$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa File: 3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa (raw, json) Hash identifier: U2erZZSyOUQxptZcpfWoa9isdxINpFm8nFnBu8/c1wU= Subject key identifier: F5:5C:72:D4:4A:2C:C5:AC:7C:DC:26:DD:EE:0E:6E:20:25:F3:95:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA44AAEEDD414A48D7E460 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.95.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:44:aa:ee:dd:41:4a:48:d7:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=46b8bf04-e57d-45c4-aa7b-1d2eaf0afe69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:58:2c:6e:f7:00:d0:d9:00:6d:67:de:4b: 78:9f:35:29:42:7a:4d:bb:53:7a:c3:43:b2:a6:09: cc:35:47:21:7d:48:a8:96:c4:09:2f:d7:1e:42:dd: 59:28:79:08:24:e1:9e:3d:88:ea:60:39:be:5f:0f: a6:fb:bc:aa:01:de:ee:99:29:16:f4:07:6a:58:a9: 92:84:ac:94:37:1e:b8:50:ef:ea:52:79:1e:de:5b: df:cb:42:64:f0:25:74:26:72:31:85:05:4f:9b:d5: fd:ac:03:25:9b:29:82:62:1c:08:2f:a5:22:bb:2f: ed:90:7c:14:78:65:fc:1a:c4:79:70:18:dd:a8:b3: c8:58:a5:57:68:d7:88:21:4d:f0:6c:55:77:ef:d4: 75:2d:10:09:22:8f:ff:a5:8f:01:13:c7:2f:93:0c: ed:2d:1b:71:17:4a:37:d4:63:50:99:a5:41:76:fb: 5b:5b:fd:55:1d:f8:df:b3:70:e5:c8:2a:79:f7:9f: 04:6b:55:c0:87:54:dc:b4:94:15:41:b1:c8:fa:d7: 8a:f9:4d:33:67:94:c6:fb:41:c2:62:84:4d:2a:d5: 6f:0d:13:c0:4f:d7:50:6e:a0:9c:7a:57:6b:fc:f3: d5:cf:17:b3:94:55:d6:bf:5b:b0:28:44:ee:ca:da: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5C:72:D4:4A:2C:C5:AC:7C:DC:26:DD:EE:0E:6E:20:25:F3:95:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:45:ad:fb:4f:27:60:67:09:42:72:b3:c9:66:28:64:92:3e: 5c:ee:f2:d0:cd:f0:b2:50:63:ce:1a:98:f0:44:cf:d3:4a:c8: 9b:5a:ec:23:93:dc:68:53:ea:84:a0:83:03:4e:ca:a7:a3:43: 27:23:fb:45:c5:70:92:8d:e7:0f:05:9f:54:72:a1:85:02:b7: 74:50:d6:73:a3:47:51:ae:a7:6a:4a:a6:2f:36:fc:f8:30:35: e0:6b:4c:2e:25:b1:f2:2d:3f:95:83:a2:4a:9c:40:9b:31:fd: 72:3c:74:d0:71:f3:5e:65:e9:19:90:6f:45:0c:8d:3f:86:bd: 43:f2:aa:7b:db:1c:02:af:08:c0:35:65:f7:a7:5a:9a:f2:41: ed:61:e0:b8:2a:67:a9:d5:2f:84:c0:30:0e:d8:4f:48:7e:d8: 0a:93:1b:f7:54:2a:7e:8f:5d:ec:59:c5:57:09:c6:40:16:7e: 8b:d4:12:c6:c8:f2:0f:eb:8c:ee:0b:2f:39:35:94:7a:95:6c: 6b:49:50:0c:b1:bd:88:1e:91:d9:11:58:d4:08:87:55:47:73: 23:6f:5f:47:73:d2:29:19:31:ab:3e:78:67:c1:6a:d1:9c:38: 5e:a4:4c:b4:42:ad:2e:ea:a6:49:44:f6:11:39:d5:c1:c0:0a: b4:f7:f6:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkSq7t1BSkjX5GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDZiOGJmMDQtZTU3ZC00NWM0LWFhN2ItMWQyZWFmMGFmZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ9YLG73ANDZAG1n3kt4nzUpQnpNu1N6w0Oy pgnMNUchfUiolsQJL9ceQt1ZKHkIJOGePYjqYDm+Xw+m+7yqAd7umSkW9AdqWKmS hKyUNx64UO/qUnke3lvfy0Jk8CV0JnIxhQVPm9X9rAMlmymCYhwIL6Uiuy/tkHwU eGX8GsR5cBjdqLPIWKVXaNeIIU3wbFV379R1LRAJIo//pY8BE8cvkwztLRtxF0o3 1GNQmaVBdvtbW/1VHfjfs3DlyCp5958Ea1XAh1TctJQVQbHI+teK+U0zZ5TG+0HC YoRNKtVvDRPAT9dQbqCceldr/PPVzxezlFXWv1uwKETuytro8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVcctRKLMWsfNwm3e4ObiAl85VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y1NTk3YTktM2E1YS0z YjYxLTgzZDItMGE4MjNiYzA5NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxFrftPJ2BnCUJys8lmKGSSPlzu8tDN8LJQY84amPBEz9NKyJta7COT 3GhT6oSggwNOyqejQycj+0XFcJKN5w8Fn1RyoYUCt3RQ1nOjR1Gup2pKpi82/Pgw NeBrTC4lsfItP5WDokqcQJsx/XI8dNBx815l6RmQb0UMjT+GvUPyqnvbHAKvCMA1 ZfenWpryQe1h4LgqZ6nVL4TAMA7YT0h+2AqTG/dUKn6PXexZxVcJxkAWfovUEsbI 8g/rjO4LLzk1lHqVbGtJUAyxvYgekdkRWNQIh1VHcyNvX0dz0ikZMas+eGfBatGc OF6kTLRCrS7qpklE9hE51cHACrT39i8= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:51 2026 by rpki-client