$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa File: cafacae6-4253-3d5e-b635-56c65cb9329e.roa (raw, json) Hash identifier: lult7PAGyXE53/imb+Gkfpl5KVKo53qQU5iZYqdzCv8= Subject key identifier: F5:C4:2D:6C:E6:50:19:BE:78:19:7A:1A:28:07:96:AB:BD:F6:3C:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA88128CF61ED8A6BA2080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.124.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:88:12:8c:f6:1e:d8:a6:ba:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9b46787c-c7c8-4250-8149-eca171e87aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:76:7f:d5:87:66:9f:fa:4c:1e:2a:e7:3a: cb:d6:14:78:1a:d2:23:91:6c:4a:c7:6c:93:ea:d3: 7b:d1:a7:03:2e:cc:cc:01:2a:c8:fe:14:2e:15:fc: 64:7d:7a:60:f4:3c:e5:48:78:42:b6:d9:40:f0:70: 8c:02:f7:53:b2:4d:60:4d:97:0f:9e:fb:52:9c:fa: c8:51:c3:b0:7c:3e:fb:77:9d:75:69:52:91:53:42: b5:c1:09:ad:a5:2c:21:88:b0:84:8e:5f:f7:0e:a8: 43:77:92:c8:9f:3c:0b:2d:8a:68:c4:9f:a5:5a:44: 3e:e0:0a:f9:e5:e3:3f:a6:00:6a:0f:d4:5e:e7:26: c5:16:2f:a6:c6:92:3b:3c:88:97:75:ef:25:c3:c9: 55:62:dd:8b:ae:98:40:25:16:1d:e6:58:25:62:c2: cf:34:89:be:fb:53:f3:14:2c:79:fc:19:c9:45:60: 70:be:96:6a:e2:7f:64:74:89:88:5c:b5:f9:ca:f3: 9f:6f:87:f2:b3:ad:c1:cb:57:81:2b:c2:d1:00:90: 4b:89:ee:8e:b5:21:06:9b:45:5b:fe:4d:f4:f7:65: 3a:16:bf:1e:1e:fb:bf:ea:fa:42:33:c2:81:16:af: ce:82:84:51:15:92:98:0d:24:94:95:25:f9:4f:53: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C4:2D:6C:E6:50:19:BE:78:19:7A:1A:28:07:96:AB:BD:F6:3C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:08:4e:08:4d:df:e9:cb:36:33:c2:fd:79:97:dd:a2:93:1b: 67:ec:d9:93:27:fb:e0:35:e4:4b:2c:e4:e9:80:7e:1f:19:82: 86:20:2f:58:a5:1e:f5:f2:f4:62:23:8f:c5:61:2e:a4:ca:44: 95:0b:54:6c:f9:23:a2:c5:a3:7a:a4:ff:71:82:68:8e:56:c3: 09:f8:26:92:36:00:ce:b5:37:8e:74:ce:60:6c:ad:3a:98:7e: b8:6c:91:f5:ea:9d:e3:f3:5d:b1:0f:be:69:97:0d:34:38:35: b5:ee:9e:1c:ed:ef:07:11:15:ce:ed:8d:f8:b6:b8:f6:68:fb: d0:49:8d:55:7f:ae:ca:2e:18:af:59:ca:16:6b:70:ca:a0:cc: e0:03:bb:51:f3:d7:ab:4c:df:a6:7f:a6:67:64:e7:d7:a9:44: 95:68:2f:70:8e:a7:04:dd:68:aa:1e:28:ca:2c:65:47:4f:59: 3f:1f:5b:c3:de:92:b7:97:86:69:9b:d6:c5:31:12:77:73:8c: b3:7b:eb:8a:9d:4b:c2:a7:16:7a:49:8a:cd:08:0e:28:e7:01: 3f:62:f7:b4:f7:84:88:44:c1:01:1e:0b:47:75:1b:47:34:bc: e9:df:64:f2:73:61:87:50:a5:2b:13:09:94:67:4d:c8:28:9f: 7a:15:d4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqogSjPYe2Ka6IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OWI0Njc4N2MtYzdjOC00MjUwLTgxNDktZWNhMTcxZTg3YWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJh2f9WHZp/6TB4q5zrL1hR4GtIjkWxKx2yT 6tN70acDLszMASrI/hQuFfxkfXpg9DzlSHhCttlA8HCMAvdTsk1gTZcPnvtSnPrI UcOwfD77d511aVKRU0K1wQmtpSwhiLCEjl/3DqhDd5LInzwLLYpoxJ+lWkQ+4Ar5 5eM/pgBqD9Re5ybFFi+mxpI7PIiXde8lw8lVYt2LrphAJRYd5lglYsLPNIm++1Pz FCx5/BnJRWBwvpZq4n9kdImIXLX5yvOfb4fys63By1eBK8LRAJBLie6OtSEGm0Vb /k3092U6Fr8eHvu/6vpCM8KBFq/OgoRRFZKYDSSUlSX5T1MvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXELWzmUBm+eBl6GigHlqu99jyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2FmYWNhZTYtNDI1My0z ZDVlLWI2MzUtNTZjNjVjYjkzMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCInxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQITghN3+nLNjPC/XmX3aKTG2fs2ZMn++A15Ess5OmAfh8ZgoYgL1il HvXy9GIjj8VhLqTKRJULVGz5I6LFo3qk/3GCaI5Wwwn4JpI2AM61N450zmBsrTqY frhskfXqnePzXbEPvmmXDTQ4NbXunhzt7wcRFc7tjfi2uPZo+9BJjVV/rsouGK9Z yhZrcMqgzOADu1Hz16tM36Z/pmdk59epRJVoL3COpwTdaKoeKMosZUdPWT8fW8Pe kreXhmmb1sUxEndzjLN764qdS8KnFnpJis0IDijnAT9i97T3hIhEwQEeC0d1G0c0 vOnfZPJzYYdQpSsTCZRnTcgon3oV1BM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:26 2026 by rpki-client