$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dfc49c7-0468-3186-a3fc-10c20275a210.roa File: 4dfc49c7-0468-3186-a3fc-10c20275a210.roa (raw, json) Hash identifier: u+HEK/ST2uun/c741xOyKTE94kMVv4PyZYgg+u9kdSA= Subject key identifier: 23:3A:28:6B:4E:E2:69:DE:1F:0A:28:D1:C0:76:7A:AE:20:F7:82:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0E39B2B9DFF6F98200480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dfc49c7-0468-3186-a3fc-10c20275a210.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.101.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e3:9b:2b:9d:ff:6f:98:20:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=df54e96e-4348-4a72-8781-1d0e3d53d1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:15:25:ac:04:59:dd:54:81:3f:11:ab:9a: 1c:9d:20:54:48:bb:2d:8c:72:c6:c1:af:2f:2d:3c: 9e:84:33:dd:56:99:e1:97:18:b0:2c:a8:bd:cc:d0: 06:cf:2f:48:fd:1d:95:2b:b3:89:39:db:c6:e7:bd: 90:14:ce:24:e6:65:20:67:7c:7c:e1:9a:0b:86:53: 71:fc:72:91:ba:87:49:fb:74:35:0a:cc:af:49:c0: ee:ae:50:89:95:e8:1d:61:05:24:27:a0:5b:7f:7a: 8f:82:5f:1d:99:d3:7a:68:c6:59:3a:4b:f6:bf:03: 66:89:80:95:f2:13:4f:a5:f7:01:25:d3:8c:7b:55: 11:7d:4d:40:ea:0f:23:42:41:1c:fa:d9:42:fc:38: 02:7a:3b:b9:6c:b9:46:45:46:96:d6:37:96:8d:8a: 0d:39:17:6a:ef:43:26:b8:b2:ad:44:5a:24:d9:4a: 1e:87:40:77:5e:c8:cd:fe:79:18:22:e2:cb:b4:61: af:26:d7:38:72:7c:b9:f6:36:a4:8d:02:1d:55:21: be:d7:6f:5c:42:b5:31:09:dc:fc:d8:b2:0b:33:d0: 4f:3b:3f:a1:61:2a:d1:ae:d7:31:67:28:83:aa:25: 00:db:1d:a3:87:38:4c:03:7f:74:f8:18:45:75:7c: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3A:28:6B:4E:E2:69:DE:1F:0A:28:D1:C0:76:7A:AE:20:F7:82:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dfc49c7-0468-3186-a3fc-10c20275a210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ae:ef:b6:c1:33:d2:b0:0c:6e:2d:77:f1:c8:e6:ac:ab:45: 0e:53:cc:a8:4e:dc:9e:79:9c:8a:22:ff:fb:78:bc:52:1a:71: 29:a9:ec:8a:21:16:5e:d4:89:4e:9e:4c:42:5e:29:88:cc:74: 53:fc:39:7e:03:7e:bc:44:71:a9:9f:a9:48:fd:0a:fe:d3:a7: 63:60:bd:79:d4:fc:01:cf:ec:0a:06:38:84:19:f5:41:de:6f: d2:57:e6:4a:47:ec:7b:7b:31:9b:9a:41:c0:bb:4a:74:7b:13: a5:4a:df:ec:fb:8a:a2:bf:07:bf:3b:24:bb:c0:59:3b:1d:56: 60:23:e2:cc:53:65:44:3d:32:44:fb:8d:df:02:d4:a7:00:d3: 17:a8:af:2a:44:c1:b5:43:7b:5b:a8:50:93:69:8d:42:75:20: 1a:74:20:44:ae:21:92:8e:e4:55:46:f8:80:eb:9f:8f:f5:ad: 3f:66:44:24:d1:8e:ac:c2:a1:69:e0:b7:89:34:55:4f:03:03: ec:42:a7:aa:c7:61:94:0c:29:f9:90:b4:69:38:d8:12:9b:09: cf:a9:c0:bd:21:d6:e6:cc:85:8c:79:16:5c:18:cf:e3:9e:45: ae:24:86:0d:e0:4a:6f:fa:8f:18:fa:88:ff:20:76:f4:0c:76: 7d:4b:b7:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OObK53/b5ggBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGY1NGU5NmUtNDM0OC00YTcyLTg3ODEtMWQwZTNkNTNkMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgQVJawEWd1UgT8Rq5ocnSBUSLstjHLGwa8v LTyehDPdVpnhlxiwLKi9zNAGzy9I/R2VK7OJOdvG572QFM4k5mUgZ3x84ZoLhlNx /HKRuodJ+3Q1CsyvScDurlCJlegdYQUkJ6Bbf3qPgl8dmdN6aMZZOkv2vwNmiYCV 8hNPpfcBJdOMe1URfU1A6g8jQkEc+tlC/DgCeju5bLlGRUaW1jeWjYoNORdq70Mm uLKtRFok2Uoeh0B3XsjN/nkYIuLLtGGvJtc4cny59jakjQIdVSG+129cQrUxCdz8 2LILM9BPOz+hYSrRrtcxZyiDqiUA2x2jhzhMA390+BhFdXwftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM6KGtO4mneHwoo0cB2eq4g94JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRmYzQ5YzctMDQ2OC0z MTg2LWEzZmMtMTBjMjAyNzVhMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqu77bBM9KwDG4td/HI5qyrRQ5TzKhO3J55nIoi//t4vFIacSmp7Ioh Fl7UiU6eTEJeKYjMdFP8OX4DfrxEcamfqUj9Cv7Tp2NgvXnU/AHP7AoGOIQZ9UHe b9JX5kpH7Ht7MZuaQcC7SnR7E6VK3+z7iqK/B787JLvAWTsdVmAj4sxTZUQ9MkT7 jd8C1KcA0xeorypEwbVDe1uoUJNpjUJ1IBp0IESuIZKO5FVG+IDrn4/1rT9mRCTR jqzCoWngt4k0VU8DA+xCp6rHYZQMKfmQtGk42BKbCc+pwL0h1ubMhYx5FlwYz+Oe Ra4khg3gSm/6jxj6iP8gdvQMdn1LtyE= -----END CERTIFICATE-----Generated at Thu Mar 19 03:10:43 2026 by rpki-client