$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa File: 240b7b1e-5ac1-3530-9208-59ae94dede8d.roa (raw, json) Hash identifier: 8dI1NZT42GDATnXNDez61PJ7jusm0PXGU0IWe8ZvSlE= Subject key identifier: 17:50:8D:83:1A:FB:A1:B4:4D:DD:1D:25:E1:03:0F:A8:80:3A:D7:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA7213C2328FDE48F20F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.76.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:72:13:c2:32:8f:de:48:f2:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3a3764d7-d219-429e-a1de-855ffef45bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:7b:a4:8d:f5:7c:a3:d5:d7:c4:22:50:a4: cd:df:6b:c0:54:a8:af:d8:b0:03:9c:02:84:f6:a0: b1:10:a6:5a:d5:1c:af:03:58:5a:13:5c:ac:57:d1: 97:cd:3d:ad:cc:35:ec:9a:45:b1:32:8f:a4:86:af: 36:10:70:20:86:c2:0f:d1:fd:d8:14:84:f2:09:d5: 22:14:66:80:d8:e9:c4:a4:65:a3:06:6b:93:f4:7d: 4c:d0:5b:f8:8a:58:81:45:c5:45:41:da:75:b6:f5: 41:44:0e:3a:09:9c:c1:16:db:34:ec:90:ee:8d:e8: 2d:21:15:98:8d:2e:53:39:dd:c5:ce:ce:5a:74:ba: b5:bd:aa:09:bd:f3:2d:64:c2:36:ac:cc:64:23:06: ae:ff:25:fb:f7:a9:35:a8:7e:70:bd:63:04:14:c4: 38:42:0e:bb:5f:5a:01:87:5a:77:29:2e:cd:71:5e: 28:8f:d7:30:be:f3:95:39:a0:0a:f8:18:ad:1c:16: 83:66:01:5c:b5:9b:23:d3:fc:bb:08:71:88:0d:7c: 74:2f:03:87:d2:50:5e:db:40:b5:dd:53:4d:18:8a: 76:76:79:2a:51:59:c4:ba:35:6f:4d:48:98:76:16: a8:4d:1c:35:f4:15:fe:a3:cc:67:82:48:de:7e:83: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:50:8D:83:1A:FB:A1:B4:4D:DD:1D:25:E1:03:0F:A8:80:3A:D7:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:81:6e:46:d9:cb:22:2f:ab:fe:75:da:00:dd:4f:51:b9:62: e3:cc:a4:a2:92:7c:1c:8b:23:51:b7:b4:c9:0b:94:ff:8f:c0: d2:9c:2a:e5:24:cb:12:96:2b:f5:d7:e3:5d:cd:ec:29:f0:df: 12:89:2a:91:38:f2:35:53:f9:ae:3a:0b:86:16:7c:73:06:7f: 23:33:ca:2d:b5:0a:53:8c:bc:b1:eb:e4:f8:22:99:eb:f3:ed: b8:98:26:d8:6f:44:7f:78:6f:aa:f6:16:cb:33:62:98:cb:f8: f0:bb:e1:0c:08:19:d5:0c:42:55:5b:b5:d0:af:98:68:f0:ca: ca:a6:f7:97:2f:f6:90:ff:e7:35:21:61:36:c0:05:93:62:93: 0d:31:70:b9:38:f4:68:79:2b:4d:a1:6d:59:be:82:57:18:ea: 41:b8:bf:0b:1b:46:51:c9:9d:b9:2c:55:37:b7:45:db:42:a6: 40:36:c7:f1:35:a5:d1:33:2e:f6:05:54:f7:4d:94:03:3c:eb: 73:ec:ae:8f:7d:17:09:b1:9b:d4:e4:22:08:a3:32:a9:e3:50: ed:72:22:7f:a4:6a:f9:0f:cc:07:b7:1b:15:61:bc:74:35:07: 3b:e1:aa:ab:60:c6:fa:e4:dd:eb:ff:f4:40:20:a5:98:b7:68: a0:95:b2:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnITwjKP3kjyD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk M2EzNzY0ZDctZDIxOS00MjllLWExZGUtODU1ZmZlZjQ1YmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWB7pI31fKPV18QiUKTN32vAVKiv2LADnAKE 9qCxEKZa1RyvA1haE1ysV9GXzT2tzDXsmkWxMo+khq82EHAghsIP0f3YFITyCdUi FGaA2OnEpGWjBmuT9H1M0Fv4iliBRcVFQdp1tvVBRA46CZzBFts07JDujegtIRWY jS5TOd3Fzs5adLq1vaoJvfMtZMI2rMxkIwau/yX796k1qH5wvWMEFMQ4Qg67X1oB h1p3KS7NcV4oj9cwvvOVOaAK+BitHBaDZgFctZsj0/y7CHGIDXx0LwOH0lBe20C1 3VNNGIp2dnkqUVnEujVvTUiYdhaoTRw19BX+o8xngkjefoN/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdQjYMa+6G0Td0dJeEDD6iAOteQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjQwYjdiMWUtNWFjMS0z NTMwLTkyMDgtNTlhZTk0ZGVkZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmBbkbZyyIvq/512gDdT1G5YuPMpKKSfByLI1G3tMkLlP+PwNKcKuUk yxKWK/XX413N7Cnw3xKJKpE48jVT+a46C4YWfHMGfyMzyi21ClOMvLHr5Pgimevz 7biYJthvRH94b6r2FsszYpjL+PC74QwIGdUMQlVbtdCvmGjwysqm95cv9pD/5zUh YTbABZNikw0xcLk49Gh5K02hbVm+glcY6kG4vwsbRlHJnbksVTe3RdtCpkA2x/E1 pdEzLvYFVPdNlAM863Psro99Fwmxm9TkIgijMqnjUO1yIn+kavkPzAe3GxVhvHQ1 Bzvhqqtgxvrk3ev/9EAgpZi3aKCVsi0= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:28 2026 by rpki-client