$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de541a29-3477-3804-a2f5-31d43e2e3025.roa File: de541a29-3477-3804-a2f5-31d43e2e3025.roa (raw, json) Hash identifier: l/7X7evJA49oa8JvLsmwMcyFXraJwBBndwzvLL96vc0= Subject key identifier: F0:60:4C:B9:35:FA:52:8B:A2:A4:F8:48:1C:B7:9F:31:AF:A6:02:72 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6EA35E2461F56BA840C8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de541a29-3477-3804-a2f5-31d43e2e3025.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.130.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6e:a3:5e:24:61:f5:6b:a8:40:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=f7a72bce-75c5-452d-9bad-50b1d80a685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:9e:03:a3:19:38:01:ce:db:59:69:2f:2b: 7d:5f:5a:44:0a:b6:ed:53:bb:ad:52:d2:b5:7d:eb: 7a:5b:29:da:da:01:cc:f6:86:bf:a8:b7:4f:2b:7f: 16:aa:b2:57:2a:9f:2e:26:47:13:52:6b:46:2d:ee: e5:2c:d0:6b:f5:47:0b:af:2e:d8:b3:b4:64:e3:de: 03:a8:a2:ba:a7:da:5a:fc:ec:98:fe:57:3f:0c:ed: fb:52:5c:b0:df:92:da:b0:81:31:6d:88:ef:3e:f2: b6:04:99:89:3d:5d:1d:19:f8:ba:69:f7:ed:0a:f7: 8e:9d:48:7c:1a:3c:fa:1c:93:2f:81:35:f6:88:16: c8:64:f4:bb:81:bd:1e:56:69:b2:73:e2:06:a3:f6: ea:c7:e7:88:f8:d2:10:16:5c:0a:6d:ba:12:b1:7c: eb:2c:3e:7e:73:7d:cc:6d:82:55:26:9f:7a:0e:2f: 7a:3f:99:5d:f5:e6:5f:ba:c0:44:10:0f:1a:ac:44: c7:26:65:9b:b4:b8:b5:82:60:fc:30:9f:02:83:a1: d0:21:2a:6a:44:e7:ff:68:4b:f3:23:77:5c:83:e9: 45:cf:49:33:25:20:8c:39:46:79:9a:2a:35:33:d4: af:bc:bf:fb:50:eb:9c:d6:7a:39:30:18:95:1f:de: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:4C:B9:35:FA:52:8B:A2:A4:F8:48:1C:B7:9F:31:AF:A6:02:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de541a29-3477-3804-a2f5-31d43e2e3025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.130.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:41:b6:bf:8e:68:40:1e:f7:2f:1c:6e:56:52:db:2d:18:f3: 1f:33:8d:09:f5:91:98:90:8f:6d:8f:e1:fa:40:32:c4:79:cd: b0:62:a4:32:df:1e:fa:eb:0e:5a:cb:de:cc:5f:c2:88:77:2e: 52:ca:d6:96:25:c0:79:d5:3f:04:4a:13:31:76:35:c1:32:fe: 0e:86:a3:3f:73:5c:38:22:dc:ed:8a:f0:fe:7c:8e:0c:06:9c: 22:0c:94:d0:26:82:d0:36:42:1d:6e:dc:e4:19:15:3e:74:48: 05:c7:1d:f4:9f:49:a7:1e:6f:91:d3:5e:a4:21:ff:dc:d2:ce: 13:92:95:04:af:f7:a4:7d:0b:7b:b2:8a:8c:5d:4b:80:12:2b: 7f:75:a6:1c:11:3b:fd:9d:98:45:36:8c:88:0a:20:2e:e2:12: 9d:93:ac:a4:25:28:bb:0c:d8:a4:3a:3f:b3:45:48:81:94:54: 3c:fe:9e:97:63:77:85:69:a8:2d:e7:73:c1:53:4b:c3:84:14: 26:f3:f7:56:07:f2:2e:c9:5d:2c:1b:4b:cb:6b:32:65:d0:a6: df:cb:4a:91:b0:12:7f:65:91:14:17:44:4f:85:40:5e:97:c5: 9c:3f:f0:87:c3:31:d1:79:f9:30:01:8b:1d:52:81:d4:c5:c8: b2:a5:32:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqm6jXiRh9WuoQMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZjdhNzJiY2UtNzVjNS00NTJkLTliYWQtNTBiMWQ4MGE2ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6qeA6MZOAHO21lpLyt9X1pECrbtU7utUtK1 fet6Wyna2gHM9oa/qLdPK38WqrJXKp8uJkcTUmtGLe7lLNBr9UcLry7Ys7Rk494D qKK6p9pa/OyY/lc/DO37Ulyw35LasIExbYjvPvK2BJmJPV0dGfi6afftCveOnUh8 Gjz6HJMvgTX2iBbIZPS7gb0eVmmyc+IGo/bqx+eI+NIQFlwKbboSsXzrLD5+c33M bYJVJp96Di96P5ld9eZfusBEEA8arETHJmWbtLi1gmD8MJ8Cg6HQISpqROf/aEvz I3dcg+lFz0kzJSCMOUZ5mio1M9SvvL/7UOuc1no5MBiVH94jNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBgTLk1+lKLoqT4SBy3nzGvpgJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU1NDFhMjktMzQ3Ny0z ODA0LWEyZjUtMzFkNDNlMmUzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChBtr+OaEAe9y8cblZS2y0Y8x8zjQn1kZiQj22P4fpAMsR5zbBipDLf HvrrDlrL3sxfwoh3LlLK1pYlwHnVPwRKEzF2NcEy/g6Goz9zXDgi3O2K8P58jgwG nCIMlNAmgtA2Qh1u3OQZFT50SAXHHfSfSaceb5HTXqQh/9zSzhOSlQSv96R9C3uy ioxdS4ASK391phwRO/2dmEU2jIgKIC7iEp2TrKQlKLsM2KQ6P7NFSIGUVDz+npdj d4VpqC3nc8FTS8OEFCbz91YH8i7JXSwbS8trMmXQpt/LSpGwEn9lkRQXRE+FQF6X xZw/8IfDMdF5+TABix1SgdTFyLKlMkU= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:45 2026 by rpki-client