$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa File: 3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa (raw, json) Hash identifier: akRbCbfmrzSR5vR6eeBztm2slaUFp7vt0nM4f+N+eBQ= Subject key identifier: E4:84:CD:5C:89:D2:BD:45:B3:B7:D5:98:41:D0:E1:39:B6:16:08:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA76814CEB044E5007F7C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.85.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:76:81:4c:eb:04:4e:50:07:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e2b97811-f0f7-4f06-8f00-acc76fba8893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:63:f7:1d:11:48:a8:0c:7e:36:32:5e:c3: e3:dd:9b:57:a7:3c:ed:de:64:1c:14:8b:83:6a:83: 46:fe:40:a7:98:8b:01:84:55:7e:d8:af:34:87:4f: 4f:4d:0b:15:b8:6a:8c:25:d8:43:e5:ad:a5:60:fb: d0:ba:43:c1:bf:f0:69:2d:ca:6c:22:75:81:42:87: f5:24:8e:b0:e5:c2:79:d5:c0:bb:db:9a:f1:89:b1: b6:32:b4:c5:4d:8f:8b:19:c4:a2:b2:99:75:26:19: 11:6f:73:a4:d9:48:45:6a:63:6a:fa:59:a0:d8:97: c1:d4:89:90:10:3c:94:f5:cc:58:01:31:8b:eb:28: ca:7f:7b:d7:9a:49:38:b4:47:9c:25:0a:5b:15:fe: b8:8b:52:6b:93:df:2a:b0:77:fd:3f:1e:7e:71:68: 8b:d5:25:6c:17:86:06:2d:87:45:11:92:d6:77:3e: fb:fa:1d:8e:4a:ae:51:18:0c:33:a9:41:9a:56:71: 3b:9d:88:15:56:3b:5d:6d:52:bb:a4:b2:ba:ce:b8: 9e:1a:16:ee:f5:6c:5d:f4:cb:dc:5b:ad:68:37:b6: 14:3b:d4:8e:19:42:d9:db:3a:45:7f:af:49:0c:d0: 68:df:f9:76:10:cc:ad:0b:7c:53:c0:20:05:63:39: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:CD:5C:89:D2:BD:45:B3:B7:D5:98:41:D0:E1:39:B6:16:08:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:44:48:24:b9:57:38:37:52:c0:4c:73:43:1f:2a:d0:16:b9: 23:43:01:03:1d:11:76:7c:c5:be:da:a9:6d:81:e9:f9:ee:5c: 2e:3e:ce:2b:c5:c9:bb:5c:39:2b:70:e5:40:a6:e4:a1:cd:e2: 56:58:2e:48:19:63:73:50:b2:92:cf:fb:a1:32:63:de:95:49: a2:51:2b:1a:55:dd:36:30:e9:8d:9c:6a:23:6c:c5:46:93:b4: ab:40:a2:79:b0:d6:e1:af:e7:eb:f2:53:fa:40:f7:11:66:00: 20:90:ae:1e:ad:3c:97:e2:89:e4:65:3e:a8:07:20:45:47:1f: 29:63:36:e5:94:6d:c4:e9:71:bb:42:17:04:6e:76:31:65:36: 90:ea:2f:b4:bb:b0:36:87:3b:2d:9c:91:6e:9e:a2:24:d9:79: d9:a2:1e:f9:d3:f2:6c:87:8a:21:f8:ad:a9:b6:47:01:4e:69: 61:fe:4e:93:c4:7c:9c:6e:94:13:7f:14:3d:86:b3:00:cb:d7: 0b:b6:a7:89:cc:72:81:db:d0:2b:ee:09:85:b7:29:cf:f3:7d: ca:be:50:93:e7:eb:0d:bb:e4:ba:f8:ec:ee:b1:e6:49:4d:05: fc:63:b3:ce:31:f4:ac:57:31:ef:f3:8d:33:d1:ce:2d:89:79: f1:5d:0b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnaBTOsETlAH98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTJiOTc4MTEtZjBmNy00ZjA2LThmMDAtYWNjNzZmYmE4ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaNj9x0RSKgMfjYyXsPj3ZtXpzzt3mQcFIuD aoNG/kCnmIsBhFV+2K80h09PTQsVuGqMJdhD5a2lYPvQukPBv/BpLcpsInWBQof1 JI6w5cJ51cC725rxibG2MrTFTY+LGcSispl1JhkRb3Ok2UhFamNq+lmg2JfB1ImQ EDyU9cxYATGL6yjKf3vXmkk4tEecJQpbFf64i1Jrk98qsHf9Px5+cWiL1SVsF4YG LYdFEZLWdz77+h2OSq5RGAwzqUGaVnE7nYgVVjtdbVK7pLK6zrieGhbu9Wxd9Mvc W61oN7YUO9SOGULZ2zpFf69JDNBo3/l2EMytC3xTwCAFYzlECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSEzVyJ0r1Fs7fVmEHQ4Tm2FgjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NkYmU5YTYtMTAyNC0z NmI1LTg3ZGMtNDA2ZTRkZWI4OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxESCS5Vzg3UsBMc0MfKtAWuSNDAQMdEXZ8xb7aqW2B6fnuXC4+zivF ybtcOStw5UCm5KHN4lZYLkgZY3NQspLP+6EyY96VSaJRKxpV3TYw6Y2caiNsxUaT tKtAonmw1uGv5+vyU/pA9xFmACCQrh6tPJfiieRlPqgHIEVHHyljNuWUbcTpcbtC FwRudjFlNpDqL7S7sDaHOy2ckW6eoiTZedmiHvnT8myHiiH4ram2RwFOaWH+TpPE fJxulBN/FD2GswDL1wu2p4nMcoHb0CvuCYW3Kc/zfcq+UJPn6w275Lr47O6x5klN Bfxjs84x9KxXMe/zjTPRzi2JefFdC4g= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:11 2026 by rpki-client