$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa File: 36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa (raw, json) Hash identifier: r1qepGhhUfxteMr3UzoA4P2ewvGvCBS+eSr5MpLEjiE= Subject key identifier: B1:54:9E:47:0D:4F:D0:E7:73:C1:27:3D:9E:F7:16:94:77:87:D4:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA79853E539FB7864B1700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.67.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:79:85:3e:53:9f:b7:86:4b:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e0e853dc-0e7f-4a43-bd79-d602cc7b1b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4d:19:28:6a:ba:f7:71:fc:45:91:ca:a4:f7: 67:86:6b:9c:3e:c3:65:f6:a8:48:28:ac:f9:f6:5a: 69:fb:4e:69:21:d4:b3:62:90:28:43:a9:2a:20:a8: 83:87:f8:58:af:f1:37:4a:af:7b:ae:32:d0:ad:01: 7f:65:b4:bd:e1:20:37:3c:c0:8d:be:b6:88:07:b8: d6:39:a1:c0:39:79:5e:c1:aa:14:4c:6b:dc:5e:bd: ac:7c:b2:98:ce:a2:92:9a:f4:39:8e:d0:01:39:28: ce:9c:56:d2:08:c7:54:47:13:bd:87:64:9c:2c:10: ca:50:04:9c:e8:d8:9e:ca:41:e2:60:10:ad:a3:1e: cb:24:21:19:c5:75:d5:91:30:e5:17:07:2b:52:f7: f8:09:2d:db:49:ca:eb:fe:8e:a9:65:a3:27:24:ce: 0a:d3:f5:8b:0b:d1:42:08:98:1e:19:fd:d4:45:41: cc:57:6d:9d:fe:68:94:c2:cb:1a:1c:9c:20:46:6d: bb:73:ae:14:26:80:d9:d2:4c:72:84:9f:79:09:6d: e2:87:dc:2c:11:4b:13:81:fc:64:b3:5d:89:10:06: e3:52:23:53:ab:d5:cc:8d:0b:df:36:7e:52:c0:a0: ac:38:1e:3d:e0:88:cd:a7:6a:b4:68:55:92:e9:6c: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:54:9E:47:0D:4F:D0:E7:73:C1:27:3D:9E:F7:16:94:77:87:D4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:81:df:9b:33:06:b2:b8:40:da:a7:25:64:39:98:63:97:c2: 34:f2:a3:a0:85:83:06:86:71:97:dd:b3:81:b4:6d:a5:80:57: a1:e0:c8:54:98:08:12:d6:5d:7a:b0:74:d8:e9:98:d6:9b:9d: e9:fd:6f:73:ef:33:22:aa:cf:68:85:9f:9a:19:bc:c6:64:ad: 11:18:44:e0:bd:27:1e:93:4a:9f:67:6d:4f:92:96:73:a8:50: a6:2f:43:95:d9:4c:12:93:77:0d:38:8f:55:36:57:ec:bf:0b: 58:28:c0:a7:59:57:d1:b7:bc:84:ec:ca:7e:be:33:69:4d:2d: ed:07:ee:78:57:c8:e5:76:15:f3:d1:95:3f:f4:51:42:d6:b8: e4:e1:91:38:25:26:45:c3:7e:2d:af:a2:2f:9e:c8:8e:b9:16: c0:90:61:5f:a6:00:26:20:de:f4:58:71:97:cd:c3:13:26:a7: 90:63:59:ae:ae:91:91:56:86:a5:c2:d5:98:a8:ee:04:b5:9b: 7e:e5:c7:53:87:91:af:aa:0d:b5:e8:e0:bf:10:b8:be:b6:4c: 5d:0c:eb:31:80:79:32:43:59:0e:18:29:9c:c0:85:b2:9c:7e: 72:ee:4d:86:bf:8c:d8:5c:56:b1:fd:28:87:04:21:48:d9:f1: e9:04:e0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnmFPlOft4ZLFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTBlODUzZGMtMGU3Zi00YTQzLWJkNzktZDYwMmNjN2IxYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj00ZKGq693H8RZHKpPdnhmucPsNl9qhIKKz5 9lpp+05pIdSzYpAoQ6kqIKiDh/hYr/E3Sq97rjLQrQF/ZbS94SA3PMCNvraIB7jW OaHAOXlewaoUTGvcXr2sfLKYzqKSmvQ5jtABOSjOnFbSCMdURxO9h2ScLBDKUASc 6NieykHiYBCtox7LJCEZxXXVkTDlFwcrUvf4CS3bScrr/o6pZaMnJM4K0/WLC9FC CJgeGf3URUHMV22d/miUwssaHJwgRm27c64UJoDZ0kxyhJ95CW3ih9wsEUsTgfxk s12JEAbjUiNTq9XMjQvfNn5SwKCsOB494IjNp2q0aFWS6WwZrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFUnkcNT9Dnc8EnPZ73FpR3h9QXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzZkMTdlNzUtOGY5Yi0z YjgyLTg5ZTQtNDBkNTEwMmJmM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6B35szBrK4QNqnJWQ5mGOXwjTyo6CFgwaGcZfds4G0baWAV6HgyFSY CBLWXXqwdNjpmNabnen9b3PvMyKqz2iFn5oZvMZkrREYROC9Jx6TSp9nbU+SlnOo UKYvQ5XZTBKTdw04j1U2V+y/C1gowKdZV9G3vITsyn6+M2lNLe0H7nhXyOV2FfPR lT/0UULWuOThkTglJkXDfi2voi+eyI65FsCQYV+mACYg3vRYcZfNwxMmp5BjWa6u kZFWhqXC1Zio7gS1m37lx1OHka+qDbXo4L8QuL62TF0M6zGAeTJDWQ4YKZzAhbKc fnLuTYa/jNhcVrH9KIcEIUjZ8ekE4LE= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:22 2026 by rpki-client