$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa File: 4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa (raw, json) Hash identifier: 0VUQgVz1MJWczNwk6b00DdAC4BHdvg4NQyFrD/n7pD8= Subject key identifier: 1A:3C:8C:1B:47:A5:2B:E4:20:59:D6:A3:68:25:CC:82:58:20:46:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E1018457C6CD9A10E08BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.108.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:01:84:57:c6:cd:9a:10:e0:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fe0662e3-7669-423f-834a-04b298ac7978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0d:dc:e2:48:78:27:fa:9a:9e:b4:7a:8e:33: d5:82:9d:3f:f9:2e:26:79:d2:2d:a0:f5:44:70:d9: ba:d9:56:0e:9f:ce:d9:ec:f3:2f:0e:86:b6:4c:d3: 00:2f:da:c0:02:b6:39:c8:e9:f1:4a:83:d9:91:3e: f6:c0:76:29:ca:a6:c7:ab:2d:b9:c5:11:b9:86:20: 41:cd:b7:1e:23:4c:ac:c3:cb:20:8a:a8:35:ad:76: 19:8f:c6:4f:2a:b1:a8:4d:9e:c7:72:e7:08:e7:d7: f8:45:c3:7f:01:70:30:c1:de:c1:0e:b4:30:76:d0: 73:a6:a5:58:72:7a:b1:f4:26:00:74:cf:f1:cb:84: 26:88:d4:ee:99:b4:90:61:ac:ff:af:42:ef:7a:93: 51:b8:b2:00:ef:f5:3f:e6:07:e3:91:99:a3:24:87: a8:87:2b:bc:0e:e0:c5:16:31:5f:2f:b2:60:c4:01: 30:2a:3d:46:31:6e:ef:75:07:3d:d5:8a:52:38:99: d2:81:93:e5:cc:b1:2a:b4:e7:4b:4f:d0:a4:d5:df: 49:e3:10:c7:46:35:4b:21:66:2f:6a:40:8b:44:db: 22:1b:c4:f0:fe:e8:ec:5c:d7:b8:2e:58:a0:4d:8a: f9:04:d0:9f:c2:f7:e4:8a:98:f8:2b:5a:09:8e:61: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3C:8C:1B:47:A5:2B:E4:20:59:D6:A3:68:25:CC:82:58:20:46:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cf:b2:34:48:61:33:50:7a:b6:c9:84:f9:3b:82:1d:4a:ec: f1:fc:9b:79:ab:e0:bf:97:f8:51:0c:05:81:1b:de:15:94:fe: f1:54:52:ef:c4:e0:41:02:e8:b5:31:49:11:a3:af:4a:20:04: ea:5c:08:ef:f0:80:3b:d7:b0:e7:da:9f:d7:60:89:07:fb:14: 99:2f:28:af:bb:f8:da:e8:1a:b5:43:4d:51:73:8c:74:bc:28: fd:08:82:51:10:48:cb:eb:e5:e1:60:48:a3:62:fe:7c:e6:61: 0d:1f:f4:56:9e:b8:df:c0:3f:e6:c6:5d:0c:b7:63:b1:78:5f: bb:92:22:95:b0:0c:19:ea:f7:4d:05:f1:e1:ed:b7:06:28:14: 8f:e4:6d:d9:15:97:2f:79:61:18:1c:c5:83:a4:82:0f:69:e6: 71:a3:42:95:11:92:8f:d8:d8:62:d8:0c:76:27:29:a7:60:0b: 3e:7b:5c:4a:d0:1d:46:5d:2a:33:d5:99:2d:41:22:05:e1:a5: b5:ca:d4:0f:99:45:93:45:77:f5:7c:d9:91:23:47:68:b0:36: f0:ed:00:56:53:d8:f2:bd:9a:35:13:d3:1f:b6:97:59:1e:3d: 25:2a:00:1e:53:4f:6c:1d:9a:29:7f:d6:bf:d0:d2:0c:f2:c2: cd:c9:96:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4QGEV8bNmhDgi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmUwNjYyZTMtNzY2OS00MjNmLTgzNGEtMDRiMjk4YWM3OTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ3c4kh4J/qanrR6jjPVgp0/+S4medItoPVE cNm62VYOn87Z7PMvDoa2TNMAL9rAArY5yOnxSoPZkT72wHYpyqbHqy25xRG5hiBB zbceI0ysw8sgiqg1rXYZj8ZPKrGoTZ7HcucI59f4RcN/AXAwwd7BDrQwdtBzpqVY cnqx9CYAdM/xy4QmiNTumbSQYaz/r0LvepNRuLIA7/U/5gfjkZmjJIeohyu8DuDF FjFfL7JgxAEwKj1GMW7vdQc91YpSOJnSgZPlzLEqtOdLT9Ck1d9J4xDHRjVLIWYv akCLRNsiG8Tw/ujsXNe4LligTYr5BNCfwvfkipj4K1oJjmFALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo8jBtHpSvkIFnWo2glzIJYIEYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRjMjk2MzEtMDY1YS0z NDVhLWE4ZWMtMTRjNmRkMmZhYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfPsjRIYTNQerbJhPk7gh1K7PH8m3mr4L+X+FEMBYEb3hWU/vFUUu/E 4EEC6LUxSRGjr0ogBOpcCO/wgDvXsOfan9dgiQf7FJkvKK+7+NroGrVDTVFzjHS8 KP0IglEQSMvr5eFgSKNi/nzmYQ0f9FaeuN/AP+bGXQy3Y7F4X7uSIpWwDBnq900F 8eHttwYoFI/kbdkVly95YRgcxYOkgg9p5nGjQpURko/Y2GLYDHYnKadgCz57XErQ HUZdKjPVmS1BIgXhpbXK1A+ZRZNFd/V82ZEjR2iwNvDtAFZT2PK9mjUT0x+2l1ke PSUqAB5TT2wdmil/1r/Q0gzyws3Jlg4= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:50 2026 by rpki-client