$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa File: 0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa (raw, json) Hash identifier: FBk8F+RWDo/oPsEnIaXavx/cY9mF665ukprSr0ChQ10= Subject key identifier: 53:A9:EE:2E:3A:4D:D8:03:19:6C:E5:19:9E:DE:5C:51:90:97:69:DA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA7930AB18C51D3727E1C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.82.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:79:30:ab:18:c5:1d:37:27:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=5b8c818c-52c6-4971-9d2a-3050add84de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:b3:42:8c:a7:87:a4:4f:ca:b8:3f:f5:1f: 80:f7:a1:a1:dc:53:23:65:af:7f:9e:17:02:cb:00: 63:9f:91:c8:42:17:86:81:27:38:ad:16:5f:e7:88: bf:d2:80:32:ff:24:cb:0e:0a:97:ff:08:ad:75:ac: 58:a6:cd:f1:e8:f0:e4:72:2e:11:8f:ee:6f:0c:fa: a5:7e:b2:91:c4:c7:98:54:cf:ce:23:b5:68:07:14: b5:64:ad:81:83:78:cd:aa:ec:5d:05:c2:c9:e3:30: e6:5f:cd:f5:13:92:e0:2a:f3:1b:a2:97:8e:50:36: 9a:21:bc:2c:22:f9:40:0a:59:89:cf:40:58:93:a7: 0e:7f:bd:11:db:b1:8a:07:f9:dc:8c:34:27:a1:7c: 58:d4:cd:dc:73:54:38:5b:b5:31:df:3c:79:e7:df: 77:54:0e:76:c5:51:dc:ec:f1:91:9c:6a:df:cc:5d: 31:0f:64:53:f3:c5:e4:95:5c:51:f9:e0:8b:46:6a: 69:a3:9f:90:52:86:d9:98:f5:67:fd:11:43:e3:db: 6f:43:72:24:f3:f2:a5:4e:19:6c:9b:96:14:9d:d6: dd:f0:ed:37:a2:f6:d2:99:5a:b2:bb:16:78:9b:9b: 8c:4e:7a:32:91:82:18:06:30:9f:fd:7b:17:0f:18: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A9:EE:2E:3A:4D:D8:03:19:6C:E5:19:9E:DE:5C:51:90:97:69:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.82.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:8a:c4:8a:69:f7:fe:8d:f7:32:29:7c:5c:ee:1a:2a:05:57: 7d:f6:35:99:b7:b2:47:e2:56:21:90:8d:6b:0d:b8:08:69:ee: e9:49:48:6b:9c:f4:48:2b:88:7d:0d:f2:8c:d9:1e:6e:82:33: da:68:a7:c6:24:dc:93:c8:c8:98:71:e4:75:b0:93:85:5e:0d: e5:39:15:59:7b:c5:f7:e7:46:4e:f4:ea:25:05:a9:a3:d5:f0: e1:20:f6:19:f0:82:49:49:7b:96:8a:d9:fc:ba:f1:cc:ed:5b: 3d:ef:30:9b:42:b2:4e:e1:88:08:ba:d9:a4:23:77:c0:b9:b6: 55:10:22:ee:1f:dd:62:61:12:4b:15:10:c0:9d:bc:5c:f7:0c: a1:99:e7:6a:7b:28:88:d1:cf:7d:5b:ba:15:91:f8:36:0e:20: c0:e1:de:f1:dc:d0:4c:fd:7d:d5:a7:ec:11:bd:12:04:c5:da: 6b:8f:4a:f1:3b:29:d8:99:83:bd:ab:a9:ae:bf:e9:f9:de:05: 6b:4e:23:a8:75:79:c7:66:4c:94:2a:4b:0a:5f:5a:9d:72:54: 1e:43:cb:69:a8:f5:6f:98:85:d8:47:bb:89:ef:27:5f:63:db: 48:5d:6b:8d:bf:c7:5f:dc:92:b1:83:c1:3a:74:7d:2e:62:c0: cc:fb:45:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnkwqxjFHTcn4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NWI4YzgxOGMtNTJjNi00OTcxLTlkMmEtMzA1MGFkZDg0ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx6zQoynh6RPyrg/9R+A96Gh3FMjZa9/nhcC ywBjn5HIQheGgSc4rRZf54i/0oAy/yTLDgqX/witdaxYps3x6PDkci4Rj+5vDPql frKRxMeYVM/OI7VoBxS1ZK2Bg3jNquxdBcLJ4zDmX831E5LgKvMbopeOUDaaIbws IvlAClmJz0BYk6cOf70R27GKB/ncjDQnoXxY1M3cc1Q4W7Ux3zx55993VA52xVHc 7PGRnGrfzF0xD2RT88XklVxR+eCLRmppo5+QUobZmPVn/RFD49tvQ3Ik8/KlThls m5YUndbd8O03ovbSmVqyuxZ4m5uMTnoykYIYBjCf/XsXDxgT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOp7i46TdgDGWzlGZ7eXFGQl2naMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY5YThhZmUtZTc4Zi0z NmZjLTkyNWQtZDdjNTFmNjU0NWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKKxIpp9/6N9zIpfFzuGioFV332NZm3skfiViGQjWsNuAhp7ulJSGuc 9EgriH0N8ozZHm6CM9pop8Yk3JPIyJhx5HWwk4VeDeU5FVl7xffnRk706iUFqaPV 8OEg9hnwgklJe5aK2fy68cztWz3vMJtCsk7hiAi62aQjd8C5tlUQIu4f3WJhEksV EMCdvFz3DKGZ52p7KIjRz31buhWR+DYOIMDh3vHc0Ez9fdWn7BG9EgTF2muPSvE7 KdiZg72rqa6/6fneBWtOI6h1ecdmTJQqSwpfWp1yVB5Dy2mo9W+YhdhHu4nvJ19j 20hda42/x1/ckrGDwTp0fS5iwMz7RXc= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:32 2026 by rpki-client