$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa File: a8770b90-df37-3eb5-8dc4-47f9216b080d.roa (raw, json) Hash identifier: YzYIQc+uwGgH47NTVWH3NqEJACQOlq2m5uLo16qM8u4= Subject key identifier: 7E:AD:A7:19:10:89:C2:C6:11:E9:13:4C:CA:C4:BE:DB:82:06:05:42 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AABC98D62AA5E23DFE8940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.177.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:bc:98:d6:2a:a5:e2:3d:fe:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=7ea6cdbd-0503-4688-976d-2bdfdef8567f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c1:92:b3:b0:50:70:f5:32:94:59:7a:fa:41: 3a:6b:e1:43:b4:04:5c:80:1d:0d:fa:5f:db:a8:17: 17:2a:a2:d6:0b:ca:8b:00:11:c5:db:e4:b3:fb:0b: 7a:3a:c9:53:95:d8:fe:2f:8e:95:a3:7b:88:b8:9c: c7:66:e8:12:bf:71:36:af:0c:cd:b8:54:69:07:3b: 07:a2:1c:c7:cd:49:17:ad:92:6d:c9:bc:50:a0:10: c6:c2:04:cd:a6:c5:32:d9:68:06:17:35:bf:4c:fe: cb:78:70:68:11:7e:3a:99:e8:e8:b7:35:ff:7b:c8: 64:3b:9f:d8:fb:9c:62:ad:5a:e6:7b:e4:4e:05:7e: ce:6b:31:bf:25:dc:3e:04:26:02:96:a7:ba:0a:22: c7:f3:0a:76:fa:12:b8:31:3f:05:f7:1c:3d:cf:5a: 2d:f2:11:b0:61:bf:bd:36:b0:e6:01:09:91:45:68: 50:c6:6a:11:2b:e2:b2:18:9f:02:e5:28:2c:93:d8: ab:cf:75:54:e3:3b:55:c9:9b:c9:bf:7f:ac:3f:7e: b4:da:1a:ee:c3:38:87:4b:58:5d:4b:00:61:0d:4c: 17:d9:0b:0a:3a:ca:6e:52:c5:a7:ac:c8:95:da:ee: 95:6b:22:7a:38:2a:1f:08:02:b0:9c:72:fb:bb:ae: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AD:A7:19:10:89:C2:C6:11:E9:13:4C:CA:C4:BE:DB:82:06:05:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.177.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:05:96:d1:82:9e:3c:bd:de:29:c9:13:5b:31:09:cc:fb:cf: 2e:0c:11:70:b1:83:87:0a:13:fb:93:06:7d:33:34:1e:77:34: 9e:04:62:91:a4:ef:ee:77:f8:0a:02:7b:f6:fc:bf:96:7d:6d: 95:c3:52:6f:e4:af:f1:37:54:be:3c:e1:f8:43:15:ee:09:72: 1e:8e:d3:a5:6b:5a:4b:75:86:a1:c7:37:3e:86:3c:14:e2:54: 08:50:ac:2b:4e:71:5f:a0:98:43:24:0d:4b:6f:fc:2a:5d:16: a4:56:c8:81:c8:90:1b:fd:7a:cd:76:2d:d6:1f:3a:e6:6b:f7: e4:71:ae:c3:16:8a:c8:6b:b3:3f:b7:75:6e:9f:5d:d0:10:93: e1:76:33:f6:6a:59:2d:1b:21:bd:a7:13:b8:bb:bd:a3:e3:93: 0e:e8:bb:d4:b1:6e:ab:1b:2a:05:74:d2:89:20:95:78:07:10: 5c:06:22:c6:c9:16:58:76:c7:69:d3:17:70:bd:94:cd:14:82: 8e:83:72:58:fd:78:d8:5d:fe:d5:a7:5b:f7:54:b7:84:37:4f: 47:f7:11:06:3b:2f:4c:f1:0b:38:1c:8e:d4:3a:87:84:c7:b9: c6:15:18:24:79:18:a8:06:7c:54:5e:c7:17:96:7e:50:36:c9: 87:0a:42:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqryY1iql4j3+iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk N2VhNmNkYmQtMDUwMy00Njg4LTk3NmQtMmJkZmRlZjg1NjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8GSs7BQcPUylFl6+kE6a+FDtARcgB0N+l/b qBcXKqLWC8qLABHF2+Sz+wt6OslTldj+L46Vo3uIuJzHZugSv3E2rwzNuFRpBzsH ohzHzUkXrZJtybxQoBDGwgTNpsUy2WgGFzW/TP7LeHBoEX46mejotzX/e8hkO5/Y +5xirVrme+ROBX7OazG/Jdw+BCYClqe6CiLH8wp2+hK4MT8F9xw9z1ot8hGwYb+9 NrDmAQmRRWhQxmoRK+KyGJ8C5Sgsk9irz3VU4ztVyZvJv3+sP3602hruwziHS1hd SwBhDUwX2QsKOspuUsWnrMiV2u6VayJ6OCofCAKwnHL7u67yYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6tpxkQicLGEekTTMrEvtuCBgVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTg3NzBiOTAtZGYzNy0z ZWI1LThkYzQtNDdmOTIxNmIwODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIrEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEFltGCnjy93inJE1sxCcz7zy4MEXCxg4cKE/uTBn0zNB53NJ4EYpGk 7+53+AoCe/b8v5Z9bZXDUm/kr/E3VL484fhDFe4Jch6O06VrWkt1hqHHNz6GPBTi VAhQrCtOcV+gmEMkDUtv/CpdFqRWyIHIkBv9es12LdYfOuZr9+RxrsMWishrsz+3 dW6fXdAQk+F2M/ZqWS0bIb2nE7i7vaPjkw7ou9SxbqsbKgV00okglXgHEFwGIsbJ Flh2x2nTF3C9lM0Ugo6Dclj9eNhd/tWnW/dUt4Q3T0f3EQY7L0zxCzgcjtQ6h4TH ucYVGCR5GKgGfFRexxeWflA2yYcKQv8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:19 2026 by rpki-client