$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa File: d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa (raw, json) Hash identifier: gAnMO1w6CfnSfYufl4SqrqkqVz+PY9Iu5szwMgVkvOM= Subject key identifier: 68:92:FE:F3:E8:04:8E:9F:5A:21:FD:75:D0:C3:B8:7E:28:72:AE:2B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA5857A0563B80CE33DD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.129.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:58:57:a0:56:3b:80:ce:33:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=0bbf7b37-6395-46c8-abef-289b95119023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:b2:31:36:17:15:8e:a6:cf:35:f3:79:7f: 40:0c:d9:65:13:90:9c:d7:dc:fd:09:1a:ba:29:ef: 0f:44:0c:f2:b0:13:3a:11:34:ea:49:d4:95:4f:77: 5a:01:56:50:cc:52:78:ec:c6:4e:f3:0d:b6:48:18: c2:55:68:58:cd:53:84:ac:49:56:8b:7f:57:6c:08: 12:65:ba:6f:8e:b2:d1:00:1c:73:e0:b1:13:3b:5b: ed:41:ea:1e:1c:c5:2d:3c:db:ee:5f:a6:89:13:c8: ac:76:c3:8b:cc:0b:d4:ea:32:e9:a1:e6:05:5b:dd: 39:5e:94:ba:d0:75:c7:c3:86:27:0e:73:42:9e:61: 81:a7:5f:d2:b3:0c:25:63:f3:72:fb:45:a0:52:64: ef:e9:9a:6c:66:d5:ea:06:34:d0:d7:dd:fb:d3:a5: eb:fb:b5:ce:7e:d8:87:c7:5a:30:1b:60:75:d1:65: ed:6c:34:5d:d1:8c:a6:a1:60:8c:f3:5b:bc:4b:22: 3d:50:af:98:48:64:a4:de:fd:c4:f8:86:a1:c7:a0: 16:3d:e6:23:1f:55:2d:cb:4b:f1:a7:8c:af:ba:03: 93:25:f3:f0:88:96:c8:45:47:b9:59:1f:a5:ec:97: e7:40:5b:9c:66:e4:83:8d:0f:96:23:74:82:b4:9d: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:92:FE:F3:E8:04:8E:9F:5A:21:FD:75:D0:C3:B8:7E:28:72:AE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f2:8c:80:ce:5c:48:bc:d6:60:c2:a0:af:3b:2d:0a:61:d7: 06:ad:77:9f:82:44:51:ce:86:1f:df:6e:e8:50:e5:dc:64:5a: 88:ad:54:9c:ca:93:5e:a5:ab:ec:77:57:5b:7e:49:db:0c:48: 7a:44:a6:81:86:fe:65:63:5c:ac:64:95:7d:72:de:83:03:e6: 9b:08:ac:ff:d8:c5:b1:0f:98:05:3f:e8:76:fc:ce:3c:3d:45: e4:da:d7:94:ca:e3:27:07:39:b7:c8:08:e5:2b:e4:f3:26:f9: f3:c4:13:10:1e:a5:97:70:be:db:7b:1a:68:30:9f:aa:50:4c: ae:e1:77:9b:c3:53:d2:02:60:97:33:35:fb:2b:94:49:dd:a5: c1:f8:8f:e1:1c:6b:d6:c5:67:55:ec:ef:d7:81:fa:0d:84:51: 9b:58:d9:ba:d4:e1:65:f2:9d:99:41:76:12:80:d4:64:24:64: 14:0f:6a:3e:94:46:48:48:9a:84:ca:7c:72:38:06:ab:3a:2b: 1f:ce:dc:c2:74:6f:0d:34:7f:7b:62:23:7c:f9:cb:0a:77:fb: d4:79:c5:f5:2c:b9:2a:58:01:79:23:0e:13:45:eb:b4:8b:78: 36:1f:0b:91:cc:dd:e8:ad:96:22:40:b0:b9:7e:1a:37:02:62: 20:ae:43:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlhXoFY7gM4z3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MGJiZjdiMzctNjM5NS00NmM4LWFiZWYtMjg5Yjk1MTE5MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkKyMTYXFY6mzzXzeX9ADNllE5Cc19z9CRq6 Ke8PRAzysBM6ETTqSdSVT3daAVZQzFJ47MZO8w22SBjCVWhYzVOErElWi39XbAgS ZbpvjrLRABxz4LETO1vtQeoeHMUtPNvuX6aJE8isdsOLzAvU6jLpoeYFW905XpS6 0HXHw4YnDnNCnmGBp1/SswwlY/Ny+0WgUmTv6ZpsZtXqBjTQ193706Xr+7XOftiH x1owG2B10WXtbDRd0YymoWCM81u8SyI9UK+YSGSk3v3E+Iahx6AWPeYjH1Uty0vx p4yvugOTJfPwiJbIRUe5WR+l7JfnQFucZuSDjQ+WI3SCtJ3HZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiS/vPoBI6fWiH9ddDDuH4ocq4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDZkNmMzODMtYjZjYy0z MTFiLTllY2UtOWJhY2ZjZDAzYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjyjIDOXEi81mDCoK87LQph1watd5+CRFHOhh/fbuhQ5dxkWoitVJzK k16lq+x3V1t+SdsMSHpEpoGG/mVjXKxklX1y3oMD5psIrP/YxbEPmAU/6Hb8zjw9 ReTa15TK4ycHObfICOUr5PMm+fPEExAepZdwvtt7Gmgwn6pQTK7hd5vDU9ICYJcz NfsrlEndpcH4j+Eca9bFZ1Xs79eB+g2EUZtY2brU4WXynZlBdhKA1GQkZBQPaj6U RkhImoTKfHI4Bqs6Kx/O3MJ0bw00f3tiI3z5ywp3+9R5xfUsuSpYAXkjDhNF67SL eDYfC5HM3eitliJAsLl+GjcCYiCuQ2o= -----END CERTIFICATE-----Generated at Thu Mar 26 03:59:32 2026 by rpki-client