$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa File: 2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa (raw, json) Hash identifier: YEHpZh+QLl2kAqq+6xApbJKv0u6wUxsPsKilcmNzuHI= Subject key identifier: 64:56:5D:EC:72:1A:63:54:11:8B:72:C2:F0:4F:65:D9:3F:E0:17:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA55CA60F1CD47BBF083C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:55:ca:60:f1:cd:47:bb:f0:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=fc763cff-864c-4dc4-9f41-e53a9c9d8b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:81:70:29:bd:77:c4:30:04:66:eb:c2:3e: e0:42:cd:3b:b2:9e:23:7c:2e:ed:d6:7b:1d:6e:bf: 56:45:14:76:e0:2a:88:97:df:3f:7f:50:8c:cf:ad: f2:a5:79:7f:3e:c9:6b:a8:80:45:75:66:36:5b:cc: 62:78:7f:8b:5d:62:b8:ad:6a:d2:2b:63:e4:c5:37: cd:60:88:35:9c:fe:10:d5:08:91:df:e3:7a:75:e5: dc:d0:de:55:e8:e1:8c:8b:ff:2e:ef:14:07:59:4b: 11:cf:bd:5c:c9:f8:81:c7:b2:a8:80:18:da:36:35: 08:93:b5:70:7e:83:3d:5d:10:6c:e1:9e:9a:86:98: 9f:40:55:4e:f7:82:23:04:14:2c:bf:65:70:35:f2: 07:c7:d1:64:1a:b0:92:10:c5:ba:d7:19:e3:df:90: b8:ed:a8:df:c3:4a:81:b4:4e:23:0e:98:b8:18:95: 59:f5:7c:f5:94:b3:49:03:a1:58:f3:01:b3:01:65: 22:07:e4:4f:fe:be:92:09:34:76:56:c2:35:4d:44: 84:bb:d4:6b:50:e0:9b:ee:8c:10:3c:be:6e:2b:b0: cc:53:8f:50:34:b8:a1:13:4e:74:b6:bb:b4:84:98: b4:3b:2a:fc:cd:24:56:08:8c:53:75:d4:e9:1a:06: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:56:5D:EC:72:1A:63:54:11:8B:72:C2:F0:4F:65:D9:3F:E0:17:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fc:6d:21:a3:f9:8f:03:b3:04:67:fb:2a:f6:26:61:ed:99: 4d:53:fd:52:a9:1c:5a:f5:20:f6:57:8e:50:bc:70:8d:ce:6a: 96:23:10:f1:43:16:22:7c:4b:cd:0b:bf:29:ed:bf:73:4a:67: 56:dc:3f:41:99:22:02:1d:a4:dd:1d:4f:f1:68:13:e4:de:48: 38:d8:33:69:e4:0c:05:c5:61:23:20:f3:4b:c1:f8:46:b6:a3: 09:f4:10:5f:11:b2:57:dc:c1:ff:c6:34:69:13:14:2b:5a:9d: da:4e:7d:d0:54:6a:5a:9c:b9:4b:90:3c:a8:a3:07:72:b1:12: 47:57:01:b3:69:78:6d:bf:72:aa:63:88:2f:f2:0e:53:26:b4: bf:dd:5e:be:c9:cf:a6:4a:41:90:f0:ad:ae:d5:1e:14:4b:ca: a2:00:d8:8b:81:6b:1c:89:98:34:a1:24:59:85:32:f7:60:78: 3a:be:e2:29:85:5b:2d:dd:ec:7c:47:ba:51:ca:9a:64:bd:dc: 09:78:e9:73:c5:52:c8:5e:12:98:66:99:10:21:a7:3c:ea:e9: 7c:5d:b2:8d:60:6d:a6:46:9d:ca:d7:1a:15:36:41:60:65:82: e3:52:8b:87:9b:b5:b9:f2:ee:b9:b4:25:8e:1a:14:2b:12:ed: ec:54:b1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlXKYPHNR7vwg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmM3NjNjZmYtODY0Yy00ZGM0LTlmNDEtZTUzYTljOWQ4YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtquBcCm9d8QwBGbrwj7gQs07sp4jfC7t1nsd br9WRRR24CqIl98/f1CMz63ypXl/PslrqIBFdWY2W8xieH+LXWK4rWrSK2PkxTfN YIg1nP4Q1QiR3+N6deXc0N5V6OGMi/8u7xQHWUsRz71cyfiBx7KogBjaNjUIk7Vw foM9XRBs4Z6ahpifQFVO94IjBBQsv2VwNfIHx9FkGrCSEMW61xnj35C47ajfw0qB tE4jDpi4GJVZ9Xz1lLNJA6FY8wGzAWUiB+RP/r6SCTR2VsI1TUSEu9RrUOCb7owQ PL5uK7DMU49QNLihE050tru0hJi0Oyr8zSRWCIxTddTpGga3RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRWXexyGmNUEYtywvBPZdk/4BcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNhNzMzYjItOGM5OS0z YWIyLWE3ZjQtNzUyYWQxNmUxMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIoAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz8bSGj+Y8DswRn+yr2JmHtmU1T/VKpHFr1IPZXjlC8cI3OapYjEPFD FiJ8S80Lvyntv3NKZ1bcP0GZIgIdpN0dT/FoE+TeSDjYM2nkDAXFYSMg80vB+Ea2 own0EF8Rslfcwf/GNGkTFCtandpOfdBUalqcuUuQPKijB3KxEkdXAbNpeG2/cqpj iC/yDlMmtL/dXr7Jz6ZKQZDwra7VHhRLyqIA2IuBaxyJmDShJFmFMvdgeDq+4imF Wy3d7HxHulHKmmS93Al46XPFUsheEphmmRAhpzzq6Xxdso1gbaZGncrXGhU2QWBl guNSi4ebtbny7rm0JY4aFCsS7exUsb0= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:31 2026 by rpki-client