$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa File: 9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa (raw, json) Hash identifier: O251yPJcRqk5NuHShXDmItSyuLoQhXg77QK5mTWxLqs= Subject key identifier: C5:6D:E8:0C:64:89:1E:1F:82:3C:0E:A5:89:DD:A5:13:8E:19:56:B2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0EA2F7E72D77F42B60D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.103.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ea:2f:7e:72:d7:7f:42:b6:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2d1cb59c-e9fc-4c1e-8b62-dd7a71ed65ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:30:10:17:99:f6:95:bd:d1:48:ad:3c:c4: 9d:32:da:83:3f:6f:28:d0:d1:58:8d:01:bf:7a:ce: 78:91:99:a2:a8:94:07:af:83:97:a1:d8:69:7b:24: 33:c1:77:85:69:8f:83:5d:f8:87:ba:ea:6e:f0:d5: 82:72:6e:02:5f:d6:3b:d3:83:18:22:f0:87:18:97: 61:46:75:27:f0:28:ef:1c:2c:20:ff:a1:c0:b0:13: 06:9c:ae:63:80:8a:61:b4:0b:9e:c8:08:f1:23:c5: cd:fd:ad:9b:44:d7:c0:2b:3f:eb:86:42:e5:c2:6b: 38:5f:b4:66:5e:46:fd:a8:5c:ba:75:f5:f5:9d:b7: fc:0b:6f:b7:36:56:38:9b:36:2a:37:82:1e:c5:9b: 30:ba:b1:bb:53:29:35:d2:a0:f7:32:48:37:b0:d3: 99:97:15:60:37:16:95:66:23:a6:70:70:e1:9d:51: 83:ee:8c:33:fd:80:8f:96:2a:ab:39:f5:72:73:06: 83:c0:09:ae:68:c8:44:a2:8b:c1:67:3a:ce:e6:30: e6:3e:56:02:bb:72:13:40:59:c0:b9:00:88:26:4c: 4c:29:86:e4:c9:50:51:93:91:8f:cc:ee:7d:2f:3d: d6:e5:c6:f5:5b:b4:ac:5c:6c:66:c1:ab:f9:73:e9: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6D:E8:0C:64:89:1E:1F:82:3C:0E:A5:89:DD:A5:13:8E:19:56:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.103.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ef:82:3b:22:53:ee:97:bc:37:1e:ba:0e:8b:e5:e0:95:14: ee:48:6c:05:6e:60:57:4b:1c:48:3d:b5:ff:fc:5e:a7:65:74: f2:a2:84:f3:38:bf:71:e2:8a:24:d2:f8:42:c0:4f:e1:f5:6a: ff:e5:c2:a2:8d:12:a6:24:82:4e:13:5a:b5:2b:df:f1:d7:27: 26:be:1b:0e:1d:98:eb:f4:18:03:aa:18:31:b1:71:2a:a0:1d: 4a:5c:68:e1:cf:e9:03:d4:2b:e8:95:78:66:35:2c:3b:3a:00: eb:fb:74:3e:b6:40:39:bc:ce:04:a1:b7:78:2b:eb:96:c7:29: d2:55:47:2b:b6:42:08:08:e6:c4:16:e8:60:07:4a:7b:5e:7d: 97:f2:13:76:ff:50:1a:fb:2d:73:08:66:7f:1f:9e:dd:71:9e: 0c:38:3e:64:ef:6e:2e:0b:21:37:c2:04:fd:80:b1:bb:dc:32: 8b:6c:2f:35:bf:bf:47:67:14:6b:2e:f0:7d:88:c7:89:ff:5e: 93:1c:82:36:08:3c:4d:2c:df:16:6d:cc:7c:3c:9e:ff:eb:93: 67:79:00:f2:d1:27:90:11:a7:1b:95:ab:03:f6:ce:67:d6:0a: 62:55:ff:bc:61:8d:04:91:b3:68:a6:11:ee:55:78:72:d1:5c: 41:1a:07:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OovfnLXf0K2DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmQxY2I1OWMtZTlmYy00YzFlLThiNjItZGQ3YTcxZWQ2NWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+gwEBeZ9pW90UitPMSdMtqDP28o0NFYjQG/ es54kZmiqJQHr4OXodhpeyQzwXeFaY+DXfiHuupu8NWCcm4CX9Y704MYIvCHGJdh RnUn8CjvHCwg/6HAsBMGnK5jgIphtAueyAjxI8XN/a2bRNfAKz/rhkLlwms4X7Rm Xkb9qFy6dfX1nbf8C2+3NlY4mzYqN4IexZswurG7Uyk10qD3Mkg3sNOZlxVgNxaV ZiOmcHDhnVGD7owz/YCPliqrOfVycwaDwAmuaMhEoovBZzrO5jDmPlYCu3ITQFnA uQCIJkxMKYbkyVBRk5GPzO59Lz3W5cb1W7SsXGxmwav5c+kabwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVt6AxkiR4fgjwOpYndpROOGVayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY0NDU1NGEtNWUzZi0z ZGU3LTg0OTItNjNmY2Y0ZjFiMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfvgjsiU+6XvDceug6L5eCVFO5IbAVuYFdLHEg9tf/8XqdldPKihPM4 v3HiiiTS+ELAT+H1av/lwqKNEqYkgk4TWrUr3/HXJya+Gw4dmOv0GAOqGDGxcSqg HUpcaOHP6QPUK+iVeGY1LDs6AOv7dD62QDm8zgSht3gr65bHKdJVRyu2QggI5sQW 6GAHSntefZfyE3b/UBr7LXMIZn8fnt1xngw4PmTvbi4LITfCBP2AsbvcMotsLzW/ v0dnFGsu8H2Ix4n/XpMcgjYIPE0s3xZtzHw8nv/rk2d5APLRJ5ARpxuVqwP2zmfW CmJV/7xhjQSRs2imEe5VeHLRXEEaB20= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:59 2026 by rpki-client