$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa File: 2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa (raw, json) Hash identifier: mE7pPMBwAxgewtYNHrdAPJ+rEUnbnF+VmTCWh8DbVDA= Subject key identifier: B1:81:92:C9:7F:10:85:D7:97:31:59:14:40:C1:BB:AA:DC:7A:EF:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAAC60E7C1E8ECE1AC6000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.123.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ac:60:e7:c1:e8:ec:e1:ac:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=22b01292-3193-4d9e-845c-e6ada0655b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:46:33:16:c3:b8:9a:48:29:57:96:b9:f8:9d: 3c:a6:a3:d0:b2:73:d7:73:5c:cb:12:9f:73:aa:56: ac:cf:44:d8:87:2a:5e:3a:93:bd:2a:df:b2:b1:56: 9c:5d:9d:ab:34:40:0e:39:77:4c:fd:30:0d:89:65: 81:25:a1:c2:67:4a:02:be:76:de:95:1a:6c:5b:86: c6:7c:17:1c:d9:bf:5d:1f:4d:bc:1f:9a:10:63:6b: 7e:b5:5f:68:d1:63:90:02:27:c1:8a:52:bd:85:10: 31:ad:ee:fb:25:c0:a0:87:70:43:6e:99:da:ad:6d: 79:33:73:ef:14:aa:88:69:fb:98:72:92:a9:31:90: b9:5e:5a:82:cd:e3:3c:1a:3b:d4:dc:34:aa:60:64: f0:3a:b3:12:6b:be:5e:23:93:0b:57:ea:f9:9f:96: 43:22:29:10:9f:2e:91:a0:19:64:eb:69:d8:40:2c: 8e:e0:39:1b:be:29:f2:cc:8a:c4:9d:b4:44:81:31: 99:8f:b4:e2:99:b7:b4:20:ac:24:8b:2a:c2:1a:8f: 5f:b1:53:00:1f:4e:ca:ca:ee:97:87:2f:d4:0f:1c: 5c:64:b9:84:26:c1:0f:f1:e9:dc:f3:c1:81:12:4f: 08:d3:91:7c:27:d7:60:74:d9:c6:10:4a:e0:99:70: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:81:92:C9:7F:10:85:D7:97:31:59:14:40:C1:BB:AA:DC:7A:EF:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:40:37:3a:ff:94:2d:48:a6:6f:f5:9b:04:d6:6c:47:34:cf: 46:0c:34:c1:f7:af:7a:70:fd:87:6c:61:47:d9:1d:f0:69:da: 37:91:d3:ba:65:f9:d5:6f:6a:05:f4:0d:41:70:ec:55:11:ee: 05:ee:63:7b:e2:41:b3:82:07:69:16:67:95:4a:77:8c:76:e6: 45:45:95:a2:c2:a6:c3:6e:80:4d:d4:ca:42:d5:d2:48:0d:5a: 86:ac:31:8a:d8:e5:6d:21:2a:b6:46:02:eb:6d:21:6b:77:d5: d0:88:4d:43:6d:8b:45:bb:e9:48:21:e2:39:f0:f6:1b:7d:2f: f3:41:16:1b:63:fe:75:d3:43:dc:57:d4:2b:08:37:8d:1d:b6: 7f:5a:be:d7:7c:cf:80:1b:45:f8:d2:3a:5c:6f:c2:cd:e2:c1: 78:86:a4:ac:10:66:64:d9:6c:bb:14:8f:26:fd:70:17:39:49: 9c:df:54:f7:d3:22:45:67:98:b8:dd:3a:31:18:85:81:9f:d8: 32:aa:c8:cd:0e:a2:17:e4:2d:9c:13:7b:7b:21:9f:5a:1d:9d: 34:dc:2c:69:db:1a:be:91:07:54:f8:27:55:dc:c4:d3:28:9f: 28:0e:4b:2d:48:ab:cb:10:5b:75:70:b2:5b:67:6a:5d:bb:89: d3:c1:c0:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqxg58Ho7OGsYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjJiMDEyOTItMzE5My00ZDllLTg0NWMtZTZhZGEwNjU1Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kYzFsO4mkgpV5a5+J08pqPQsnPXc1zLEp9z qlasz0TYhypeOpO9Kt+ysVacXZ2rNEAOOXdM/TANiWWBJaHCZ0oCvnbelRpsW4bG fBcc2b9dH028H5oQY2t+tV9o0WOQAifBilK9hRAxre77JcCgh3BDbpnarW15M3Pv FKqIafuYcpKpMZC5XlqCzeM8GjvU3DSqYGTwOrMSa75eI5MLV+r5n5ZDIikQny6R oBlk62nYQCyO4DkbvinyzIrEnbREgTGZj7Timbe0IKwkiyrCGo9fsVMAH07Kyu6X hy/UDxxcZLmEJsEP8enc88GBEk8I05F8J9dgdNnGEErgmXBSWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGBksl/EIXXlzFZFEDBu6rceu88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJkODViYTAtNTU0OS0z Y2E2LTk2ODEtMWM1MzFkY2QwYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNANzr/lC1Ipm/1mwTWbEc0z0YMNMH3r3pw/YdsYUfZHfBp2jeR07pl +dVvagX0DUFw7FUR7gXuY3viQbOCB2kWZ5VKd4x25kVFlaLCpsNugE3UykLV0kgN WoasMYrY5W0hKrZGAuttIWt31dCITUNti0W76Ugh4jnw9ht9L/NBFhtj/nXTQ9xX 1CsIN40dtn9avtd8z4AbRfjSOlxvws3iwXiGpKwQZmTZbLsUjyb9cBc5SZzfVPfT IkVnmLjdOjEYhYGf2DKqyM0OohfkLZwTe3shn1odnTTcLGnbGr6RB1T4J1XcxNMo nygOSy1Iq8sQW3Vwsltnal27idPBwAw= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:29 2026 by rpki-client