$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa File: 22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa (raw, json) Hash identifier: SsFUKgh0Wr9BCro7+zy2Tnn3X4cInZaSoII3/OT3BA8= Subject key identifier: D0:3A:8D:E6:81:9C:DF:1B:3B:E3:90:F9:6C:C3:9A:F7:B9:F8:DA:AA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA86B3D57CE8B184C69400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.66.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:86:b3:d5:7c:e8:b1:84:c6:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9d73239d-b0df-41a3-a710-4c38205ea758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:48:b4:f3:55:a7:8a:87:ce:2d:be:7b:31: ff:fe:2f:ad:32:ab:98:ac:28:54:42:77:a2:ca:74: 15:8a:6d:15:9d:5a:64:53:8e:17:d0:c6:2f:a7:85: 85:d8:13:d5:38:c8:f7:0e:aa:4c:38:d7:9e:d0:db: 6a:d1:a2:cf:88:d3:6e:d6:d0:75:5e:41:d3:d3:89: 23:7c:38:90:5e:79:60:62:9e:08:b8:9b:7b:43:95: a2:83:2e:25:e3:df:04:fa:16:36:4d:e7:cd:ec:3b: 06:cb:94:de:f5:42:fc:22:d9:ee:6d:78:e9:b0:4d: 92:c3:ac:0d:7f:85:24:d1:f8:9b:2d:f7:d1:ea:89: b7:90:28:88:0e:1f:dc:04:53:2b:e2:ac:e5:84:35: 30:f2:0b:e6:28:45:11:04:2d:cc:3f:e6:14:c0:22: 5a:43:2b:ca:dc:ff:b1:58:d9:3b:f8:7b:f9:32:38: 6b:ef:73:c3:50:cd:ee:ed:dc:d9:6c:8e:e4:9b:d5: 0e:9b:7a:e7:e8:b2:34:d0:2c:e0:35:e3:ab:17:57: 19:b9:6c:fa:0a:40:57:03:78:34:db:8f:8e:9b:d7: b5:a8:14:e8:b9:26:27:ec:2b:cd:71:aa:68:33:51: a7:67:4d:a8:da:0d:5a:e9:5d:62:cb:12:42:c7:23: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3A:8D:E6:81:9C:DF:1B:3B:E3:90:F9:6C:C3:9A:F7:B9:F8:DA:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:87:06:17:60:5a:34:54:f1:69:df:37:93:f6:93:25:a5:2a: 1f:45:a4:64:c5:eb:c1:1c:79:3d:ea:eb:05:94:3e:f9:f0:cd: 24:bf:51:14:8d:84:18:4d:93:bd:53:68:ec:06:1c:03:69:0a: 9f:3f:c6:3d:75:72:fc:5c:53:e9:53:56:60:09:da:48:77:24: 11:51:7d:c6:8b:fb:e5:73:79:c8:84:ec:5c:0c:7f:ae:d8:ee: 61:0f:30:31:57:bf:e8:ac:e5:6b:44:a9:dd:b2:c7:f3:2f:c2: af:2c:46:57:4b:6f:7b:37:4c:3a:83:1d:a2:2f:42:68:12:d9: 00:18:73:57:dd:60:71:f2:42:5c:97:6d:cb:f9:53:a3:fa:16: f6:6c:a4:a9:cf:e0:7f:db:a1:ab:7f:ec:0f:28:1a:79:04:10: 57:80:a0:5d:d9:e7:e9:24:ae:69:c2:e5:06:47:78:c4:e9:5a: cd:0e:61:f3:55:25:b0:14:60:fa:ac:ba:5c:74:70:7f:d9:85: 77:4d:57:e7:9b:41:c3:b5:b7:c2:8b:19:a6:3b:9c:ca:6c:a9: 39:40:1d:eb:45:f1:35:82:3f:67:e3:7b:64:0a:d9:8a:d6:05: 42:bd:d8:5e:07:e0:f3:f7:5a:ab:6f:87:1a:b4:19:89:92:89: 57:1d:72:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoaz1XzosYTGlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OWQ3MzIzOWQtYjBkZi00MWEzLWE3MTAtNGMzODIwNWVhNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW5ItPNVp4qHzi2+ezH//i+tMquYrChUQnei ynQVim0VnVpkU44X0MYvp4WF2BPVOMj3DqpMONee0Ntq0aLPiNNu1tB1XkHT04kj fDiQXnlgYp4IuJt7Q5Wigy4l498E+hY2TefN7DsGy5Te9UL8ItnubXjpsE2Sw6wN f4Uk0fibLffR6om3kCiIDh/cBFMr4qzlhDUw8gvmKEURBC3MP+YUwCJaQyvK3P+x WNk7+Hv5Mjhr73PDUM3u7dzZbI7km9UOm3rn6LI00CzgNeOrF1cZuWz6CkBXA3g0 24+Om9e1qBTouSYn7CvNcapoM1GnZ02o2g1a6V1iyxJCxyNY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA6jeaBnN8bO+OQ+WzDmve5+NqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjI3NjhmM2UtMzg1Yi0z ZTc0LWJiZTQtODJhMTMyMmU3ZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKHBhdgWjRU8WnfN5P2kyWlKh9FpGTF68EceT3q6wWUPvnwzSS/URSN hBhNk71TaOwGHANpCp8/xj11cvxcU+lTVmAJ2kh3JBFRfcaL++VzeciE7FwMf67Y 7mEPMDFXv+is5WtEqd2yx/Mvwq8sRldLb3s3TDqDHaIvQmgS2QAYc1fdYHHyQlyX bcv5U6P6FvZspKnP4H/boat/7A8oGnkEEFeAoF3Z5+kkrmnC5QZHeMTpWs0OYfNV JbAUYPqsulx0cH/ZhXdNV+ebQcO1t8KLGaY7nMpsqTlAHetF8TWCP2fje2QK2YrW BUK92F4H4PP3Wqtvhxq0GYmSiVcdcv8= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:51 2026 by rpki-client