$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa File: 33f7bbe6-9997-3a80-85e2-40e243874534.roa (raw, json) Hash identifier: R7BzevaEqk/qY1ajXuNTOcqL8BnJ871zsWH3DUq5PSo= Subject key identifier: 5A:05:13:EC:21:7D:BA:55:F7:49:1C:0B:87:FD:6B:9F:6F:97:99:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E02ADE4652C969A32D9B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.103.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2a:de:46:52:c9:69:a3:2d:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7011dafc-ff88-46a4-9d2d-2abcbc89088b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3a:32:b8:a8:9d:cb:29:93:b0:6c:19:93:93: 18:f4:27:24:40:8f:14:f3:80:60:1d:52:22:cd:c5: b3:c4:ff:bb:0c:b6:79:ac:d9:ca:7a:a0:a0:ec:25: 96:92:4b:61:e0:ef:b8:67:f7:aa:1c:3b:71:42:fd: 30:f2:5a:f4:0e:a5:96:53:07:57:0a:cd:21:0a:f8: 20:5f:f3:b5:e5:35:f6:ef:4f:b2:49:3b:24:05:04: cb:48:9d:5b:ec:8c:bd:7d:58:a6:83:3c:8c:30:77: cc:bb:90:6e:a9:f3:51:bd:ac:52:5f:13:d5:c7:11: 9e:4f:89:47:a1:15:9c:51:34:51:9b:25:52:1e:84: bb:b6:17:af:14:44:20:09:52:04:fe:fd:a2:39:db: c3:8a:3d:8e:06:6f:a7:43:12:00:54:72:ff:61:9a: 77:b7:f6:84:bb:55:d1:4c:fe:c1:76:67:4c:79:3d: 44:a0:dc:ad:6f:a8:43:c8:38:bd:6f:66:be:46:ab: f2:51:e0:f4:04:ba:cc:dd:67:86:59:79:71:5a:6d: bb:6e:ab:12:0e:72:86:98:d5:a0:0e:3c:19:4d:b4: da:03:f6:91:09:71:9e:db:e8:d0:2b:d8:ba:cf:c9: 5d:ba:b1:65:ee:db:63:97:f5:d2:60:76:5f:28:4a: 3f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:13:EC:21:7D:BA:55:F7:49:1C:0B:87:FD:6B:9F:6F:97:99:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.103.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e8:04:7e:6b:08:d6:24:4f:3d:91:16:55:cc:a7:31:14:db: ea:9d:8d:0b:0c:f5:60:da:13:86:3e:52:1f:99:66:a6:ec:8c: d3:a3:b3:d6:90:b9:3a:5d:5b:8e:6e:58:15:b8:4e:d8:ad:d0: 02:3b:e7:ca:70:07:d5:95:6e:dc:6f:f5:95:52:80:33:19:96: 1c:4b:99:27:25:63:04:9f:0e:50:2e:e5:8a:5d:52:1f:f1:c2: 85:17:03:06:58:b8:80:da:d1:cf:2e:35:ca:64:1b:fd:f6:57: 16:f8:a7:c9:a3:0e:21:fe:a6:0a:d7:7d:8c:40:dd:e8:6c:9e: f6:a8:14:29:21:4c:4d:29:78:63:a1:95:1e:f4:49:55:14:8b: 83:bc:05:9a:13:52:92:8c:b9:db:a7:b9:81:d6:57:51:21:df: 7b:4a:e6:e2:51:5d:db:5f:53:e5:47:d1:fe:12:0d:10:bf:ec: 78:51:c1:63:03:cf:8a:2c:4a:63:0c:5b:ca:7b:1a:24:90:aa: 30:da:46:46:f9:b9:53:32:58:90:e5:92:8c:b9:b9:8b:7b:9f: 46:e9:82:54:30:73:4d:da:76:c4:11:97:17:65:d2:91:90:f0: 11:57:93:e5:98:cf:dc:ac:26:f1:77:83:6d:3c:a3:71:02:03: be:5e:d9:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CreRlLJaaMtmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzAxMWRhZmMtZmY4OC00NmE0LTlkMmQtMmFiY2JjODkwODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjoyuKidyymTsGwZk5MY9CckQI8U84BgHVIi zcWzxP+7DLZ5rNnKeqCg7CWWkkth4O+4Z/eqHDtxQv0w8lr0DqWWUwdXCs0hCvgg X/O15TX270+ySTskBQTLSJ1b7Iy9fVimgzyMMHfMu5BuqfNRvaxSXxPVxxGeT4lH oRWcUTRRmyVSHoS7thevFEQgCVIE/v2iOdvDij2OBm+nQxIAVHL/YZp3t/aEu1XR TP7BdmdMeT1EoNytb6hDyDi9b2a+RqvyUeD0BLrM3WeGWXlxWm27bqsSDnKGmNWg DjwZTbTaA/aRCXGe2+jQK9i6z8ldurFl7ttjl/XSYHZfKEo/mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoFE+whfbpV90kcC4f9a59vl5niMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNmN2JiZTYtOTk5Ny0z YTgwLTg1ZTItNDBlMjQzODc0NTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvoBH5rCNYkTz2RFlXMpzEU2+qdjQsM9WDaE4Y+Uh+ZZqbsjNOjs9aQ uTpdW45uWBW4Ttit0AI758pwB9WVbtxv9ZVSgDMZlhxLmSclYwSfDlAu5YpdUh/x woUXAwZYuIDa0c8uNcpkG/32Vxb4p8mjDiH+pgrXfYxA3ehsnvaoFCkhTE0peGOh lR70SVUUi4O8BZoTUpKMudunuYHWV1Eh33tK5uJRXdtfU+VH0f4SDRC/7HhRwWMD z4osSmMMW8p7GiSQqjDaRkb5uVMyWJDlkoy5uYt7n0bpglQwc03adsQRlxdl0pGQ 8BFXk+WYz9ysJvF3g208o3ECA75e2YQ= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:20 2026 by rpki-client