$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa File: 3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa (raw, json) Hash identifier: 0G9miM1QsOhBYOwmq5OH3OEsdFSjj9EiE5YjU7vsnE4= Subject key identifier: 32:C1:BA:60:2C:84:6C:47:97:F1:0D:98:2A:0E:6E:AE:1F:74:0C:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA45A8A0C89A1B0A2A0F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.131.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:45:a8:a0:c8:9a:1b:0a:2a:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=7563e1d1-fa00-4c44-925b-e750a961d8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:0b:5d:50:99:6f:e7:4c:02:35:37:e4:7e: 08:6e:67:41:66:33:c6:34:4c:fd:64:8f:03:ad:23: 9f:33:ce:65:0c:e7:67:ae:c7:82:85:1b:c5:ab:20: 25:d7:56:ad:ab:13:8a:69:33:60:b0:c2:8a:ea:26: 60:fe:ac:e3:23:99:ee:38:c6:22:e6:24:79:c6:90: 2b:c4:53:56:54:8d:c4:f7:02:c5:3d:41:d3:52:64: 04:68:27:b6:02:29:4d:5c:97:e8:6a:97:a8:3e:46: 1b:f3:19:30:87:89:83:10:bd:d1:22:d8:6e:ac:10: 35:a9:a3:f4:8f:26:09:06:72:db:55:06:dd:a9:e6: b6:6f:d2:51:39:30:31:c0:b9:fd:7b:5b:5a:0c:94: 63:9e:46:9a:35:8d:01:78:94:d1:0a:fe:65:75:64: 7e:23:b6:56:6a:fa:69:d6:b5:45:f1:5a:4c:fa:65: bb:1c:23:16:2e:1e:bd:28:d7:05:74:4c:f4:76:e1: 19:e2:b3:a2:24:22:4b:31:9b:1d:68:21:ea:0f:a7: 68:ae:7b:47:b3:6f:43:d8:ef:44:87:97:fd:c3:b6: 8c:c7:3c:1c:20:bd:43:1c:06:fb:f6:dd:1d:99:d4: 91:b8:2e:fd:0d:54:02:ab:ae:2f:c8:6d:7b:66:4d: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:BA:60:2C:84:6C:47:97:F1:0D:98:2A:0E:6E:AE:1F:74:0C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bbeb244-6ca2-34c7-bcff-5657e0defff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:43:64:84:8c:fc:29:6f:ed:c0:14:8f:f5:90:be:9e:31:a4: da:2e:ec:94:3a:68:0b:3e:d5:75:9b:0c:33:4a:ae:b9:ef:df: b8:39:c2:48:df:8e:04:a7:68:d0:a8:93:34:26:14:50:e8:ed: 75:6c:f3:88:99:bd:47:5f:c3:ba:62:d6:85:2a:81:b3:6c:2d: 90:0c:d1:5c:fc:44:de:c4:00:27:18:64:13:59:5a:a7:d0:60: 42:9b:45:d7:d9:95:23:5e:00:c8:0a:5b:30:74:63:05:30:fb: 88:95:b8:75:2f:fc:27:d2:cb:20:6f:21:32:5e:bd:11:3e:d9: 93:b8:b5:59:1b:7f:aa:8e:1a:4a:75:73:49:5e:72:1b:46:70: 46:17:96:83:e7:dd:bf:e3:fa:a5:49:68:24:4d:1f:f9:ab:a0: da:58:1c:87:5f:44:bf:aa:6e:1e:73:30:d8:65:39:12:8f:f0: 41:03:e9:ab:f9:82:91:e8:41:53:c0:d6:f9:9f:91:99:1f:82: 2c:65:20:4c:42:07:5c:1c:a5:a8:88:7b:5b:83:98:eb:01:d2: dc:3d:74:db:1b:b1:0d:f6:2a:39:02:76:f3:c4:f0:1c:29:4f: ae:da:f6:2d:22:3e:3b:80:a6:e2:41:b1:39:7b:fa:d5:3b:0d: 86:7c:f8:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkWooMiaGwoqD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NzU2M2UxZDEtZmEwMC00YzQ0LTkyNWItZTc1MGE5NjFkOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoELXVCZb+dMAjU35H4IbmdBZjPGNEz9ZI8D rSOfM85lDOdnrseChRvFqyAl11atqxOKaTNgsMKK6iZg/qzjI5nuOMYi5iR5xpAr xFNWVI3E9wLFPUHTUmQEaCe2AilNXJfoapeoPkYb8xkwh4mDEL3RIthurBA1qaP0 jyYJBnLbVQbdqea2b9JROTAxwLn9e1taDJRjnkaaNY0BeJTRCv5ldWR+I7ZWavpp 1rVF8VpM+mW7HCMWLh69KNcFdEz0duEZ4rOiJCJLMZsdaCHqD6dorntHs29D2O9E h5f9w7aMxzwcIL1DHAb79t0dmdSRuC79DVQCq64vyG17Zk1OWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLBumAshGxHl/ENmCoObq4fdAyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JiZWIyNDQtNmNhMi0z NGM3LWJjZmYtNTY1N2UwZGVmZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhDZISM/Clv7cAUj/WQvp4xpNou7JQ6aAs+1XWbDDNKrrnv37g5wkjf jgSnaNCokzQmFFDo7XVs84iZvUdfw7pi1oUqgbNsLZAM0Vz8RN7EACcYZBNZWqfQ YEKbRdfZlSNeAMgKWzB0YwUw+4iVuHUv/CfSyyBvITJevRE+2ZO4tVkbf6qOGkp1 c0lechtGcEYXloPn3b/j+qVJaCRNH/mroNpYHIdfRL+qbh5zMNhlORKP8EED6av5 gpHoQVPA1vmfkZkfgixlIExCB1wcpaiIe1uDmOsB0tw9dNsbsQ32KjkCdvPE8Bwp T67a9i0iPjuApuJBsTl7+tU7DYZ8+GQ= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:46 2026 by rpki-client