$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa File: 40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa (raw, json) Hash identifier: DwaQoY4ZgFTRXAF7jl9z+k5maliSGa26H6hz7mcCoZU= Subject key identifier: 45:4C:17:B1:5C:95:6B:65:CC:07:77:56:03:3F:EF:AE:98:2C:88:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB456218971BBEEB1B980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.79.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b4:56:21:89:71:bb:ee:b1:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=29b471bf-a97d-4b30-8932-98f156246bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:11:47:20:50:02:7e:a8:46:69:4b:65:6e: df:1e:c1:45:63:1c:74:af:c4:d6:30:8b:e4:57:d1: 0a:a0:6b:78:41:f4:77:b2:a1:26:6d:1c:ee:bb:17: b6:7a:4e:7a:b7:da:cc:d3:a4:74:64:b5:0a:51:62: d5:bd:34:79:c5:9c:0e:a0:e2:18:61:81:4b:5b:56: cf:cb:f4:96:01:9f:be:38:91:c8:cd:82:bf:fd:fc: 15:f6:6c:e4:ae:97:fe:e0:27:da:3e:6c:9e:95:60: e1:93:12:19:8c:31:f9:11:98:b7:2a:fb:dd:28:07: f1:33:b2:b8:3d:e4:5a:0f:77:de:7a:07:18:91:0f: 42:27:0c:37:91:48:7b:ca:05:27:5d:25:16:d0:11: 4b:93:31:8e:f0:18:30:a1:89:89:3e:b4:93:a1:7a: b0:3e:b7:fe:1c:7c:a3:ff:2e:7a:62:41:77:0e:74: d8:2f:a7:02:e3:6e:32:8e:d3:82:6f:cf:f1:d9:a0: c6:89:80:e9:6b:c7:7d:23:03:e6:70:41:36:4d:54: bd:47:ba:42:2b:a3:d9:23:2d:b2:ca:b9:0c:41:64: 4e:d5:b6:67:33:2a:76:29:d4:af:7b:ac:23:49:4a: 39:44:0d:e9:64:fe:be:85:a7:3e:38:0d:ac:a2:53: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4C:17:B1:5C:95:6B:65:CC:07:77:56:03:3F:EF:AE:98:2C:88:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.79.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:84:32:8f:fc:0d:0c:14:92:d2:f7:c0:fa:b0:01:09:46:4b: 5a:fd:be:54:75:71:1a:1e:30:90:56:88:c2:b9:6a:4b:b7:4c: 65:5c:b3:6d:92:62:61:83:37:8d:65:b8:d2:78:db:3d:bd:f6: c4:74:d7:5c:3a:91:6e:25:eb:ad:60:e0:4c:96:2c:7f:43:4a: df:a5:e7:88:9c:94:51:4b:c0:8a:8d:36:ee:39:66:a6:e0:c4: 79:b3:af:65:ca:51:58:95:70:52:ee:1f:23:8d:72:d0:f3:4e: c9:4e:e0:65:63:9d:a8:1a:a5:c1:a6:46:17:9d:4f:46:49:df: 98:0f:02:91:1a:c8:c5:5b:0f:70:49:25:ab:11:c4:8d:ad:db: 1f:ca:ce:bd:3d:1a:f1:5d:6e:83:60:da:ee:91:aa:a2:a5:7c: 3a:d2:67:86:91:94:8e:17:b7:48:51:5f:33:f4:6c:0a:3d:47: cb:23:e7:be:f0:6e:aa:72:ce:00:e0:d6:66:e9:4e:79:0f:d5: e2:55:cd:13:67:0b:10:2b:d5:91:45:1a:a4:68:07:61:13:6d: 11:ec:6a:06:c1:d3:00:b5:5a:c3:e9:05:47:9d:24:fe:0b:ef: be:28:9a:73:22:2e:d5:d0:65:f9:9b:5f:91:98:0d:5a:23:cf: 75:1e:27:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrRWIYlxu+6xuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjliNDcxYmYtYTk3ZC00YjMwLTg5MzItOThmMTU2MjQ2YmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOsRRyBQAn6oRmlLZW7fHsFFYxx0r8TWMIvk V9EKoGt4QfR3sqEmbRzuuxe2ek56t9rM06R0ZLUKUWLVvTR5xZwOoOIYYYFLW1bP y/SWAZ++OJHIzYK//fwV9mzkrpf+4CfaPmyelWDhkxIZjDH5EZi3KvvdKAfxM7K4 PeRaD3feegcYkQ9CJww3kUh7ygUnXSUW0BFLkzGO8BgwoYmJPrSToXqwPrf+HHyj /y56YkF3DnTYL6cC424yjtOCb8/x2aDGiYDpa8d9IwPmcEE2TVS9R7pCK6PZIy2y yrkMQWRO1bZnMyp2KdSve6wjSUo5RA3pZP6+hac+OA2solMkOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVMF7FclWtlzAd3VgM/766YLIj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDBjNDIxOGYtOWNmZC0z ODg0LWIzZWMtZmU5ZWNjYzRmM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGEMo/8DQwUktL3wPqwAQlGS1r9vlR1cRoeMJBWiMK5aku3TGVcs22S YmGDN41luNJ42z299sR011w6kW4l661g4EyWLH9DSt+l54iclFFLwIqNNu45Zqbg xHmzr2XKUViVcFLuHyONctDzTslO4GVjnagapcGmRhedT0ZJ35gPApEayMVbD3BJ JasRxI2t2x/Kzr09GvFdboNg2u6RqqKlfDrSZ4aRlI4Xt0hRXzP0bAo9R8sj577w bqpyzgDg1mbpTnkP1eJVzRNnCxAr1ZFFGqRoB2ETbRHsagbB0wC1WsPpBUedJP4L 774omnMiLtXQZfmbX5GYDVojz3UeJ/Q= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:47 2026 by rpki-client