$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa File: 23b8a98d-c1a0-3317-b565-a74b705cd609.roa (raw, json) Hash identifier: z7R3Ww4sVJDQmj5OMcRXrkYZPbjLvceVHVn9O/KUO5A= Subject key identifier: A0:50:EA:21:98:FB:5C:44:D8:3A:FA:85:58:75:55:B7:1E:89:48:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB54BAF43D1DA436C2400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.176.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b5:4b:af:43:d1:da:43:6c:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=5a6f5dd1-e612-49bf-8486-cfd7ddc68a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:dd:d0:97:6c:63:8f:97:f5:a4:c7:7a:07: 52:16:ef:3d:99:cf:56:ae:b6:3e:90:75:fa:46:4c: f0:ca:b2:41:40:ed:44:04:ff:15:f6:73:f1:8a:83: 90:cf:2d:11:3e:30:2e:2c:5c:a2:af:1c:3d:36:64: 08:41:03:44:2d:4b:28:63:de:67:be:bd:71:85:4d: 84:1d:e9:e3:04:2d:96:e3:40:aa:d4:60:d5:dc:a2: dd:6d:b6:bf:26:68:eb:9a:d9:99:11:67:45:2a:cb: c6:c3:17:61:4b:68:39:14:5b:90:f6:d9:7e:bc:45: b7:43:fb:61:c9:6e:20:b4:83:c1:dd:49:4b:5c:52: e4:45:80:c5:1a:38:4d:40:7d:ae:c9:72:4a:7c:fa: db:c2:ab:c5:c4:fb:86:91:5b:51:1c:58:00:6a:90: e0:18:57:ae:79:ab:48:2e:97:d7:8c:11:47:d4:20: 02:0e:57:2b:ca:14:9c:65:ca:e8:74:e7:62:2c:79: 87:0f:d3:5e:2c:b9:fd:9c:83:99:2a:21:79:b3:b7: 3f:16:e2:5f:ab:5c:f2:02:54:82:2c:f1:6c:2a:95: 2e:6d:9a:c5:1a:6c:6d:55:ef:49:7c:64:47:9e:24: 1b:64:2e:80:e6:e4:bb:b6:eb:82:53:f7:fb:8a:cc: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:50:EA:21:98:FB:5C:44:D8:3A:FA:85:58:75:55:B7:1E:89:48:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f4:2e:f4:ab:4e:22:6b:9d:c1:18:bb:70:05:d0:ff:7b:cf: 5c:b5:fa:a3:6d:ae:bc:0a:92:21:36:68:d8:44:44:d1:32:10: 94:7b:24:aa:ea:2f:83:a7:86:12:ca:77:b8:1b:46:6e:35:e6: 2d:bf:88:14:6e:aa:ed:9a:d3:d4:d2:c7:2d:36:a5:da:d1:8d: 40:3b:a6:69:bc:2c:49:db:ea:bf:90:c7:17:a5:de:ea:76:28: 98:bb:19:57:eb:97:2d:1a:d0:af:71:03:71:91:3c:2d:8b:cd: 9a:f2:3e:87:2a:8c:37:c7:d7:f3:5f:07:11:80:0a:bc:b5:16: 5c:34:c5:52:d3:ef:e8:13:ab:dc:02:a4:e8:ed:27:76:d0:30: 70:db:65:cd:72:93:36:51:46:69:2a:bc:da:c6:2a:37:e3:8b: a6:d4:bc:2f:d0:fb:d5:13:77:b1:c9:16:b6:96:bb:a5:50:bd: 03:24:b0:bd:0b:4f:9a:61:2e:1c:df:8f:5e:d4:0c:0e:7e:9f: ff:b3:60:4c:ca:ee:b1:93:8f:c9:40:ac:d2:12:86:36:94:5a: e9:17:11:4d:58:5f:93:8f:c8:93:1a:26:a9:6c:de:2f:f0:4a: 9c:ce:55:92:df:98:bf:7d:ce:cf:c5:d5:36:ab:f8:73:82:b3: 34:9d:4f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrVLr0PR2kNsJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NWE2ZjVkZDEtZTYxMi00OWJmLTg0ODYtY2ZkN2RkYzY4YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAjd0JdsY4+X9aTHegdSFu89mc9WrrY+kHX6 RkzwyrJBQO1EBP8V9nPxioOQzy0RPjAuLFyirxw9NmQIQQNELUsoY95nvr1xhU2E HenjBC2W40Cq1GDV3KLdbba/JmjrmtmZEWdFKsvGwxdhS2g5FFuQ9tl+vEW3Q/th yW4gtIPB3UlLXFLkRYDFGjhNQH2uyXJKfPrbwqvFxPuGkVtRHFgAapDgGFeueatI LpfXjBFH1CACDlcryhScZcrodOdiLHmHD9NeLLn9nIOZKiF5s7c/FuJfq1zyAlSC LPFsKpUubZrFGmxtVe9JfGRHniQbZC6A5uS7tuuCU/f7isym+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBQ6iGY+1xE2Dr6hVh1VbceiUhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNiOGE5OGQtYzFhMC0z MzE3LWI1NjUtYTc0YjcwNWNkNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF30LvSrTiJrncEYu3AF0P97z1y1+qNtrrwKkiE2aNhERNEyEJR7JKrq L4OnhhLKd7gbRm415i2/iBRuqu2a09TSxy02pdrRjUA7pmm8LEnb6r+Qxxel3up2 KJi7GVfrly0a0K9xA3GRPC2LzZryPocqjDfH1/NfBxGACry1Flw0xVLT7+gTq9wC pOjtJ3bQMHDbZc1ykzZRRmkqvNrGKjfji6bUvC/Q+9UTd7HJFraWu6VQvQMksL0L T5phLhzfj17UDA5+n/+zYEzK7rGTj8lArNIShjaUWukXEU1YX5OPyJMaJqls3i/w SpzOVZLfmL99zs/F1Tar+HOCszSdTyg= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:35 2026 by rpki-client