$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa File: 291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa (raw, json) Hash identifier: 4GJJrfcH2r16ELhDpqYzKH9vfyR3AVHDfEvhbOQ4yqQ= Subject key identifier: 5D:DF:EC:2D:20:E0:1C:88:94:A1:23:31:78:B2:5B:AD:95:DF:1B:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3580F4CDE3D557933B40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:35:80:f4:cd:e3:d5:57:93:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9d45f204-7eec-4390-beaf-e6210d2091f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:ed:a9:9c:f6:d3:7b:eb:a4:00:7b:43:f7: 78:28:1a:c2:69:b1:76:cd:9f:d9:25:de:b8:e9:27: c5:2e:50:45:ee:8d:b2:5e:52:93:df:e3:d9:3f:04: 5f:98:76:cd:cf:89:5d:e4:09:c5:20:00:e7:44:58: aa:98:4a:87:ee:22:8f:69:f7:be:db:a1:9c:f8:87: 20:26:66:64:25:05:0e:12:14:36:0b:66:c0:10:d8: b4:8b:8a:60:2f:e7:a6:11:c0:d5:72:58:59:c0:c3: d0:5b:49:5b:e8:2a:2b:bd:94:c3:cb:c1:b6:83:00: 16:ec:ef:9f:6f:b5:f0:fe:e5:cb:2c:72:0c:69:b1: a6:50:6b:e1:a0:3a:a8:e3:24:95:81:2d:7b:29:59: ae:ad:53:f2:7c:70:23:5b:cf:0a:48:28:d8:41:3b: 72:c1:b2:bb:a0:60:e6:7d:6a:18:a0:2c:2b:cf:16: 5b:15:08:d4:1b:ae:95:2b:2e:49:9e:4b:93:ee:b5: 5a:18:f9:98:3e:ee:82:6d:5c:2e:9e:e0:cc:ff:b0: 07:7e:67:a5:5b:3d:a0:9a:93:fe:8f:84:35:15:4f: fd:65:ec:49:a0:3d:1d:ff:4a:30:45:87:c6:62:d2: 49:b8:53:33:54:1d:fa:2c:ba:6e:6b:c6:d4:3d:9a: e4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DF:EC:2D:20:E0:1C:88:94:A1:23:31:78:B2:5B:AD:95:DF:1B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:db:de:10:db:97:19:4c:29:3e:94:3d:00:71:05:c7:0e:a7: 97:59:24:74:84:ad:e8:a5:ba:f7:bb:a2:26:fe:f5:f5:0d:7f: 6c:e0:af:03:64:4b:18:fc:52:d7:3e:fa:22:51:60:6d:be:e8: e9:10:21:f7:c5:64:7e:34:71:41:ce:32:77:1c:35:8c:80:3c: 72:a4:51:fa:28:16:bd:21:7e:96:94:4a:48:4a:b2:44:a7:20: b9:e6:67:09:9b:00:17:4a:2c:9c:29:b4:81:6e:bd:f9:38:d2: 8f:7a:e1:8a:c2:3a:a4:b0:d1:31:70:f2:24:d3:c4:6f:2c:85: 54:08:f0:01:8a:83:98:7f:ef:7a:9a:e4:90:0e:ec:3e:54:6d: 32:8b:f1:a1:5a:1e:90:cc:23:4a:6e:d5:aa:3e:da:36:67:73: 6a:5a:59:b3:48:09:61:50:91:18:05:6c:10:fb:37:0e:28:12: e3:71:de:7a:9b:24:fb:ef:64:21:2b:9e:b6:fb:a4:c1:4a:21: 65:23:4c:87:de:19:36:fc:5f:97:4d:db:7b:94:e7:9e:51:35: 08:36:8c:da:7b:e3:cc:fa:8d:f4:1d:51:dc:58:63:67:66:e0: 86:2d:6d:7f:f2:66:c1:56:8e:13:08:ff:8b:04:bf:a5:0e:75: 6f:ae:bd:62 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0nqjWA9M3j1VeTO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OWQ0NWYyMDQtN2VlYy00MzkwLWJlYWYtZTYyMTBkMjA5MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OPtqZz203vrpAB7Q/d4KBrCabF2zZ/ZJd64 6SfFLlBF7o2yXlKT3+PZPwRfmHbNz4ld5AnFIADnRFiqmEqH7iKPafe+26Gc+Icg JmZkJQUOEhQ2C2bAENi0i4pgL+emEcDVclhZwMPQW0lb6CorvZTDy8G2gwAW7O+f b7Xw/uXLLHIMabGmUGvhoDqo4ySVgS17KVmurVPyfHAjW88KSCjYQTtywbK7oGDm fWoYoCwrzxZbFQjUG66VKy5JnkuT7rVaGPmYPu6CbVwunuDM/7AHfmelWz2gmpP+ j4Q1FU/9ZexJoD0d/0owRYfGYtJJuFMzVB36LLpua8bUPZrkjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF3f7C0g4ByIlKEjMXiyW62V3xsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjkxZjBjMDctNjU2ZS0z YjJiLWI5YjMtYTc3ZGU3OTA5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmNveENuXGUwpPpQ9AHEFxw6nl1kkdISt6KW697uiJv719Q1/bOCvA2RL GPxS1z76IlFgbb7o6RAh98VkfjRxQc4ydxw1jIA8cqRR+igWvSF+lpRKSEqyRKcg ueZnCZsAF0osnCm0gW69+TjSj3rhisI6pLDRMXDyJNPEbyyFVAjwAYqDmH/veprk kA7sPlRtMovxoVoekMwjSm7Vqj7aNmdzalpZs0gJYVCRGAVsEPs3DigS43Heepsk ++9kISuetvukwUohZSNMh94ZNvxfl03be5TnnlE1CDaM2nvjzPqN9B1R3FhjZ2bg hi1tf/JmwVaOEwj/iwS/pQ51b669Yg== -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:12 2026 by rpki-client