$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa File: 168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa (raw, json) Hash identifier: 700JxE+UNwWAw9l5pNgCfUn8l1AXX/IehHv2iHYi1Yw= Subject key identifier: 6E:B4:8F:23:87:BE:43:1E:01:2C:DC:17:3C:AA:04:02:79:BB:22:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA5CD3C3AF40C6694E8D60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.122.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:5c:d3:c3:af:40:c6:69:4e:8d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4f207a21-fcde-466b-a6ea-94280884ebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:ae:dc:2c:f8:d1:41:91:e2:f6:4d:cf:93: d7:d4:44:ae:b0:2b:78:ff:5a:62:e0:50:8b:4b:08: a0:9d:bf:1c:f8:53:4b:24:f9:15:86:e5:a8:18:d8: e2:ca:4d:7c:74:4c:16:49:6e:e1:64:9a:1c:3d:c1: bd:27:4d:fd:db:c2:fe:7c:55:ed:69:93:5a:dc:99: ce:36:15:73:3d:bd:69:82:9b:70:66:6c:1b:b1:63: 93:19:88:77:ca:bd:cd:db:18:2d:3c:15:f5:d0:89: 80:47:6d:3a:86:55:93:a3:c0:aa:4d:12:b0:47:82: ea:bb:2d:4f:77:26:47:6d:f7:13:83:74:21:b4:6a: a2:b6:5f:46:b2:cb:b3:a4:79:e7:5f:9d:68:ff:56: 3b:62:a3:f9:74:71:d7:8d:65:40:9e:f7:1d:75:46: 98:68:ac:32:6c:0f:4f:dd:59:91:12:aa:3b:aa:fd: 17:12:3f:d8:23:80:f0:76:10:94:81:7e:00:dd:a2: 10:ce:85:5a:3c:3a:93:ce:67:f1:e5:12:63:5e:1b: 3c:ff:1a:0f:f5:20:42:72:4e:13:92:82:e1:24:99: 28:43:c5:11:bc:34:4d:4e:ac:97:16:16:9f:0c:25: ee:fb:82:ec:ea:52:83:e4:31:72:2b:31:98:16:65: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B4:8F:23:87:BE:43:1E:01:2C:DC:17:3C:AA:04:02:79:BB:22:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8a:a7:19:5b:8d:b2:ac:a2:90:02:d9:ea:80:18:e0:a0:e6: fd:fd:16:a7:67:61:e7:b2:8b:91:af:f2:86:f8:1f:e0:38:3a: 02:5f:1d:55:52:53:9d:eb:f9:93:aa:1e:92:8e:e0:ed:0c:03: 23:4d:3c:a8:3d:b2:14:6b:68:08:5f:9a:6e:c7:ba:47:1c:e1: c8:0d:88:5b:e6:a5:da:0d:65:ba:48:74:45:a2:37:81:72:ee: c4:bc:f8:aa:bf:47:cb:49:04:9e:d6:26:4a:0b:13:1b:cd:3d: 9a:1f:91:77:d5:32:0b:8f:a9:d6:13:40:83:6a:74:32:15:69: 8c:b0:be:27:d0:4b:72:f8:48:50:56:03:ec:db:00:da:e3:1b: e1:a0:79:2e:46:dd:5d:2e:2f:87:6f:44:7d:db:ea:4e:df:a1: 43:2e:4c:f7:be:c4:36:9f:70:d5:dd:18:1e:44:bd:e5:7a:d3: a3:28:17:6f:c6:b1:24:43:74:18:d5:40:64:fe:07:60:a2:38: 66:5f:25:2a:15:89:67:39:b1:69:53:fb:34:d3:69:70:86:d0: f7:37:ff:c7:95:fc:31:69:34:ee:a8:01:2b:f1:aa:50:1c:9a: 80:0e:1a:d8:eb:b7:34:3e:9d:06:0c:e7:2f:af:cc:b5:6e:df: 88:fd:d3:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlzTw69AxmlOjWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NGYyMDdhMjEtZmNkZS00NjZiLWE2ZWEtOTQyODA4ODRlYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcKu3Cz40UGR4vZNz5PX1ESusCt4/1pi4FCL Swignb8c+FNLJPkVhuWoGNjiyk18dEwWSW7hZJocPcG9J03928L+fFXtaZNa3JnO NhVzPb1pgptwZmwbsWOTGYh3yr3N2xgtPBX10ImAR206hlWTo8CqTRKwR4Lquy1P dyZHbfcTg3QhtGqitl9GssuzpHnnX51o/1Y7YqP5dHHXjWVAnvcddUaYaKwybA9P 3VmREqo7qv0XEj/YI4DwdhCUgX4A3aIQzoVaPDqTzmfx5RJjXhs8/xoP9SBCck4T koLhJJkoQ8URvDRNTqyXFhafDCXu+4Ls6lKD5DFyKzGYFmWuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG60jyOHvkMeASzcFzyqBAJ5uyIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTY4ZmY1MWEtOGM0Yi0z ZjA4LWExYTMtMzQ3OGQ3YTYxYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeKpxlbjbKsopAC2eqAGOCg5v39FqdnYeeyi5Gv8ob4H+A4OgJfHVVS U53r+ZOqHpKO4O0MAyNNPKg9shRraAhfmm7Hukcc4cgNiFvmpdoNZbpIdEWiN4Fy 7sS8+Kq/R8tJBJ7WJkoLExvNPZofkXfVMguPqdYTQINqdDIVaYywvifQS3L4SFBW A+zbANrjG+GgeS5G3V0uL4dvRH3b6k7foUMuTPe+xDafcNXdGB5EveV606MoF2/G sSRDdBjVQGT+B2CiOGZfJSoViWc5sWlT+zTTaXCG0Pc3/8eV/DFpNO6oASvxqlAc moAOGtjrtzQ+nQYM5y+vzLVu34j906g= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:28 2026 by rpki-client