$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/431acdca-41f4-31db-922a-97a94410f8f5.roa File: 431acdca-41f4-31db-922a-97a94410f8f5.roa (raw, json) Hash identifier: Yr2XPTGPnL8sIdvLgJQT+CG816AadkIZsUiSQnydb3s= Subject key identifier: 9E:CB:E2:50:1E:61:F1:2E:48:49:79:39:41:96:C8:71:C7:B8:00:27 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0435750523D43216C9460 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/431acdca-41f4-31db-922a-97a94410f8f5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 34.0.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:43:57:50:52:3d:43:21:6c:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=07eae31c-37f1-4a69-80d6-7a728035dc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:87:25:e9:82:d1:2b:a9:10:aa:fe:af:38: fa:22:38:c2:0f:33:44:dc:d4:b5:e2:d7:4a:37:9b: 83:d0:6f:c8:32:ab:31:6a:0a:25:33:28:31:47:c3: 1b:ea:6f:29:6c:bd:41:c7:dd:c0:f3:a0:f6:87:19: 00:1a:c2:7a:a8:7a:f8:7d:ee:64:a9:9d:98:c2:8f: 2c:5b:7c:16:90:f1:06:00:1b:54:7a:b7:67:7d:9e: bc:30:de:bf:f5:c7:7c:a5:bd:e4:c1:bf:7f:79:42: 91:0d:a9:d5:95:1e:d4:bc:ad:13:6c:75:69:a0:ca: 81:87:b3:fc:1e:30:53:23:ce:7c:07:60:93:61:af: 45:a0:a9:9c:23:c7:65:4c:8d:ca:b9:67:f6:02:dd: 2c:45:fd:06:26:00:75:7d:ad:63:dc:76:82:5d:95: df:aa:db:ca:c3:aa:44:cb:3c:1d:48:c7:e8:a3:5b: 77:3f:e7:18:21:ba:ce:4a:93:60:ed:44:08:c5:20: 65:70:9d:ab:94:04:0b:0a:e0:b0:ea:0e:aa:29:c3: 35:b1:e1:6f:6f:2b:95:f3:dd:0c:be:85:71:9a:44: 86:9c:77:b7:d3:e5:92:04:7d:84:70:42:b1:ab:0a: c2:16:ed:42:76:0e:f0:ec:23:43:28:67:5d:7e:08: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:E2:50:1E:61:F1:2E:48:49:79:39:41:96:C8:71:C7:B8:00:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/431acdca-41f4-31db-922a-97a94410f8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:6e:cd:eb:43:0a:ca:7d:03:ac:a1:d1:05:34:94:b8:65: bc:fe:48:7d:32:e9:03:d3:20:3b:83:29:3d:05:c8:21:a1:49: e7:97:16:49:80:e2:0b:2a:57:7a:db:03:dc:b1:0a:93:10:3d: 1f:65:47:51:37:26:a1:6b:9e:a2:2e:7f:59:a4:91:3d:58:c8: ff:9f:d7:3e:39:c6:b7:06:7a:86:f4:9d:a5:06:e6:ae:6d:96: ce:48:7d:64:61:a1:78:27:24:3a:6d:61:1e:68:72:18:3f:7f: 68:c8:85:ad:a1:ed:d6:46:d6:ee:bc:b9:eb:66:b1:c5:d4:ed: 6a:84:38:e8:09:b3:20:dd:f6:c8:a0:4e:c3:fd:3b:9a:d5:f0: a8:31:bb:89:c0:ef:50:3a:7a:72:d3:f2:10:dc:32:43:75:53: a3:6a:be:29:a7:7c:c8:58:40:a3:bd:c0:14:be:55:0d:5e:4d: 64:e2:d7:86:94:dc:98:6b:f7:84:2e:9c:bf:1f:18:e2:26:c1: 56:10:d0:21:e8:18:27:a8:ee:89:65:c9:37:e6:9d:d4:4a:0f: cd:ec:60:46:85:33:b2:cc:df:9e:88:df:bb:d9:89:f4:66:e5: 63:6c:38:ef:90:18:2c:23:77:35:ce:49:be:5f:95:ea:2a:9c: a0:a0:20:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ENXUFI9QyFslGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDdlYWUzMWMtMzdmMS00YTY5LTgwZDYtN2E3MjgwMzVkYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6WHJemC0SupEKr+rzj6IjjCDzNE3NS14tdK N5uD0G/IMqsxagolMygxR8Mb6m8pbL1Bx93A86D2hxkAGsJ6qHr4fe5kqZ2Ywo8s W3wWkPEGABtUerdnfZ68MN6/9cd8pb3kwb9/eUKRDanVlR7UvK0TbHVpoMqBh7P8 HjBTI858B2CTYa9FoKmcI8dlTI3KuWf2At0sRf0GJgB1fa1j3HaCXZXfqtvKw6pE yzwdSMfoo1t3P+cYIbrOSpNg7UQIxSBlcJ2rlAQLCuCw6g6qKcM1seFvbyuV890M voVxmkSGnHe30+WSBH2EcEKxqwrCFu1Cdg7w7CNDKGddfgg8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7L4lAeYfEuSEl5OUGWyHHHuAAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDMxYWNkY2EtNDFmNC0z MWRiLTkyMmEtOTdhOTQ0MTBmOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZMbs3rQwrKfQOsodEFNJS4Zbz+SH0y6QPTIDuDKT0FyCGhSeeXFkmA 4gsqV3rbA9yxCpMQPR9lR1E3JqFrnqIuf1mkkT1YyP+f1z45xrcGeob0naUG5q5t ls5IfWRhoXgnJDptYR5ochg/f2jIha2h7dZG1u68uetmscXU7WqEOOgJsyDd9sig TsP9O5rV8Kgxu4nA71A6enLT8hDcMkN1U6NqvimnfMhYQKO9wBS+VQ1eTWTi14aU 3Jhr94QunL8fGOImwVYQ0CHoGCeo7ollyTfmndRKD83sYEaFM7LM356I37vZifRm 5WNsOO+QGCwjdzXOSb5fleoqnKCgIBs= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:08 2026 by rpki-client