$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa File: fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa (raw, json) Hash identifier: iuNJHWpfEfi0RPmbahC9StLSoEMdvbef2iWiNRXiJN0= Subject key identifier: 3D:E0:2F:5D:B2:DC:03:B9:63:34:AE:56:94:E1:00:A0:D4:D8:6C:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA7AD3C08767ED0212BA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.134.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:7a:d3:c0:87:67:ed:02:12:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4536b147-20d0-4ac5-9860-13830bf4a32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:7c:06:d1:45:92:cc:f5:03:03:c0:a1:26: 85:19:27:6f:8c:23:ad:2f:22:15:1a:f4:b7:d0:57: c4:9d:13:f2:4f:55:ed:02:d5:84:1c:b4:d3:c2:4c: a9:b0:66:09:a2:15:1f:a7:55:f9:ed:32:10:1b:8a: fd:80:da:ff:63:d3:65:56:f8:08:c8:86:15:15:24: 33:da:3d:ae:d3:b5:bb:92:16:44:00:8d:01:e9:30: 8e:13:78:20:d2:7f:f0:3f:32:46:99:16:13:e4:f5: 34:07:7c:f2:14:0c:ff:c9:23:98:66:7e:d2:65:9d: 6d:a0:93:41:89:40:4e:56:6d:44:71:1e:0f:c3:11: b3:e8:6a:12:36:e6:a6:94:2b:26:6c:19:f3:45:58: 84:ac:a0:97:17:92:2d:dd:88:71:97:2c:ca:82:e8: e4:25:df:e1:60:45:aa:89:44:a3:17:64:49:ea:a1: 6a:e2:bf:5b:ff:63:06:4a:f8:d2:14:43:ab:b0:40: 61:f2:0e:17:e5:15:5d:07:91:8d:62:26:4f:8e:30: 1d:a3:47:cb:7f:73:b9:68:ba:e4:f9:db:00:4b:26: 7f:45:11:5f:05:77:03:58:54:cc:48:d5:d6:ba:a9: ad:b1:a4:6b:ec:85:83:77:29:99:42:c8:ff:87:8a: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:2F:5D:B2:DC:03:B9:63:34:AE:56:94:E1:00:A0:D4:D8:6C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:22:75:f6:58:17:6f:8f:34:5e:5f:f0:60:ee:60:1d:ef:9e: 9b:6f:bd:89:e0:e5:dd:aa:0e:01:b6:cc:82:ae:ad:20:be:54: 27:ab:09:54:be:03:07:02:54:b8:3c:d8:ef:e2:f9:7f:78:a9: 6a:b8:e2:fa:21:03:07:f9:39:d9:83:ec:1a:f9:0e:c4:d5:06: 0a:85:19:ee:97:d2:23:44:9d:e6:be:6b:87:7d:41:73:4f:ed: 05:8e:12:d5:81:76:95:bc:55:d5:63:4a:08:1c:5c:a1:17:a4: db:9a:e8:10:41:2a:5a:02:6f:15:e9:f4:80:2e:76:5b:33:4c: 9f:1a:20:d7:13:8d:a0:c5:93:2b:63:1c:e6:56:6b:28:c7:d8: 1b:07:12:df:97:6c:3e:ad:e7:2a:b5:47:d0:f9:eb:66:ea:7f: 57:ed:02:8a:f6:0d:0b:ba:1a:84:a3:fa:3c:98:3d:13:29:30: ff:2e:bc:af:39:88:84:95:4e:bc:3b:b9:72:6c:7e:83:6e:26: bc:b9:50:d6:71:e1:0d:b2:09:67:78:98:78:41:84:be:59:5d: f5:79:e8:5c:69:49:ae:49:b2:84:c3:66:ba:05:cb:64:86:cc: 33:0d:fe:4c:56:9f:55:e8:c5:2f:c9:bf:d3:a4:66:7e:6f:d2: 0e:15:63:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnrTwIdn7QISuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDUzNmIxNDctMjBkMC00YWM1LTk4NjAtMTM4MzBiZjRhMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJd8BtFFksz1AwPAoSaFGSdvjCOtLyIVGvS3 0FfEnRPyT1XtAtWEHLTTwkypsGYJohUfp1X57TIQG4r9gNr/Y9NlVvgIyIYVFSQz 2j2u07W7khZEAI0B6TCOE3gg0n/wPzJGmRYT5PU0B3zyFAz/ySOYZn7SZZ1toJNB iUBOVm1EcR4PwxGz6GoSNuamlCsmbBnzRViErKCXF5It3YhxlyzKgujkJd/hYEWq iUSjF2RJ6qFq4r9b/2MGSvjSFEOrsEBh8g4X5RVdB5GNYiZPjjAdo0fLf3O5aLrk +dsASyZ/RRFfBXcDWFTMSNXWuqmtsaRr7IWDdymZQsj/h4qmbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3gL12y3AO5YzSuVpThAKDU2GzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmI5NjhkOWQtYzFhZC0z MGY3LTkwOWYtMDM1YTVmMWZjZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgidfZYF2+PNF5f8GDuYB3vnptvvYng5d2qDgG2zIKurSC+VCerCVS+ AwcCVLg82O/i+X94qWq44vohAwf5OdmD7Br5DsTVBgqFGe6X0iNEnea+a4d9QXNP 7QWOEtWBdpW8VdVjSggcXKEXpNua6BBBKloCbxXp9IAudlszTJ8aINcTjaDFkytj HOZWayjH2BsHEt+XbD6t5yq1R9D562bqf1ftAor2DQu6GoSj+jyYPRMpMP8uvK85 iISVTrw7uXJsfoNuJry5UNZx4Q2yCWd4mHhBhL5ZXfV56FxpSa5JsoTDZroFy2SG zDMN/kxWn1XoxS/Jv9OkZn5v0g4VY6E= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:57 2026 by rpki-client