$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa File: 28cafba3-d523-3fda-92a2-893bf9b3ee11.roa (raw, json) Hash identifier: DkdWZe6q1pzvNaiznKAULInrXzch6uxN3g4F3RZ2Rc0= Subject key identifier: F3:5B:7E:49:F1:FB:08:21:AD:6A:F6:7D:C3:D2:F2:C3:5F:0B:83:A6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E02CC2E7BCE4B7CB943FC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.100.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2c:c2:e7:bc:e4:b7:cb:94:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5504a33d-8e78-41fc-92ee-33dfda0cee69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:73:16:3e:cb:5c:7c:70:05:b1:de:45:7d: 19:ef:2d:b9:1d:05:15:1d:2a:15:f8:d6:7f:8e:9c: 8d:80:8d:26:70:f6:40:c2:d4:f7:4a:5d:77:5c:11: 16:89:7a:b4:3d:21:c5:7f:66:b3:d7:12:e6:54:69: 3f:8a:aa:21:fb:11:1d:3b:45:ef:32:ac:c0:36:7e: 20:cc:63:4c:68:cc:25:fb:3d:dd:f3:3c:55:60:d9: c0:77:91:af:82:83:e4:d7:dd:3a:78:b5:02:fb:45: d8:56:2c:72:9a:e4:48:9f:14:b0:65:5e:c3:4b:d0: 48:4e:65:d9:a5:c6:e8:4f:6d:9b:8f:84:1f:82:4d: aa:df:68:7d:cf:85:83:b6:33:3b:e2:53:82:4f:08: 2a:cd:6c:64:d7:d5:61:94:cd:20:d9:a1:6a:e5:1b: 66:45:1b:04:43:54:48:32:37:3a:0f:e2:31:5c:13: 0b:22:c5:cf:38:a7:2a:96:71:eb:ba:84:c3:22:21: ac:fa:f2:5e:7e:5f:23:4f:82:08:7e:6c:20:1d:08: 91:95:a9:36:bd:2e:6c:de:a4:db:96:e4:04:e9:91: 87:d0:a1:a7:a9:c6:5c:2d:d8:c3:6b:3c:1c:0a:8e: 40:db:2a:ee:b0:e0:ad:1c:3a:87:08:16:c7:24:b3: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5B:7E:49:F1:FB:08:21:AD:6A:F6:7D:C3:D2:F2:C3:5F:0B:83:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7f:3e:7f:28:8a:d8:2b:e8:79:51:10:13:95:0b:32:87:f8: 69:4e:e7:27:c5:dd:ec:61:da:a5:eb:73:b7:44:9c:7f:a1:0e: 4b:a9:c5:89:a9:77:2a:cc:44:55:e3:a6:9d:f6:77:5d:35:27: 49:f5:bc:34:75:9c:a6:1c:7f:c3:a3:68:1f:80:33:c8:06:6d: 26:61:ec:bb:75:1d:05:a6:77:04:1b:0f:3d:c2:a9:ea:e8:21: 6f:64:f2:de:44:e6:59:b2:fe:5d:44:76:5f:e0:e3:e4:70:63: b4:68:d8:8f:42:f8:ab:00:5c:d0:66:70:56:a6:24:6f:d8:70: 74:4b:09:d0:a5:43:22:f5:41:4a:8a:d0:8d:a3:48:19:e1:8f: cb:ff:05:1b:c7:f4:2b:68:8d:bf:fa:c7:79:d1:13:81:f0:2f: a9:df:c7:d8:ae:4b:b9:b2:ec:9d:88:29:d0:f0:8c:b9:bd:05: 6d:a5:d0:76:5d:ad:ab:22:4b:6e:e3:e7:fd:6a:41:07:83:01: 61:44:53:44:18:1c:38:0f:cc:cf:3f:fb:f0:1f:72:e3:b3:b2: a0:58:0c:9f:dc:6d:75:f3:2f:95:49:22:c4:21:3b:9c:6e:2d: 71:e3:8a:78:68:58:d2:86:d1:3d:d7:8d:de:4a:f4:7a:eb:01: 21:46:c6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CzC57zkt8uUP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTUwNGEzM2QtOGU3OC00MWZjLTkyZWUtMzNkZmRhMGNlZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPVzFj7LXHxwBbHeRX0Z7y25HQUVHSoV+NZ/ jpyNgI0mcPZAwtT3Sl13XBEWiXq0PSHFf2az1xLmVGk/iqoh+xEdO0XvMqzANn4g zGNMaMwl+z3d8zxVYNnAd5GvgoPk1906eLUC+0XYVixymuRInxSwZV7DS9BITmXZ pcboT22bj4Qfgk2q32h9z4WDtjM74lOCTwgqzWxk19VhlM0g2aFq5RtmRRsEQ1RI Mjc6D+IxXBMLIsXPOKcqlnHruoTDIiGs+vJefl8jT4IIfmwgHQiRlak2vS5s3qTb luQE6ZGH0KGnqcZcLdjDazwcCo5A2yrusOCtHDqHCBbHJLPtIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNbfknx+wghrWr2fcPS8sNfC4OmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhjYWZiYTMtZDUyMy0z ZmRhLTkyYTItODkzYmY5YjNlZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp/Pn8oitgr6HlREBOVCzKH+GlO5yfF3exh2qXrc7dEnH+hDkupxYmp dyrMRFXjpp32d101J0n1vDR1nKYcf8OjaB+AM8gGbSZh7Lt1HQWmdwQbDz3Cqero IW9k8t5E5lmy/l1Edl/g4+RwY7Ro2I9C+KsAXNBmcFamJG/YcHRLCdClQyL1QUqK 0I2jSBnhj8v/BRvH9Ctojb/6x3nRE4HwL6nfx9iuS7my7J2IKdDwjLm9BW2l0HZd rasiS27j5/1qQQeDAWFEU0QYHDgPzM8/+/AfcuOzsqBYDJ/cbXXzL5VJIsQhO5xu LXHjinhoWNKG0T3Xjd5K9HrrASFGxo8= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:18 2026 by rpki-client