$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b8e10f0-d117-35cc-96b5-cc46c131e767.roa File: 1b8e10f0-d117-35cc-96b5-cc46c131e767.roa (raw, json) Hash identifier: P+bkBm0fGnHdDQRHIimtbOUR93B3JhzzF9WhAIvP7qM= Subject key identifier: 49:21:B3:A5:78:58:8F:3B:72:74:25:A4:0D:98:AB:52:A8:77:EF:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA49868E49E975042A1180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b8e10f0-d117-35cc-96b5-cc46c131e767.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.22.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:49:86:8e:49:e9:75:04:2a:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=0a58ac9a-2a3c-410a-a2d6-5be0998f73e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:ff:de:4d:21:3f:4f:d8:34:01:61:64:de: 07:77:da:44:e4:35:e0:e0:f3:79:3c:31:30:13:fd: 51:27:7b:4d:3f:1e:dc:55:b4:d9:69:94:e0:65:b1: 6f:be:8d:06:4b:a7:da:de:a4:c4:0f:d8:78:94:68: 4f:0c:37:8e:92:0d:97:e0:4c:f4:95:4f:ea:00:26: 13:6c:e0:92:30:7b:4c:84:63:1e:34:60:d4:70:0d: 33:0f:b0:f3:26:0a:1f:31:81:19:11:1c:ce:22:bf: 29:ac:0b:79:f2:6e:70:4d:aa:e0:ac:92:2c:6a:a7: b7:46:6d:26:94:c6:16:8b:e7:6a:99:a5:78:06:c4: ab:b5:08:c9:62:50:b7:2b:b0:c9:44:18:18:85:5c: a9:46:31:f6:cd:ca:38:7d:83:1a:9c:c4:1c:ef:6a: b1:0f:87:04:ce:0b:e5:7b:fa:11:bb:93:f3:e9:fa: 83:73:cc:c7:d8:c1:81:9e:fb:6f:c4:7d:e3:e7:53: 9c:8a:d5:d0:97:c5:c7:1b:75:a7:f2:83:93:09:a4: 84:12:d2:41:7a:99:0f:24:66:b4:6f:57:39:07:5c: 2d:ba:d2:c8:97:fb:e7:ae:2e:7c:95:3c:8a:ec:c1: ac:31:fb:39:d1:81:f7:96:9a:0e:32:80:bd:36:34: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:21:B3:A5:78:58:8F:3B:72:74:25:A4:0D:98:AB:52:A8:77:EF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b8e10f0-d117-35cc-96b5-cc46c131e767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.22.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9b:78:8f:11:bf:a3:ec:06:48:2e:dd:f7:e1:69:05:f2:03: 08:c9:f1:cf:92:02:f1:ba:53:f6:29:c5:14:33:1c:73:b2:c0: 3f:aa:2e:7f:4f:b2:85:45:c2:b4:78:ff:ef:76:d7:23:d6:52: e7:cb:7e:1b:5c:0c:16:10:a6:7c:33:03:60:04:53:32:ac:cf: 2f:75:5f:27:ff:5b:f4:83:14:9e:f0:54:c1:a0:04:be:c7:a7: 8a:dc:c2:d7:b6:c3:3c:4d:d1:cf:87:73:07:df:a9:2c:cb:7a: e3:f5:62:61:0f:84:ed:89:22:4e:1a:d2:f0:b8:87:8b:7d:b0: 2e:a2:34:56:5a:49:52:ea:04:a9:1e:f9:09:07:2d:1e:a9:a8: ce:75:2f:37:6d:4f:57:9f:ed:31:85:e7:e0:10:71:73:e0:77: ef:e1:11:43:e5:b8:13:6a:95:c7:81:9e:c9:bf:97:d6:fa:8b: 82:45:49:ab:22:d6:24:8e:81:7e:90:db:bb:da:a4:77:54:cc: 64:aa:7b:c4:ca:5d:9d:61:97:be:78:3d:db:07:46:4e:01:1a: 47:47:7a:1b:71:42:f5:95:30:39:2e:2e:1a:3b:62:23:0b:a4: 85:7e:20:d1:1a:b2:df:af:60:32:15:7b:96:b9:25:c6:f9:3b: d1:6b:3f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkmGjknpdQQqEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MGE1OGFjOWEtMmEzYy00MTBhLWEyZDYtNWJlMDk5OGY3M2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtn/3k0hP0/YNAFhZN4Hd9pE5DXg4PN5PDEw E/1RJ3tNPx7cVbTZaZTgZbFvvo0GS6fa3qTED9h4lGhPDDeOkg2X4Ez0lU/qACYT bOCSMHtMhGMeNGDUcA0zD7DzJgofMYEZERzOIr8prAt58m5wTargrJIsaqe3Rm0m lMYWi+dqmaV4BsSrtQjJYlC3K7DJRBgYhVypRjH2zco4fYManMQc72qxD4cEzgvl e/oRu5Pz6fqDc8zH2MGBnvtvxH3j51OcitXQl8XHG3Wn8oOTCaSEEtJBepkPJGa0 b1c5B1wtutLIl/vnri58lTyK7MGsMfs50YH3lpoOMoC9NjQmBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkhs6V4WI87cnQlpA2Yq1Kod+8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWI4ZTEwZjAtZDExNy0z NWNjLTk2YjUtY2M0NmMxMzFlNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIhYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+beI8Rv6PsBkgu3ffhaQXyAwjJ8c+SAvG6U/YpxRQzHHOywD+qLn9P soVFwrR4/+921yPWUufLfhtcDBYQpnwzA2AEUzKszy91Xyf/W/SDFJ7wVMGgBL7H p4rcwte2wzxN0c+HcwffqSzLeuP1YmEPhO2JIk4a0vC4h4t9sC6iNFZaSVLqBKke +QkHLR6pqM51LzdtT1ef7TGF5+AQcXPgd+/hEUPluBNqlceBnsm/l9b6i4JFSasi 1iSOgX6Q27vapHdUzGSqe8TKXZ1hl754PdsHRk4BGkdHehtxQvWVMDkuLho7YiML pIV+INEast+vYDIVe5a5Jcb5O9FrP8M= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:20 2026 by rpki-client