$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa File: 3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa (raw, json) Hash identifier: yQoe94eTIQR8Yb1diZf0kRQKaAZDV3mMT4hPtUnacrQ= Subject key identifier: AB:B9:87:8E:E9:10:6B:D5:08:A5:48:98:12:01:64:BE:F6:62:65:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB6650D77F49F39E77380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.87.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b6:65:0d:77:f4:9f:39:e7:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=5ce9f6c1-4574-414f-9131-937723bae9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:95:19:f3:aa:a4:cd:0f:02:d8:cb:7d:c0: bf:1c:05:7c:ab:21:44:14:bc:21:cc:17:0a:4d:e4: 8e:14:70:cc:c1:d3:98:1b:08:1c:a8:b4:98:05:ab: a6:d8:7b:82:2a:3e:3e:5b:7d:b6:3c:e9:ec:a3:0d: 2c:dc:c4:c4:dd:b4:59:0d:8c:4a:8d:ac:71:a4:ab: 8a:6c:af:0d:59:bf:d8:61:93:3c:8f:4c:a0:86:42: ce:50:75:f7:a1:0b:fc:51:f0:5e:60:45:fb:e9:7d: 94:d8:d4:32:ce:68:ba:cd:43:ab:ad:9a:f1:7b:c9: 3a:25:af:58:f5:11:97:3e:4f:9d:87:4b:1c:9e:bb: d1:a4:20:79:80:95:26:38:99:68:8d:31:78:dd:5c: ea:89:99:e7:af:9b:bb:70:5d:bd:8c:7b:59:08:eb: 4d:36:d1:ad:fb:f4:df:f4:55:94:27:b7:88:22:ff: c5:73:9c:f2:3e:0e:8e:50:38:25:73:fa:c2:2d:32: f1:89:5e:1a:26:18:bb:f4:cf:03:50:09:6b:0b:a4: 67:8b:6e:af:2d:eb:2f:c7:90:14:98:f4:c6:7a:9e: 2f:db:7a:29:fe:bf:b4:55:ce:9e:d3:49:cd:59:55: e3:d8:99:28:be:a7:e9:79:44:30:b5:53:93:6f:e7: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:87:8E:E9:10:6B:D5:08:A5:48:98:12:01:64:BE:F6:62:65:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e8:c2:8a:ed:a1:1d:8a:77:c5:8f:c3:08:49:07:78:66:49: e7:92:82:6f:0d:3f:f7:6c:ff:d2:1e:12:31:1c:8d:c7:42:88: b5:25:29:dd:a8:1f:4c:17:65:67:5e:69:1e:02:e1:d4:20:85: 6e:8e:ba:e0:a7:94:35:2e:10:de:ab:41:75:4e:47:79:5e:24: b9:de:6c:fb:4f:20:5c:6b:58:15:3a:c2:61:fa:40:41:0d:22: d4:eb:de:74:5a:5d:3f:c5:1e:82:4d:09:7c:44:f6:3e:c5:c6: 17:12:4c:9b:c8:5e:13:70:06:39:1b:16:58:06:a9:c2:d1:b4: a7:7b:d7:91:d0:b2:5f:a3:0e:b1:dc:bb:51:a9:ea:8a:2b:c1: 52:0f:49:bd:4a:a0:f6:7e:e5:6f:e7:1a:81:7f:e3:2a:83:00: ed:b4:de:bf:0b:72:ba:4f:23:ae:22:09:26:40:e1:f8:7a:bd: 94:d8:d9:f2:b2:79:f7:60:35:27:05:d9:10:8c:67:14:3b:e3: 65:2d:d9:ba:a8:a2:2b:ec:36:b8:e9:bd:3c:48:6b:cb:4b:b2: d8:0a:5c:4d:4c:53:7f:6b:8c:81:7d:01:04:6a:0c:73:cc:4d: 8b:12:71:45:20:e1:2d:aa:48:bf:01:d2:c1:07:36:8e:4f:d0: b3:13:17:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrZlDXf0nznnc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NWNlOWY2YzEtNDU3NC00MTRmLTkxMzEtOTM3NzIzYmFlOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3qVGfOqpM0PAtjLfcC/HAV8qyFEFLwhzBcK TeSOFHDMwdOYGwgcqLSYBaum2HuCKj4+W322POnsow0s3MTE3bRZDYxKjaxxpKuK bK8NWb/YYZM8j0yghkLOUHX3oQv8UfBeYEX76X2U2NQyzmi6zUOrrZrxe8k6Ja9Y 9RGXPk+dh0scnrvRpCB5gJUmOJlojTF43VzqiZnnr5u7cF29jHtZCOtNNtGt+/Tf 9FWUJ7eIIv/Fc5zyPg6OUDglc/rCLTLxiV4aJhi79M8DUAlrC6Rni26vLesvx5AU mPTGep4v23op/r+0Vc6e00nNWVXj2JkovqfpeUQwtVOTb+eEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKu5h47pEGvVCKVImBIBZL72YmXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JhOWVjOTYtMGUyNC0z NTMyLWJiZjAtOTg2YzhlZjIwMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHowortoR2Kd8WPwwhJB3hmSeeSgm8NP/ds/9IeEjEcjcdCiLUlKd2o H0wXZWdeaR4C4dQghW6OuuCnlDUuEN6rQXVOR3leJLnebPtPIFxrWBU6wmH6QEEN ItTr3nRaXT/FHoJNCXxE9j7FxhcSTJvIXhNwBjkbFlgGqcLRtKd715HQsl+jDrHc u1Gp6oorwVIPSb1KoPZ+5W/nGoF/4yqDAO203r8LcrpPI64iCSZA4fh6vZTY2fKy efdgNScF2RCMZxQ742Ut2bqooivsNrjpvTxIa8tLstgKXE1MU39rjIF9AQRqDHPM TYsScUUg4S2qSL8B0sEHNo5P0LMTFxA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:39 2026 by rpki-client