$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2f8be89-32ff-3578-ab94-361fd44b929a.roa File: f2f8be89-32ff-3578-ab94-361fd44b929a.roa (raw, json) Hash identifier: TUEb6pTFeHWt2IU20wLw57E3gzxIMug76nm2T8N+BTg= Subject key identifier: 57:D7:82:D5:26:03:EA:D4:5F:6F:6B:21:84:A6:12:25:4F:AC:3B:72 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D3B34DF04256923991711C5F8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2f8be89-32ff-3578-ab94-361fd44b929a.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.34.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:df:04:25:69:23:99:17:11:c5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=a486c099-1289-4a34-9894-9f17568b591c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:38:ff:5c:8e:e7:c7:52:8f:f0:1b:73:4a: 12:6d:69:12:f0:ca:bc:07:15:ef:76:16:bb:e5:6e: b5:b6:f0:b0:39:46:8c:24:40:09:6a:a0:5b:b5:3a: 2d:fd:21:dc:32:c7:85:f5:fe:1e:8e:f9:68:d4:f0: 95:c6:8c:78:4d:20:72:ef:12:e6:8a:1d:95:49:97: f7:46:c4:63:73:9f:b1:93:45:49:66:5e:6f:01:5c: 54:32:fa:27:12:c2:cc:05:5a:68:91:30:37:de:67: 8c:57:ca:e4:f6:21:73:4c:61:16:34:a7:1c:96:d6: f6:58:d6:ec:ca:7c:0a:68:d4:1a:4a:d6:d5:66:f9: bc:1f:ee:1f:4f:00:69:9c:19:24:1d:da:82:ff:10: 5d:8d:0f:b4:b3:2c:ac:e2:82:a7:ab:af:7c:03:c0: 7c:ee:ac:1a:6e:a7:02:52:44:af:22:d7:d7:49:14: 30:cb:26:78:ca:39:28:e6:b8:7c:9d:ce:ca:6c:8a: d4:1e:33:75:b3:5f:2c:a2:a6:3c:f2:f4:87:82:2d: 65:eb:f7:3c:c4:07:b1:79:65:63:12:67:9a:11:78: 5a:fd:0e:54:25:51:38:91:d7:0e:ac:a7:51:c4:da: a9:6d:09:aa:94:2d:84:e9:14:32:57:88:17:58:9f: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D7:82:D5:26:03:EA:D4:5F:6F:6B:21:84:A6:12:25:4F:AC:3B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2f8be89-32ff-3578-ab94-361fd44b929a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.34.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0c:9b:dc:3e:99:ba:9d:10:8f:5e:5d:f4:13:55:6e:5e:e8: bb:93:14:0a:eb:35:db:ae:c7:62:04:89:a1:f2:53:ab:6a:e1: a5:91:1e:28:92:70:da:88:92:37:d0:28:8d:28:37:4f:63:72: ab:8a:ce:c9:9f:cf:7d:57:08:e2:b9:23:34:e6:b2:8d:34:a7: 6b:08:24:ec:48:56:2b:2e:89:43:dd:a2:5b:da:d9:1b:47:8e: 76:c9:9e:39:d4:eb:9b:25:e1:da:db:51:99:53:eb:76:59:e8: 01:fa:75:77:a6:99:f7:3e:6f:b2:ca:19:8c:ef:a3:54:64:e7: 2d:cf:d2:f0:46:39:06:a4:16:ad:75:56:f8:2a:3a:93:07:74: c6:4e:1b:0e:05:db:8d:63:9f:d9:4c:7d:61:f2:c7:6b:d0:0e: a4:8e:e1:ca:ca:0f:7a:68:11:02:5b:53:c3:7d:b9:11:cf:1b: eb:9e:31:e5:5e:fa:5d:85:38:04:30:0d:86:fd:70:02:69:8b: 8e:79:b1:c8:61:63:e9:49:0e:ce:09:17:e7:da:57:9a:90:b1: c9:86:23:0e:f2:d9:a1:7e:81:6c:c6:98:37:0c:cd:f4:d7:57: 64:52:0c:2e:4f:19:ce:94:70:ba:13:45:26:5e:57:6f:8e:94: e7:ab:b1:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NN8EJWkjmRcRxfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk YTQ4NmMwOTktMTI4OS00YTM0LTk4OTQtOWYxNzU2OGI1OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV44/1yO58dSj/Abc0oSbWkS8Mq8BxXvdha7 5W61tvCwOUaMJEAJaqBbtTot/SHcMseF9f4ejvlo1PCVxox4TSBy7xLmih2VSZf3 RsRjc5+xk0VJZl5vAVxUMvonEsLMBVpokTA33meMV8rk9iFzTGEWNKccltb2WNbs ynwKaNQaStbVZvm8H+4fTwBpnBkkHdqC/xBdjQ+0syys4oKnq698A8B87qwabqcC UkSvItfXSRQwyyZ4yjko5rh8nc7KbIrUHjN1s18soqY88vSHgi1l6/c8xAexeWVj EmeaEXha/Q5UJVE4kdcOrKdRxNqpbQmqlC2E6RQyV4gXWJ+g8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfXgtUmA+rUX29rIYSmEiVPrDtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjJmOGJlODktMzJmZi0z NTc4LWFiOTQtMzYxZmQ0NGI5MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIiLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMMm9w+mbqdEI9eXfQTVW5e6LuTFArrNduux2IEiaHyU6tq4aWRHiiS cNqIkjfQKI0oN09jcquKzsmfz31XCOK5IzTmso00p2sIJOxIVisuiUPdolva2RtH jnbJnjnU65sl4drbUZlT63ZZ6AH6dXemmfc+b7LKGYzvo1Rk5y3P0vBGOQakFq11 VvgqOpMHdMZOGw4F241jn9lMfWHyx2vQDqSO4crKD3poEQJbU8N9uRHPG+ueMeVe +l2FOAQwDYb9cAJpi455schhY+lJDs4JF+faV5qQscmGIw7y2aF+gWzGmDcMzfTX V2RSDC5PGc6UcLoTRSZeV2+OlOersQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:24 2026 by rpki-client