$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21198b25-2dce-3f15-af93-c4b257298ff9.roa File: 21198b25-2dce-3f15-af93-c4b257298ff9.roa (raw, json) Hash identifier: 9mvywal/PBgf5NYjfohz4M1tEzTWpvjmJwjJLYdCmLA= Subject key identifier: 11:6D:C5:B4:A7:F1:54:92:C2:96:A1:3E:DE:1E:14:75:0E:C1:21:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E1031E33363E6E636F7780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21198b25-2dce-3f15-af93-c4b257298ff9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.108.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:03:1e:33:36:3e:6e:63:6f:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=66f711d3-e54d-4706-88b9-395554529005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:d7:7f:d5:1b:e9:b5:2d:d2:c1:c2:44:c5: 67:b5:1c:5e:5c:a3:ba:ba:97:5a:25:ea:21:48:f5: 2a:91:94:56:6f:b6:35:b8:d5:94:18:3b:f8:d1:3a: 53:91:52:93:28:12:63:9a:27:d3:1e:9e:a3:88:96: c7:98:3a:9e:cc:63:3e:cc:d1:39:ca:cd:6e:e0:69: 67:24:9b:11:04:10:37:a2:72:64:3f:a3:3c:15:fe: f6:c5:b4:91:a3:34:0a:70:13:e3:23:2a:86:d9:9e: b1:57:a4:90:98:0a:40:8b:9e:02:e3:f7:81:fa:df: 3c:f7:48:68:b6:57:36:c3:c5:45:1f:41:06:ae:83: b9:b8:45:c7:8b:f0:55:95:99:ac:9a:ba:4d:06:d7: 04:3c:9d:9e:84:1b:27:b6:ba:6e:63:5d:01:66:69: 81:35:c6:5a:a1:88:76:1c:cc:e2:cd:d6:ce:dd:6d: ee:5f:e7:ee:e0:b8:44:14:87:80:71:e1:4d:91:e6: dd:4d:f2:49:51:84:a6:f0:71:1a:0f:e0:7d:40:d0: f9:63:5d:ca:bc:35:49:b5:bd:58:21:c9:c5:c2:e1: ec:35:55:d7:0f:6f:0a:03:b5:4a:cc:8f:fe:11:b4: d3:a2:8b:c9:e2:d0:cb:b6:30:97:e3:77:9d:7f:98: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6D:C5:B4:A7:F1:54:92:C2:96:A1:3E:DE:1E:14:75:0E:C1:21:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21198b25-2dce-3f15-af93-c4b257298ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6f:43:19:a2:31:08:42:09:bb:11:97:69:c8:ee:a2:bd:fb: c1:35:b4:65:c0:5e:8b:8f:29:9e:52:14:1c:4b:48:36:58:d1: 4e:f7:11:24:d9:6b:6a:80:88:a2:a5:5f:50:13:2d:af:0e:d2: cc:a4:23:c7:c3:dd:6f:3c:28:6e:b5:d8:b6:9e:4e:2d:ed:ec: 54:dd:16:15:cb:e8:1d:40:fe:5e:38:e5:6e:a2:b7:b6:47:d6: f7:db:27:14:ed:87:51:65:2e:89:63:b0:fe:bc:8d:c5:1c:1c: e0:84:7a:ee:bf:69:77:2f:1b:ae:fb:ec:ff:a9:29:b0:bc:3c: c6:ca:9a:7a:ad:b5:59:14:63:39:d1:58:fb:28:bc:1c:39:67: 03:8c:6d:0f:5c:51:46:e5:eb:fd:2b:d3:61:0b:78:0f:7e:74: 6a:fe:e2:c9:7a:ff:10:77:f7:f9:71:37:03:76:2c:60:a3:ba: c3:cf:80:46:97:e4:df:02:02:02:11:37:c1:b1:2d:19:8a:9a: fe:99:c6:ad:ba:4d:dd:a5:45:93:fb:7a:bd:95:26:26:fd:01: ea:88:67:23:69:3c:79:4b:df:b2:60:13:29:d2:35:25:41:58: 61:35:13:41:52:16:28:39:c7:cb:0f:8b:b9:f8:04:30:f9:04: 75:0c:d4:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4QMeMzY+bmNvd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjZmNzExZDMtZTU0ZC00NzA2LTg4YjktMzk1NTU0NTI5MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MXXf9Ub6bUt0sHCRMVntRxeXKO6updaJeoh SPUqkZRWb7Y1uNWUGDv40TpTkVKTKBJjmifTHp6jiJbHmDqezGM+zNE5ys1u4Gln JJsRBBA3onJkP6M8Ff72xbSRozQKcBPjIyqG2Z6xV6SQmApAi54C4/eB+t8890ho tlc2w8VFH0EGroO5uEXHi/BVlZmsmrpNBtcEPJ2ehBsntrpuY10BZmmBNcZaoYh2 HMzizdbO3W3uX+fu4LhEFIeAceFNkebdTfJJUYSm8HEaD+B9QND5Y13KvDVJtb1Y IcnFwuHsNVXXD28KA7VKzI/+EbTToovJ4tDLtjCX43edf5grXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFtxbSn8VSSwpahPt4eFHUOwSFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjExOThiMjUtMmRjZS0z ZjE1LWFmOTMtYzRiMjU3Mjk4ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZvQxmiMQhCCbsRl2nI7qK9+8E1tGXAXouPKZ5SFBxLSDZY0U73ESTZ a2qAiKKlX1ATLa8O0sykI8fD3W88KG612LaeTi3t7FTdFhXL6B1A/l445W6it7ZH 1vfbJxTth1FlLoljsP68jcUcHOCEeu6/aXcvG6777P+pKbC8PMbKmnqttVkUYznR WPsovBw5ZwOMbQ9cUUbl6/0r02ELeA9+dGr+4sl6/xB39/lxNwN2LGCjusPPgEaX 5N8CAgIRN8GxLRmKmv6Zxq26Td2lRZP7er2VJib9AeqIZyNpPHlL37JgEynSNSVB WGE1E0FSFig5x8sPi7n4BDD5BHUM1MA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:02 2026 by rpki-client