$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa File: d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa (raw, json) Hash identifier: LstgzBBFEA4MxJfClMOLMuUv1t4bWepybc/Oap1y22U= Subject key identifier: 52:F9:02:23:A8:96:E6:25:AE:C7:4B:DC:99:66:51:68:7C:E9:69:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0F5AE0680E2C8650B0B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.108.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f5:ae:06:80:e2:c8:65:0b:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d80a7d09-62e7-404b-b8ba-fa9b58d53c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:fc:9f:aa:9f:ee:90:68:b7:f8:4f:78:9a: 1e:23:20:51:be:e2:14:8b:7d:b7:af:39:4f:46:0c: 73:72:d9:57:8f:b8:80:f2:7a:9d:c9:2c:4b:29:00: b2:bb:18:e3:b5:ab:62:39:ed:d6:bd:9b:52:fa:c1: c4:ad:8c:9e:ef:de:8f:4c:4b:d0:cd:fd:3d:3c:8b: a1:69:3a:63:1b:8f:7b:90:3b:fa:24:e3:cf:41:47: c7:c0:82:fa:82:b7:62:69:b9:f4:58:b8:33:79:bf: 44:14:ad:01:43:69:44:3d:c4:fd:f3:fd:d6:8d:4b: bf:cc:98:44:06:ab:55:c7:62:40:ff:8c:2e:8e:29: 1f:9d:a7:7c:ac:3a:3a:fc:48:7c:d2:59:e3:53:30: 6d:fe:ad:7d:ed:b1:09:3b:32:62:f8:39:1d:f1:0f: 9e:f2:cc:c3:11:d8:1c:bd:e4:68:c1:81:e4:28:27: 80:3d:b0:b6:c7:f9:eb:d4:0c:54:1b:7d:30:96:e3: e3:e0:63:d3:a4:e3:6e:92:d6:b0:68:e4:d0:06:30: b8:c5:2c:d4:19:4d:0c:6c:9b:17:c0:d6:1c:33:b2: 33:d2:ff:02:28:9e:16:4b:6b:b9:d0:d4:10:1f:57: cc:86:21:0d:e0:9c:a9:03:00:8f:99:71:75:45:15: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F9:02:23:A8:96:E6:25:AE:C7:4B:DC:99:66:51:68:7C:E9:69:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:29:06:46:9f:68:12:93:59:d2:02:4a:d4:f9:3c:7c:50:c2: 61:e6:f9:18:25:c3:99:a5:c0:e1:e4:49:50:f8:8e:40:6a:55: 0c:e4:06:c5:6a:a3:d1:45:33:bb:6d:e0:eb:2d:a8:29:e4:62: 85:d2:8c:58:91:1a:6a:24:3c:6b:35:e8:83:56:b9:24:90:30: 9d:ef:c8:2c:d1:a3:d7:68:0f:0a:11:b7:00:f8:c6:df:7e:c6: 5d:38:04:c4:ed:a2:63:cc:c8:37:fb:7f:21:b8:30:28:eb:d7: 85:0e:c2:3f:e7:16:91:23:3a:fe:bc:1d:71:6a:bc:e1:a9:48: 5f:2d:a2:f3:c1:04:be:e6:fd:a0:63:2b:f1:f6:20:98:3a:18: fb:96:fb:6b:0c:e1:fe:df:fc:f4:8e:77:eb:d2:32:4b:14:ce: 23:96:25:25:23:64:9d:3f:81:d5:62:4c:f0:67:a3:e7:c4:b6: 55:50:2f:cf:eb:dc:be:ee:24:c0:a3:3b:b2:b1:2b:1f:58:ce: 85:40:30:5f:d0:1d:22:b3:7c:4b:9a:16:9d:cf:7c:06:c5:48: ed:07:aa:4e:72:87:64:a3:00:37:3c:47:ca:6e:39:1d:a9:fb: f1:0f:f7:83:52:0e:14:f5:9e:b5:2c:61:c0:9f:56:3f:c1:ad: da:96:16:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PWuBoDiyGULC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDgwYTdkMDktNjJlNy00MDRiLWI4YmEtZmE5YjU4ZDUzYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEL8n6qf7pBot/hPeJoeIyBRvuIUi323rzlP RgxzctlXj7iA8nqdySxLKQCyuxjjtatiOe3WvZtS+sHErYye796PTEvQzf09PIuh aTpjG497kDv6JOPPQUfHwIL6grdiabn0WLgzeb9EFK0BQ2lEPcT98/3WjUu/zJhE BqtVx2JA/4wujikfnad8rDo6/Eh80lnjUzBt/q197bEJOzJi+Dkd8Q+e8szDEdgc veRowYHkKCeAPbC2x/nr1AxUG30wluPj4GPTpONuktawaOTQBjC4xSzUGU0MbJsX wNYcM7Iz0v8CKJ4WS2u50NQQH1fMhiEN4JypAwCPmXF1RRXjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL5AiOoluYlrsdL3JlmUWh86WmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJhMTI1YTktMjViZi0z OTM3LWJkYzktN2FhYTQ2MGZmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4pBkafaBKTWdICStT5PHxQwmHm+Rglw5mlwOHkSVD4jkBqVQzkBsVq o9FFM7tt4OstqCnkYoXSjFiRGmokPGs16INWuSSQMJ3vyCzRo9doDwoRtwD4xt9+ xl04BMTtomPMyDf7fyG4MCjr14UOwj/nFpEjOv68HXFqvOGpSF8tovPBBL7m/aBj K/H2IJg6GPuW+2sM4f7f/PSOd+vSMksUziOWJSUjZJ0/gdViTPBno+fEtlVQL8/r 3L7uJMCjO7KxKx9YzoVAMF/QHSKzfEuaFp3PfAbFSO0Hqk5yh2SjADc8R8puOR2p +/EP94NSDhT1nrUsYcCfVj/BrdqWFhk= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:07 2026 by rpki-client