$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7906729-900a-31ac-b094-c7c87e54b8b6.roa File: a7906729-900a-31ac-b094-c7c87e54b8b6.roa (raw, json) Hash identifier: aI0HzR+zHXF/PBChS2rgmC1Z23nLUFvy3VkmRqeNSng= Subject key identifier: 96:EE:BA:19:CB:79:F2:33:1D:4E:71:B3:3E:A1:6D:92:46:22:30:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA96843CAFB07A946C19C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7906729-900a-31ac-b094-c7c87e54b8b6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.70.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:96:84:3c:af:b0:7a:94:6c:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=095a5f86-61d7-4840-86c2-6acc80b5358e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:aa:6c:bb:d8:13:1a:ed:9d:a5:4c:15:91: 86:02:b2:04:29:83:a3:a6:d9:9e:51:ae:86:84:6b: d2:30:5b:02:4e:bf:af:97:44:3b:13:9d:64:04:90: 5b:4b:dd:18:85:0f:6b:bd:cf:07:6b:f0:b9:f7:90: b2:c1:43:5b:86:19:91:11:5c:da:12:9f:af:df:21: ad:78:44:65:81:53:67:fa:3c:bb:13:c2:4b:f2:e6: 66:20:ec:f2:48:b6:58:57:5e:ce:96:b7:02:5c:9f: 9c:de:19:ac:d4:d6:e1:c9:c8:15:93:f5:a7:5b:35: 6b:e5:18:ac:58:01:70:a3:f1:4e:f0:94:26:27:84: f6:a0:65:07:31:ee:37:3d:81:cf:f1:77:2b:97:e4: ba:09:3b:9e:80:e3:41:8c:1a:52:37:65:60:9b:03: e7:f7:1d:cd:9f:1f:2d:04:7c:80:5c:53:3a:a2:a5: 36:4b:1b:a1:b0:ca:11:e2:b7:75:cc:4c:38:95:73: c7:a3:c7:ea:34:ff:be:7c:63:21:c6:5b:3c:82:18: 87:8d:29:bc:6c:1c:2d:bf:fa:37:c0:e5:a5:a8:77: eb:3d:92:7d:5d:0b:43:2e:90:07:37:cf:57:6c:b9: a0:4f:51:9b:6c:17:12:75:9d:a6:33:5b:88:d8:e6: b5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EE:BA:19:CB:79:F2:33:1D:4E:71:B3:3E:A1:6D:92:46:22:30:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7906729-900a-31ac-b094-c7c87e54b8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a3:f8:fa:82:92:04:bf:38:13:34:3d:08:7c:89:53:48:b6: 27:1f:2c:ac:72:1d:fd:30:cd:fe:2f:ea:5a:e6:64:7a:eb:03: 8f:ac:3d:07:7e:5f:01:37:11:71:97:0f:54:f1:7d:c7:89:3a: 20:ae:e8:1c:57:c5:c2:32:45:e5:21:b2:f7:15:51:22:c1:03: db:86:2b:60:66:b4:33:57:e8:b1:90:80:f8:86:7f:9e:36:32: cc:fd:42:d0:cd:13:7d:8d:e1:92:84:e6:f5:da:25:1a:0a:84: 67:c8:25:62:d9:cd:90:20:c5:25:86:12:24:5d:a1:cd:29:ec: f9:9c:e2:86:e0:1a:14:40:98:2c:4f:69:90:9e:db:4a:b9:44: 93:ed:72:29:12:d4:fa:3e:04:c5:43:ed:ed:f6:05:9b:f3:ef: 80:fa:ad:b4:a7:64:85:10:e8:ee:30:06:92:37:97:2d:e3:fa: 7f:9a:6a:63:8e:c1:42:79:bc:fc:3e:74:0e:04:72:ab:20:26: 08:7e:e7:af:2d:19:80:24:95:ce:5d:1c:84:b1:bf:50:b3:7a: bd:42:a2:d5:3d:51:c7:82:30:d1:dc:56:c4:bf:b5:39:7c:5a: 55:78:b4:13:bd:1d:4d:d6:de:2c:7c:31:3f:a3:ac:54:c3:56: e7:ca:94:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpaEPK+wepRsGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDk1YTVmODYtNjFkNy00ODQwLTg2YzItNmFjYzgwYjUzNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif+qbLvYExrtnaVMFZGGArIEKYOjptmeUa6G hGvSMFsCTr+vl0Q7E51kBJBbS90YhQ9rvc8Ha/C595CywUNbhhmREVzaEp+v3yGt eERlgVNn+jy7E8JL8uZmIOzySLZYV17OlrcCXJ+c3hms1NbhycgVk/WnWzVr5Ris WAFwo/FO8JQmJ4T2oGUHMe43PYHP8Xcrl+S6CTuegONBjBpSN2VgmwPn9x3Nnx8t BHyAXFM6oqU2SxuhsMoR4rd1zEw4lXPHo8fqNP++fGMhxls8ghiHjSm8bBwtv/o3 wOWlqHfrPZJ9XQtDLpAHN89XbLmgT1GbbBcSdZ2mM1uI2Oa1PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbuuhnLefIzHU5xsz6hbZJGIjAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTc5MDY3MjktOTAwYS0z MWFjLWIwOTQtYzdjODdlNTRiOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmj+PqCkgS/OBM0PQh8iVNIticfLKxyHf0wzf4v6lrmZHrrA4+sPQd+ XwE3EXGXD1TxfceJOiCu6BxXxcIyReUhsvcVUSLBA9uGK2BmtDNX6LGQgPiGf542 Msz9QtDNE32N4ZKE5vXaJRoKhGfIJWLZzZAgxSWGEiRdoc0p7Pmc4obgGhRAmCxP aZCe20q5RJPtcikS1Po+BMVD7e32BZvz74D6rbSnZIUQ6O4wBpI3ly3j+n+aamOO wUJ5vPw+dA4EcqsgJgh+568tGYAklc5dHISxv1Czer1CotU9UceCMNHcVsS/tTl8 WlV4tBO9HU3W3ix8MT+jrFTDVufKlLQ= -----END CERTIFICATE-----Generated at Thu Mar 26 02:12:14 2026 by rpki-client