$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa File: de8acd64-be66-3782-a5b5-279e4662e5e6.roa (raw, json) Hash identifier: Eo/PHNgzA75vP/muENQRcujmHRdv5fEGrsC2y0u8ZtE= Subject key identifier: F3:AA:96:31:19:CA:12:27:BB:80:53:F7:39:52:56:A8:E8:33:05:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA9246681F2571F72FDE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.84.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:92:46:68:1f:25:71:f7:2f:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=2742c3a1-1588-4579-a029-fd084c8b3282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:f1:81:1c:25:4c:95:1e:44:db:53:7e:ef: 5c:ca:bb:7e:12:92:7a:2c:a4:93:1c:31:05:60:00: 3b:c9:db:24:62:f8:90:47:d5:7a:d7:72:7a:e6:e5: 8e:a1:40:85:f8:65:09:32:53:62:8e:77:3e:ff:0f: 0b:47:3e:c9:c4:dd:d2:c3:3e:76:0e:ae:47:69:75: 8a:90:47:d0:01:69:64:1d:15:66:66:83:54:33:43: 44:44:3f:b3:30:2e:b4:a5:00:44:d4:42:4d:6c:b7: 3b:a3:d3:b8:42:43:5e:42:ab:10:13:f9:aa:80:22: 97:d7:94:0f:bf:26:09:4a:cc:1a:f1:cf:86:94:48: 01:01:fb:9d:20:6b:76:c4:a2:88:8b:9d:e6:76:fb: 7e:c1:06:f2:c9:f4:3d:ac:2c:44:f3:33:48:75:a7: 18:10:87:0f:2a:7c:ad:09:75:cf:50:c9:3f:9a:39: ed:99:7e:c3:23:76:36:df:3e:85:90:65:07:4c:37: b5:41:d4:1c:13:29:71:d8:7f:08:b1:4d:e9:a0:22: 6b:ef:38:89:5b:a0:3d:1f:6e:e1:82:9a:a3:0b:bd: 6b:01:a5:d9:2b:f3:65:9a:6c:45:20:68:4d:3e:15: 52:06:0c:0b:87:b9:14:a1:ca:2c:93:6c:87:7a:28: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AA:96:31:19:CA:12:27:BB:80:53:F7:39:52:56:A8:E8:33:05:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de8acd64-be66-3782-a5b5-279e4662e5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5d:ad:9c:1d:07:70:9c:5b:a3:ed:6d:5b:cd:92:dc:e7:e9: 3f:c6:4f:9b:76:be:62:23:86:9c:76:be:a5:a8:61:e0:32:39: bb:ff:1a:c2:97:5b:25:83:33:49:2d:01:a9:67:3e:70:a8:e2: 91:24:2a:94:32:6c:a1:b0:9a:dd:ac:b2:75:0a:d0:85:6a:06: 99:1d:96:3c:fc:c2:7c:6d:e2:6e:9d:04:4c:d6:3f:6b:26:93: 1d:4c:d6:96:a8:90:41:71:70:06:ba:99:f6:a8:f7:d5:47:2f: ff:df:c2:8d:c3:c0:1e:08:99:5a:32:78:27:8b:dc:e8:c5:5f: 6a:e6:5b:76:0b:f5:3d:bb:c0:fc:37:71:08:ab:29:a1:39:cc: 66:7e:c2:23:12:89:51:31:7c:85:fa:4f:d6:55:2b:59:47:c3: 44:d2:ad:61:57:9a:f1:74:46:23:29:f6:cf:ee:27:e8:5b:c6: 4a:b6:8e:31:01:d3:8d:19:68:dd:76:9d:b5:1d:09:b8:f7:62: 69:ca:95:3b:f3:88:6e:9c:8d:a4:ab:f7:4d:1e:c1:47:34:f8: ec:f5:f8:34:2f:75:54:9d:85:a5:78:f5:3d:23:0e:fd:80:43: d7:4c:6a:28:45:08:af:27:03:28:de:94:4c:16:58:93:2c:bc: ab:f9:fe:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpJGaB8lcfcv3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Mjc0MmMzYTEtMTU4OC00NTc5LWEwMjktZmQwODRjOGIzMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs7xgRwlTJUeRNtTfu9cyrt+EpJ6LKSTHDEF YAA7ydskYviQR9V613J65uWOoUCF+GUJMlNijnc+/w8LRz7JxN3Swz52Dq5HaXWK kEfQAWlkHRVmZoNUM0NERD+zMC60pQBE1EJNbLc7o9O4QkNeQqsQE/mqgCKX15QP vyYJSswa8c+GlEgBAfudIGt2xKKIi53mdvt+wQbyyfQ9rCxE8zNIdacYEIcPKnyt CXXPUMk/mjntmX7DI3Y23z6FkGUHTDe1QdQcEylx2H8IsU3poCJr7ziJW6A9H27h gpqjC71rAaXZK/NlmmxFIGhNPhVSBgwLh7kUocosk2yHeih70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOqljEZyhInu4BT9zlSVqjoMwVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU4YWNkNjQtYmU2Ni0z NzgyLWE1YjUtMjc5ZTQ2NjJlNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABldrZwdB3CcW6PtbVvNktzn6T/GT5t2vmIjhpx2vqWoYeAyObv/GsKX WyWDM0ktAalnPnCo4pEkKpQybKGwmt2ssnUK0IVqBpkdljz8wnxt4m6dBEzWP2sm kx1M1paokEFxcAa6mfao99VHL//fwo3DwB4ImVoyeCeL3OjFX2rmW3YL9T27wPw3 cQirKaE5zGZ+wiMSiVExfIX6T9ZVK1lHw0TSrWFXmvF0RiMp9s/uJ+hbxkq2jjEB 040ZaN12nbUdCbj3YmnKlTvziG6cjaSr900ewUc0+Oz1+DQvdVSdhaV49T0jDv2A Q9dMaihFCK8nAyjelEwWWJMsvKv5/jc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:04 2026 by rpki-client