:a8:55:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9438e297-d8af-402b-be25-528873db4350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:bf:eb:48:c8:0f:0e:21:d1:af:1c:21:37: 96:0e:03:94:f8:7e:b9:20:75:db:d0:6e:7b:bf:53: cd:ba:a2:92:d7:1e:34:72:3b:8f:c7:a3:b1:d1:b0: 14:53:ea:25:36:1c:fa:4e:03:ea:e6:14:ba:6a:bc: a5:b9:43:35:4a:52:9e:be:dd:2e:99:bf:b0:09:22: b9:e3:ed:02:e9:e6:89:18:c0:27:d2:8b:b5:61:94: 41:5f:6c:8d:ac:70:22:6a:b0:77:b8:79:3e:c4:a3: 3b:c3:5b:4f:c1:07:57:43:ec:8b:0f:76:64:42:86: 0b:83:22:89:3d:5a:ad:22:cd:b0:47:5a:b1:52:11: ac:c9:2c:cf:1b:78:56:84:96:44:6a:fe:7d:18:37: a1:65:4d:fc:19:7d:e8:22:e3:01:16:61:05:51:e9: 77:cf:fc:35:90:ef:b6:c9:3d:b1:c9:22:3d:7c:dd: 07:b4:39:a0:71:d8:ca:76:99:75:20:39:2c:d6:44: 99:d2:03:13:5a:61:51:f9:38:c5:d7:88:c8:dc:aa: ac:28:86:13:29:69:a4:d7:a4:9d:b6:60:87:9e:d6: a8:b1:56:99:96:d7:03:c8:b6:a9:bc:95:b1:1b:d3: d7:01:d1:d2:17:64:09:5c:b4:84:38:95:64:a0:0c: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:FB:B6:EC:A9:D9:E9:3B:04:CF:14:CB:A0:4D:AF:D5:AD:3B:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/955daadb-8e8a-3141-a041-0f213dd4c87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2c:9b:07:76:34:58:64:95:f0:f1:80:d1:3f:dc:58:df:2c: 87:0a:27:d4:22:ec:0f:d8:12:f5:fe:3e:14:2e:b7:3d:49:51: 4f:00:b0:39:b2:72:38:92:b0:58:97:10:49:81:90:36:1f:31: c7:b6:d6:71:cd:2d:2c:77:5a:9e:d3:e2:bd:d9:ac:a1:36:ab: 63:ac:49:c6:85:b9:bb:66:a4:13:a8:5f:43:ea:b7:34:0e:0c: 37:84:15:c1:3a:b6:ae:79:ba:cd:d1:65:c0:47:0d:2f:50:5a: 5f:fb:80:c6:46:12:96:c8:37:d2:bc:65:c3:b3:43:cb:ea:66: d3:ee:98:b5:d4:a8:f5:9b:78:02:3a:5d:ba:66:01:44:68:5e: c8:1f:e0:ab:f0:9f:ed:6b:1e:fb:c1:9c:7f:fc:d3:9d:e6:04: 72:b8:75:c0:ee:a4:44:31:c9:ea:ac:7f:2d:26:f3:71:31:33: c2:28:72:49:3d:54:b0:a4:ca:1a:fd:16:9d:01:1c:20:b8:f0: 10:71:40:b5:03:bd:48:a5:15:5a:12:b5:86:76:9a:3c:59:f6: a6:72:f2:37:dc:02:0d:3d:58:f5:a5:76:b6:e2:32:ac:0c:5b: 36:67:39:5d:2c:43:8d:23:3d:f6:90:b6:57:f5:28:a1:1a:48: 39:50:56:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnojkRKRmKhVUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OTQzOGUyOTctZDhhZi00MDJiLWJlMjUtNTI4ODczZGI0MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizC/60jIDw4h0a8cITeWDgOU+H65IHXb0G57 v1PNuqKS1x40cjuPx6Ox0bAUU+olNhz6TgPq5hS6aryluUM1SlKevt0umb+wCSK5 4+0C6eaJGMAn0ou1YZRBX2yNrHAiarB3uHk+xKM7w1tPwQdXQ+yLD3ZkQoYLgyKJ PVqtIs2wR1qxUhGsySzPG3hWhJZEav59GDehZU38GX3oIuMBFmEFUel3z/w1kO+2 yT2xySI9fN0HtDmgcdjKdpl1IDks1kSZ0gMTWmFR+TjF14jI3KqsKIYTKWmk16Sd tmCHntaosVaZltcDyLapvJWxG9PXAdHSF2QJXLSEOJVkoAz1QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIy+7bsqdnpOwTPFMugTa/VrTtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTU1ZGFhZGItOGU4YS0z MTQxLWEwNDEtMGYyMTNkZDRjODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIklAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYsmwd2NFhklfDxgNE/3FjfLIcKJ9Qi7A/YEvX+PhQutz1JUU8AsDmy cjiSsFiXEEmBkDYfMce21nHNLSx3Wp7T4r3ZrKE2q2OsScaFubtmpBOoX0PqtzQO DDeEFcE6tq55us3RZcBHDS9QWl/7gMZGEpbIN9K8ZcOzQ8vqZtPumLXUqPWbeAI6 XbpmAURoXsgf4Kvwn+1rHvvBnH/8053mBHK4dcDupEQxyeqsfy0m83ExM8Iockk9 VLCkyhr9Fp0BHCC48BBxQLUDvUilFVoStYZ2mjxZ9qZy8jfcAg09WPWldrbiMqwM WzZnOV0sQ40jPfaQtlf1KKEaSDlQVhY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:45 2026 by rpki-client