$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa File: 38c76d76-452e-3704-ab32-58fef977e5ea.roa (raw, json) Hash identifier: Cns/hN5PGgpYxC4J/BBkrIkXRH5vZCU0PXUMOkZ4Iog= Subject key identifier: 50:6A:D9:15:8D:45:3B:5E:36:7C:B4:FD:F2:0A:88:67:31:B4:AD:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA8361474D76DD8B0AE180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.152.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:83:61:47:4d:76:dd:8b:0a:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ba456b81-2ed5-4389-b701-5147342b814f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:15:0d:aa:bc:bb:57:56:a3:64:28:d6:7f: 0f:e2:b1:e4:f4:51:83:d5:ba:f9:2c:59:1c:61:82: 44:1c:84:b8:9e:67:12:e6:e5:25:a3:72:d5:c1:6c: 7c:ef:ad:3b:8a:ac:f9:45:b7:11:1c:6d:35:1b:b6: 83:ff:25:12:4f:2a:da:b9:dc:bd:8e:77:fa:a9:46: 4c:d4:63:05:b6:44:58:c6:27:bc:05:da:06:39:f3: d2:8d:c9:c3:27:f7:3b:68:97:da:1e:ae:d8:5e:f2: 6a:0a:c5:27:da:54:37:d2:b3:97:a4:f3:ba:17:39: 16:53:f6:46:5c:57:42:3d:d7:72:6b:0c:77:9b:9f: 1a:7f:cb:6b:44:d0:4a:e9:e1:be:72:cf:74:a6:94: 97:ac:12:ef:30:90:62:8d:0f:e7:a2:f3:03:06:dc: 74:f1:56:37:98:a0:3c:51:ca:de:77:0b:ef:4f:9f: aa:9c:b6:14:47:64:4a:89:ed:b8:e0:ee:0a:aa:a6: c9:f8:f5:a5:f6:5c:7c:09:6b:b8:77:b3:2b:3c:02: c5:a1:f8:d5:8e:58:4d:d1:3d:a3:6c:09:98:19:9a: 5f:f2:e3:69:75:6c:08:7b:f8:bc:09:14:aa:d8:a2: 25:7a:fc:dd:d2:18:8c:b3:17:4d:bb:e1:30:1e:f3: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6A:D9:15:8D:45:3B:5E:36:7C:B4:FD:F2:0A:88:67:31:B4:AD:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5f:c2:7a:34:f9:47:90:01:64:57:96:77:be:1c:46:df:ab: 10:39:36:79:65:53:20:18:4b:80:48:0f:f1:31:77:8b:8e:3d: 4b:33:67:9d:c2:f1:b6:f8:0f:9d:70:c4:1a:8e:c8:a8:cd:c4: 98:a2:22:43:43:71:c3:0d:5f:22:d5:e7:a2:d1:cc:4f:72:20: 6b:32:40:f6:b2:e1:80:43:4b:3e:f6:3a:2e:6c:7c:f8:e1:7c: 3e:11:17:7d:25:56:07:71:ec:7f:0b:10:9f:f4:4f:b3:b5:3f: 7a:25:61:34:87:d8:32:01:f9:ed:24:a9:b4:ea:3b:66:8e:c9: 3c:f4:6a:fc:fc:ed:01:13:1f:98:4d:86:b3:93:6d:e1:73:20: 25:e0:1b:46:8e:e8:96:f8:1c:b1:8c:4b:b6:60:cc:30:67:a2: 95:22:74:a8:b1:d2:ad:a3:aa:df:fd:9e:43:63:ed:47:71:0e: 55:fe:01:b4:d5:59:29:44:c8:bf:6b:be:a4:eb:66:73:1b:4b: b1:3d:08:97:66:eb:8d:00:8a:6d:d4:98:e1:47:54:a4:2b:6c: a0:cc:7c:95:83:6c:3b:c6:b3:4b:bf:b6:97:60:fd:1a:34:f0: ee:62:78:15:09:59:4b:7f:28:be:3c:c3:36:e5:57:0c:90:5e: f5:6c:46:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoNhR0123YsK4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmE0NTZiODEtMmVkNS00Mzg5LWI3MDEtNTE0NzM0MmI4MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx8VDaq8u1dWo2Qo1n8P4rHk9FGD1br5LFkc YYJEHIS4nmcS5uUlo3LVwWx87607iqz5RbcRHG01G7aD/yUSTyraudy9jnf6qUZM 1GMFtkRYxie8BdoGOfPSjcnDJ/c7aJfaHq7YXvJqCsUn2lQ30rOXpPO6FzkWU/ZG XFdCPddyawx3m58af8trRNBK6eG+cs90ppSXrBLvMJBijQ/novMDBtx08VY3mKA8 UcredwvvT5+qnLYUR2RKie244O4KqqbJ+PWl9lx8CWu4d7MrPALFofjVjlhN0T2j bAmYGZpf8uNpdWwIe/i8CRSq2KIlevzd0hiMsxdNu+EwHvPbUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBq2RWNRTteNny0/fIKiGcxtK0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzhjNzZkNzYtNDUyZS0z NzA0LWFiMzItNThmZWY5NzdlNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBfwno0+UeQAWRXlne+HEbfqxA5NnllUyAYS4BID/Exd4uOPUszZ53C 8bb4D51wxBqOyKjNxJiiIkNDccMNXyLV56LRzE9yIGsyQPay4YBDSz72Oi5sfPjh fD4RF30lVgdx7H8LEJ/0T7O1P3olYTSH2DIB+e0kqbTqO2aOyTz0avz87QETH5hN hrOTbeFzICXgG0aO6Jb4HLGMS7ZgzDBnopUidKix0q2jqt/9nkNj7UdxDlX+AbTV WSlEyL9rvqTrZnMbS7E9CJdm640Aim3UmOFHVKQrbKDMfJWDbDvGs0u/tpdg/Ro0 8O5ieBUJWUt/KL48wzblVwyQXvVsRhc= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:13 2026 by rpki-client