$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa File: 1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa (raw, json) Hash identifier: FJy2Dhw14J7+vfDHtkmxZ5w6u6tzANDQSx4Z9UhVNfE= Subject key identifier: DF:2D:4D:01:C1:FC:81:90:FE:E5:7D:B3:7D:F1:29:AC:14:B6:99:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0E29074A406F6F69EC500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.121.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e2:90:74:a4:06:f6:f6:9e:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=42bba33b-da2e-4f98-894a-770de88f567a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:db:71:96:f3:2f:c2:08:3c:d7:f7:d8:e5: 36:d2:6e:91:19:cd:d7:03:a9:e5:a7:a5:72:3d:2d: 0d:91:58:f3:49:f5:0f:9d:0b:d8:fe:be:24:49:fe: f9:1c:0d:23:f8:10:58:b3:49:98:80:d4:7b:ab:e9: 38:a7:ff:8b:0b:0c:4b:25:c1:a2:f0:6c:d6:3e:9e: d2:77:d0:d3:28:a7:fb:5e:af:a4:9d:39:a0:e8:e0: 0b:76:f2:82:01:cd:e8:c6:f9:4b:c0:cf:44:3f:b5: 67:d9:22:f0:ca:6c:44:5f:68:5f:db:6e:80:f8:75: 7b:87:b4:2d:12:eb:cc:34:d9:4a:6c:bd:7b:9a:ef: cf:13:40:4a:c3:b6:ae:49:bb:98:01:23:b7:1a:f7: 0d:37:3d:a8:f8:be:80:80:73:08:7c:9f:36:1b:14: c3:b4:c5:1e:87:f4:7d:c3:e9:a4:96:e6:58:61:e3: 7a:8e:bd:78:ed:8a:04:76:8a:19:76:8e:e1:b6:b6: ca:ec:9e:89:5f:63:df:bb:05:27:8b:7a:da:25:a9: e4:e1:fd:68:56:8e:f6:fe:8f:36:ec:a9:54:54:d4: 61:6f:4f:31:f0:34:7e:2a:0d:bc:da:47:d6:72:29: 42:af:22:0f:ae:15:fd:e6:14:2e:ec:f2:ba:2b:f9: 29:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:4D:01:C1:FC:81:90:FE:E5:7D:B3:7D:F1:29:AC:14:B6:99:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7d:ea:68:d1:26:b8:a3:08:8e:e9:0a:27:65:31:b8:7f:d0: a2:e9:8d:d4:fa:65:47:b8:f2:ae:1b:6d:b9:9b:4f:96:e7:99: 1e:ce:5f:da:47:e0:05:74:4d:a9:d9:ec:8b:84:9e:93:a0:43: 8a:5f:95:a7:98:23:c6:37:c2:60:f5:e6:23:6c:52:ef:f6:6a: 1c:93:f0:35:b6:cb:23:f1:a7:b2:e1:9c:c4:e1:7b:2d:f7:4b: 72:bb:1c:20:a3:8a:d0:0f:cd:64:90:c0:61:7d:b5:d3:6c:aa: 7d:27:66:77:3d:ed:6f:a4:f5:5f:e6:1e:4b:d0:6b:25:88:9f: 07:6e:17:d8:d8:8e:ff:7e:2b:e6:e4:20:b4:07:09:f6:a9:49: 0e:67:77:37:e4:76:9f:45:04:4d:8b:7b:34:88:de:5a:10:ac: 0b:b5:8e:58:3f:72:15:e4:ee:4d:08:a9:da:be:c1:66:a8:f8: a7:90:32:2d:26:51:d0:3d:e2:a5:52:eb:73:b0:eb:85:c4:fd: f7:a5:c3:49:a3:3a:4a:33:8b:03:e3:7b:47:89:29:96:7b:61: 1c:4c:43:45:05:fa:e4:0a:f2:23:67:51:c3:0f:74:3b:fc:f3: fc:13:7e:3f:10:1d:ba:41:5f:c6:60:9b:36:a5:3e:0b:98:e1: f2:c4:99:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OKQdKQG9vaexQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDJiYmEzM2ItZGEyZS00Zjk4LTg5NGEtNzcwZGU4OGY1NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH7bcZbzL8IIPNf32OU20m6RGc3XA6nlp6Vy PS0NkVjzSfUPnQvY/r4kSf75HA0j+BBYs0mYgNR7q+k4p/+LCwxLJcGi8GzWPp7S d9DTKKf7Xq+knTmg6OALdvKCAc3oxvlLwM9EP7Vn2SLwymxEX2hf226A+HV7h7Qt EuvMNNlKbL17mu/PE0BKw7auSbuYASO3GvcNNz2o+L6AgHMIfJ82GxTDtMUeh/R9 w+mkluZYYeN6jr147YoEdooZdo7htrbK7J6JX2PfuwUni3raJank4f1oVo72/o82 7KlUVNRhb08x8DR+Kg282kfWcilCryIPrhX95hQu7PK6K/kp5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8tTQHB/IGQ/uV9s33xKawUtpmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWMyYTNlMGYtNWU1NC0z ZjZjLWI4MGEtYjk0YWYzZTVlY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB96mjRJrijCI7pCidlMbh/0KLpjdT6ZUe48q4bbbmbT5bnmR7OX9pH 4AV0TanZ7IuEnpOgQ4pflaeYI8Y3wmD15iNsUu/2ahyT8DW2yyPxp7LhnMThey33 S3K7HCCjitAPzWSQwGF9tdNsqn0nZnc97W+k9V/mHkvQayWInwduF9jYjv9+K+bk ILQHCfapSQ5ndzfkdp9FBE2LezSI3loQrAu1jlg/chXk7k0Iqdq+wWao+KeQMi0m UdA94qVS63Ow64XE/felw0mjOkoziwPje0eJKZZ7YRxMQ0UF+uQK8iNnUcMPdDv8 8/wTfj8QHbpBX8ZgmzalPguY4fLEmVI= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:16 2026 by rpki-client