$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa File: 2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa (raw, json) Hash identifier: 1uL/FNBpGHKIh7SIv+M57CndSuUSFwyW3S54RZzX58w= Subject key identifier: 7B:81:55:21:CE:C2:C9:6A:93:6B:2C:C0:45:E4:95:4D:D9:21:BA:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4E0679C36138F7C61660 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.72.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4e:06:79:c3:61:38:f7:c6:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=2f87d8ad-7569-4138-8012-9cc03d330424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:40:8d:6c:e8:de:2a:17:ea:a8:e5:a3:e3:f5: 86:6e:39:78:c3:e6:97:3b:81:b0:86:a8:b6:5a:dc: 8d:c0:c2:9a:da:9f:a6:38:c5:2a:9b:ef:1b:ba:1b: 45:50:64:6e:01:fc:11:c2:f3:86:bb:2b:f7:14:4c: ae:c0:6f:8a:b8:bd:db:7f:fc:35:36:6b:22:88:df: 99:0c:7a:3b:ae:a5:27:bd:4a:31:93:5d:fd:7f:34: 1e:b7:13:eb:dd:f4:e1:f5:e9:39:f0:61:89:fc:00: 56:73:ba:63:ce:7a:d5:ff:25:b8:e7:55:b0:f2:b5: 1b:e8:42:87:09:76:17:02:7e:e6:16:bf:ea:1b:43: 5c:1f:24:73:7f:b8:ac:f1:99:e8:bb:a8:26:29:0b: f4:f7:d3:5a:9b:1c:2a:c5:84:ed:1a:df:a8:ed:4f: b5:5d:eb:22:11:14:eb:d4:66:93:e4:90:bd:1a:e6: 9f:15:39:ce:a3:01:7d:8b:57:2a:b2:7e:d2:18:c8: 6f:07:e1:98:e2:e0:0a:4e:61:51:af:1e:e7:37:39: d8:21:13:d9:2c:ca:05:c3:c5:41:c1:13:c9:97:91: f0:57:49:4b:ef:38:02:95:5a:72:9b:a4:2d:b3:9f: 78:d5:75:83:c7:37:b2:f2:6f:d2:f3:0c:d8:61:b4: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:81:55:21:CE:C2:C9:6A:93:6B:2C:C0:45:E4:95:4D:D9:21:BA:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ad:88:04:91:9e:fa:f4:07:c7:a6:47:ef:94:7c:e5:f6:99: 4a:a4:85:51:a2:5b:af:9d:3d:8e:07:d1:f2:22:39:88:53:ea: d3:4c:84:60:b7:bf:c1:1d:e3:0a:c9:32:12:ab:76:ae:96:3c: 9f:74:f1:d6:92:83:e4:24:d0:2e:bb:af:47:6c:36:74:f5:f0: 5f:82:9b:f0:49:a7:8a:e4:2c:66:02:60:de:db:50:41:09:e9: dd:1d:95:c0:54:eb:da:34:67:c9:e2:7c:2a:1b:a4:e4:21:91: 86:1c:a0:7b:a3:f2:b9:32:71:78:97:b5:ea:41:61:7e:72:89: 3c:73:02:20:ad:60:c3:17:03:03:7f:67:70:f7:8c:d4:80:17: 6a:2a:85:b0:55:d6:39:52:52:c3:e9:43:39:33:10:f0:e3:df: 51:44:5f:e9:16:65:c2:5c:20:c4:1c:21:a0:01:0a:71:77:15: 7b:9d:52:66:1f:ba:a9:31:ae:e9:b9:ae:02:da:9c:f1:99:ee: d3:d2:36:d5:39:cf:d1:03:8f:75:78:5d:cb:5f:3f:91:41:43: b6:0f:86:de:40:a4:b6:17:67:f4:ed:d3:99:48:34:5c:7a:e2: 0b:db:50:88:82:c4:e1:52:7c:d8:84:19:c9:1d:24:56:42:2c: f2:29:fa:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqk4GecNhOPfGFmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MmY4N2Q4YWQtNzU2OS00MTM4LTgwMTItOWNjMDNkMzMwNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUCNbOjeKhfqqOWj4/WGbjl4w+aXO4Gwhqi2 WtyNwMKa2p+mOMUqm+8buhtFUGRuAfwRwvOGuyv3FEyuwG+KuL3bf/w1NmsiiN+Z DHo7rqUnvUoxk139fzQetxPr3fTh9ek58GGJ/ABWc7pjznrV/yW451Ww8rUb6EKH CXYXAn7mFr/qG0NcHyRzf7is8Znou6gmKQv099NamxwqxYTtGt+o7U+1XesiERTr 1GaT5JC9GuafFTnOowF9i1cqsn7SGMhvB+GY4uAKTmFRrx7nNznYIRPZLMoFw8VB wRPJl5HwV0lL7zgClVpym6Qts5941XWDxzey8m/S8wzYYbSBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuBVSHOwslqk2sswEXklU3ZIboRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmY4OWYyZmEtMTMxMS0z YjY4LThhZDktM2ZhY2NkZjc0ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAetiASRnvr0B8emR++UfOX2mUqkhVGiW6+dPY4H0fIiOYhT6tNMhGC3 v8Ed4wrJMhKrdq6WPJ908daSg+Qk0C67r0dsNnT18F+Cm/BJp4rkLGYCYN7bUEEJ 6d0dlcBU69o0Z8nifCobpOQhkYYcoHuj8rkycXiXtepBYX5yiTxzAiCtYMMXAwN/ Z3D3jNSAF2oqhbBV1jlSUsPpQzkzEPDj31FEX+kWZcJcIMQcIaABCnF3FXudUmYf uqkxrum5rgLanPGZ7tPSNtU5z9EDj3V4XctfP5FBQ7YPht5ApLYXZ/Tt05lINFx6 4gvbUIiCxOFSfNiEGckdJFZCLPIp+lE= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:38 2026 by rpki-client