$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba85bc93-2485-3ef3-a631-df0e86c3c25a.roa File: ba85bc93-2485-3ef3-a631-df0e86c3c25a.roa (raw, json) Hash identifier: GzQ7p/KcZtOnKr3FZBOyMu2qvoo+M7/TkRcovvhllxQ= Subject key identifier: CD:44:AD:FA:39:3C:4F:F6:FC:27:D9:D9:01:9F:D9:A7:DE:9E:A1:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA30A700879F253B4E2600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba85bc93-2485-3ef3-a631-df0e86c3c25a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.80.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:30:a7:00:87:9f:25:3b:4e:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d205cb51-1e99-40c4-ab32-2edc0be4eefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6c:00:21:04:8c:00:8d:7d:36:96:05:d4:ec: 28:b4:f2:25:37:cb:9e:04:05:cc:bf:a3:91:28:d7: 9a:28:48:4d:6f:0b:81:2f:fc:b3:43:74:a3:51:ba: c5:5d:fd:0d:7d:dc:0d:0c:9b:c5:f6:ee:fa:dd:e4: 5e:04:be:bc:e8:85:d3:b2:85:67:85:c8:56:5b:f8: dc:af:f1:75:1a:29:ec:90:ae:2d:9f:1c:5e:3c:bd: 04:c6:32:a3:ac:e1:64:e9:ce:78:7f:21:b1:b0:13: 30:59:d0:01:fa:1e:dc:f3:4b:e6:9e:78:a0:25:7d: 4b:fb:4f:2f:65:ac:a6:66:95:c1:b7:88:df:0c:8c: c7:4c:60:82:ae:f0:70:4b:6c:29:cc:f3:71:51:dd: bf:8d:7b:09:50:d6:bc:c1:0e:3b:5e:87:30:4e:1e: 56:38:67:13:80:a7:10:20:b8:4d:9d:84:40:47:5a: e7:fd:87:e6:30:ae:e9:6a:69:89:8f:28:16:ab:2e: 14:f2:79:9c:04:9d:65:23:5e:7c:d5:42:78:54:f8: fc:3c:06:91:d4:95:27:cb:65:63:14:f9:07:70:06: 1f:0d:db:8a:df:25:3a:04:cc:02:d4:51:6d:40:ea: 3a:8a:b9:af:15:41:94:d3:ec:d2:22:b7:a7:32:13: 37:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:44:AD:FA:39:3C:4F:F6:FC:27:D9:D9:01:9F:D9:A7:DE:9E:A1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba85bc93-2485-3ef3-a631-df0e86c3c25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.80.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2d:7a:39:8a:4a:45:49:5d:cf:25:e0:65:4a:e2:99:31:2b: 0f:df:00:31:00:4f:b6:b1:1f:8d:50:88:fd:38:11:f3:1d:92: 7e:7f:b1:2d:4f:71:62:3d:91:1a:88:b1:83:df:53:15:ba:27: cb:35:1a:b3:4b:1b:06:5f:db:76:76:41:be:08:0c:63:54:9b: 4c:9a:22:0b:ba:76:d2:eb:e8:b7:c4:5a:00:e3:3c:0a:cd:b3: 8b:52:b4:2c:88:b6:1a:81:56:31:00:b1:30:e1:20:cf:f0:80: 32:6f:c9:1c:23:6a:70:59:0a:5c:2d:45:4d:22:aa:59:ed:2a: 67:4b:2c:bf:5d:c0:82:74:f5:04:7d:6c:dd:ce:5f:94:cf:95: dd:32:f5:a6:69:84:0b:c1:43:78:53:a1:a2:68:5f:50:b2:57: 0e:e0:b4:87:92:7a:36:d3:d6:b0:ba:f8:82:3f:ab:50:82:bd: 71:0a:af:d5:3f:86:6a:ca:3b:7f:81:44:18:67:96:fe:1a:22: d6:ce:5e:47:4e:e5:58:64:4f:2c:1d:62:5b:2e:8a:58:88:0b: 3a:3f:40:b5:54:c3:33:8b:b0:79:ae:c0:42:e6:3f:b6:d2:18: 58:7c:0f:27:0a:77:44:7f:46:9f:b5:2d:f3:be:e4:4a:8a:29: 3e:5b:88:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjCnAIefJTtOJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDIwNWNiNTEtMWU5OS00MGM0LWFiMzItMmVkYzBiZTRlZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWwAIQSMAI19NpYF1OwotPIlN8ueBAXMv6OR KNeaKEhNbwuBL/yzQ3SjUbrFXf0NfdwNDJvF9u763eReBL686IXTsoVnhchWW/jc r/F1GinskK4tnxxePL0ExjKjrOFk6c54fyGxsBMwWdAB+h7c80vmnnigJX1L+08v ZaymZpXBt4jfDIzHTGCCrvBwS2wpzPNxUd2/jXsJUNa8wQ47XocwTh5WOGcTgKcQ ILhNnYRAR1rn/YfmMK7pammJjygWqy4U8nmcBJ1lI1581UJ4VPj8PAaR1JUny2Vj FPkHcAYfDduK3yU6BMwC1FFtQOo6irmvFUGU0+zSIrenMhM3IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1Erfo5PE/2/CfZ2QGf2afenqE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE4NWJjOTMtMjQ4NS0z ZWYzLWE2MzEtZGYwZTg2YzNjMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQtejmKSkVJXc8l4GVK4pkxKw/fADEAT7axH41QiP04EfMdkn5/sS1P cWI9kRqIsYPfUxW6J8s1GrNLGwZf23Z2Qb4IDGNUm0yaIgu6dtLr6LfEWgDjPArN s4tStCyIthqBVjEAsTDhIM/wgDJvyRwjanBZClwtRU0iqlntKmdLLL9dwIJ09QR9 bN3OX5TPld0y9aZphAvBQ3hToaJoX1CyVw7gtIeSejbT1rC6+II/q1CCvXEKr9U/ hmrKO3+BRBhnlv4aItbOXkdO5VhkTywdYlsuiliICzo/QLVUwzOLsHmuwELmP7bS GFh8DycKd0R/Rp+1LfO+5EqKKT5biHE= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:20 2026 by rpki-client