$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996cac2c-1e08-37f6-b35d-52a00d14005f.roa File: 996cac2c-1e08-37f6-b35d-52a00d14005f.roa (raw, json) Hash identifier: qAjNxADgVZmrmzEtFKzf8CNHyk/GT22DXxh12mKmBrI= Subject key identifier: 33:91:D5:83:04:F8:D3:3C:9B:E6:E6:07:16:FF:E6:B0:A0:31:9C:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6A7E83891201AB51D300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996cac2c-1e08-37f6-b35d-52a00d14005f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.72.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6a:7e:83:89:12:01:ab:51:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=080bec4a-998e-4390-a413-7fa627e4cb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:bd:b3:79:8a:b2:48:de:77:0d:22:58:6f: 10:64:bd:dd:e4:d4:cf:4a:c9:39:43:17:22:66:08: 9b:f1:53:db:ff:c9:95:d8:c0:d1:78:09:62:f3:79: 40:88:6f:cb:ab:3f:78:da:d7:30:87:d8:34:11:82: ad:12:6d:cb:5d:b5:63:01:de:86:b8:69:83:d6:0c: 50:b1:d2:be:c0:5d:81:2f:2a:54:46:58:ad:3c:81: 27:22:27:79:4d:78:9e:22:99:5d:a2:ab:64:08:b5: 2c:e0:51:5d:4a:e2:94:05:19:41:67:1d:6f:e6:5d: 51:a8:f7:30:16:4e:63:1d:72:54:28:37:29:b3:fd: 2b:fb:c7:04:53:72:37:04:9d:c4:5e:a9:73:81:d2: 0c:8d:8a:00:7f:b8:3e:09:4f:16:00:e8:50:0b:38: 98:f2:8e:76:9d:2d:65:3d:c6:72:9b:91:82:b0:42: fd:0a:1a:cf:b6:fa:b4:0e:e6:c5:11:f3:59:0e:69: 6f:d7:58:6b:6d:9c:13:45:03:10:cf:50:9d:d5:0b: ac:5c:e0:eb:28:63:ad:e0:87:24:41:cf:b1:c6:58: b8:20:55:1e:a8:af:81:43:86:51:63:7d:9b:fa:77: c3:6a:96:e5:d3:f4:96:35:24:66:6d:38:0f:16:5a: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:91:D5:83:04:F8:D3:3C:9B:E6:E6:07:16:FF:E6:B0:A0:31:9C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996cac2c-1e08-37f6-b35d-52a00d14005f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:27:a0:32:9c:28:22:3e:33:e6:88:45:e3:2c:d9:d6:c2:1d: 24:93:9f:09:17:27:a6:31:98:40:5f:b3:28:be:70:68:9c:60: c6:a8:83:55:e6:74:51:e3:91:19:6c:bc:be:9d:05:0c:fd:8b: 4e:13:4b:9e:86:e1:06:bf:7f:88:77:a9:a0:ca:94:09:f0:2d: e2:3c:10:54:39:88:58:1e:fa:74:20:92:b0:3e:ef:9a:40:11: d5:dc:06:b7:25:dc:fa:41:eb:52:41:31:77:e6:a2:52:7b:a4: 04:84:9b:fe:fb:84:e9:4f:58:cd:ef:80:ae:45:13:64:85:2e: de:95:9c:ae:df:63:50:14:95:39:f7:30:09:77:ea:0f:c8:82: 42:9a:2d:dc:44:0e:2a:9d:5c:a9:1a:20:f9:cf:4a:05:73:d2: 57:ec:d4:84:8f:df:7b:57:9b:f9:3d:60:8f:ba:2d:76:7f:a1: ce:34:48:1c:d2:ab:ce:6f:5d:57:35:1d:55:46:b1:ad:0b:f5: cd:b8:e4:98:40:f2:00:ab:55:4e:f3:26:8b:dc:1f:50:62:7f: 5a:2e:88:4a:ec:e0:9f:3d:d4:79:f0:9a:9c:b8:cc:25:39:15: 2d:04:3d:ca:47:18:89:f6:9c:e3:1b:e5:54:4d:da:40:32:35: 66:e0:ad:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmp+g4kSAatR0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDgwYmVjNGEtOTk4ZS00MzkwLWE0MTMtN2ZhNjI3ZTRjYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifK9s3mKskjedw0iWG8QZL3d5NTPSsk5Qxci Zgib8VPb/8mV2MDReAli83lAiG/Lqz942tcwh9g0EYKtEm3LXbVjAd6GuGmD1gxQ sdK+wF2BLypURlitPIEnIid5TXieIpldoqtkCLUs4FFdSuKUBRlBZx1v5l1RqPcw Fk5jHXJUKDcps/0r+8cEU3I3BJ3EXqlzgdIMjYoAf7g+CU8WAOhQCziY8o52nS1l PcZym5GCsEL9ChrPtvq0DubFEfNZDmlv11hrbZwTRQMQz1Cd1QusXODrKGOt4Ick Qc+xxli4IFUeqK+BQ4ZRY32b+nfDapbl0/SWNSRmbTgPFlrhUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOR1YME+NM8m+bmBxb/5rCgMZz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTk2Y2FjMmMtMWUwOC0z N2Y2LWIzNWQtNTJhMDBkMTQwMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsnoDKcKCI+M+aIReMs2dbCHSSTnwkXJ6YxmEBfsyi+cGicYMaog1Xm dFHjkRlsvL6dBQz9i04TS56G4Qa/f4h3qaDKlAnwLeI8EFQ5iFge+nQgkrA+75pA EdXcBrcl3PpB61JBMXfmolJ7pASEm/77hOlPWM3vgK5FE2SFLt6VnK7fY1AUlTn3 MAl36g/IgkKaLdxEDiqdXKkaIPnPSgVz0lfs1ISP33tXm/k9YI+6LXZ/oc40SBzS q85vXVc1HVVGsa0L9c245JhA8gCrVU7zJovcH1Bif1ouiErs4J891Hnwmpy4zCU5 FS0EPcpHGIn2nOMb5VRN2kAyNWbgrXg= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:56 2026 by rpki-client