$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5589d576-bb28-3185-b49f-b5d1da5b27dc.roa File: 5589d576-bb28-3185-b49f-b5d1da5b27dc.roa (raw, json) Hash identifier: iDS7qaH6rbuWcyzzpgPw/b2E8Unh5pIWLZv3dTuhlcc= Subject key identifier: 3F:B3:6C:D2:76:1D:2C:53:2C:0D:23:41:A0:A0:2E:7F:B0:00:29:27 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA66AE31FECAD2B44CF780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5589d576-bb28-3185-b49f-b5d1da5b27dc.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.140.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:66:ae:31:fe:ca:d2:b4:4c:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3ac9cdfc-60a4-4d40-83ea-3b7a188d3406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:c9:ef:b3:95:1b:22:a4:66:fb:9d:f3:6b: 6a:8f:87:e4:d0:2c:f1:35:20:d0:82:fb:80:67:8a: a3:25:71:49:ce:cb:04:41:d3:3c:e9:f8:a4:a6:7b: b0:c2:79:eb:b3:af:9a:cb:db:b1:31:f0:86:82:48: 6d:1c:05:cd:14:e7:9f:77:5e:c6:6e:70:2b:9c:bb: 8e:53:5a:2a:81:c1:e2:d3:e9:16:da:c7:2b:f4:38: 18:94:8a:da:52:a2:c9:f9:fe:2d:d0:0a:9f:ec:02: 10:eb:42:1f:8d:02:c8:0b:8d:02:27:e6:9e:3a:19: 13:c5:3a:e2:52:cb:f5:44:8d:a9:7d:55:e2:d5:cf: d6:47:2d:ba:69:d7:69:af:78:2e:62:dd:31:22:fb: 12:fb:4a:aa:37:9c:32:82:19:33:25:75:0d:71:b7: 68:53:47:eb:1d:9f:1a:d1:da:c6:8f:57:f2:ce:fa: 33:f5:33:d9:6e:1f:9c:09:75:4d:72:ac:a2:e8:c3: 0a:cc:13:1a:dd:a7:ca:7b:9b:a7:63:cd:2f:d5:86: 68:a2:d0:78:52:a9:a8:07:c0:89:1a:65:c9:7a:31: ec:90:78:19:5d:b6:b1:7f:36:3c:61:c1:99:d9:91: ce:49:ed:fb:dd:db:15:e0:7f:d3:72:67:63:c9:6f: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B3:6C:D2:76:1D:2C:53:2C:0D:23:41:A0:A0:2E:7F:B0:00:29:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5589d576-bb28-3185-b49f-b5d1da5b27dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:15:4f:6e:a0:95:7b:0b:f5:70:f2:f2:70:31:46:0c:1e:4b: 18:a6:eb:cb:a9:49:72:26:4b:9d:38:be:54:de:66:77:c9:e5: e6:8d:e0:31:1f:4a:17:fd:67:e8:6f:db:ff:e0:cb:08:e8:49: 18:9a:e3:db:77:8b:78:26:0a:94:03:b1:80:46:66:fd:d8:68: 49:53:b2:57:17:27:a1:da:ea:7b:1a:43:94:0e:03:b2:f8:68: 54:ce:f3:49:12:44:da:56:3a:d9:ac:d9:98:66:9f:f4:e7:f5: 54:8e:68:19:5a:f2:f1:67:84:de:24:c6:43:6b:22:8e:f2:26: cc:6b:40:b4:19:1d:97:62:d1:40:a1:f2:76:d4:b4:48:7d:84: 9b:67:e8:74:f7:0b:71:5b:c6:f0:eb:f3:0f:55:e2:1c:1e:a0: e9:17:72:52:33:fa:d0:fb:e1:87:db:5f:18:ed:43:48:5b:1e: ba:0d:9e:30:0f:35:75:01:2b:97:d8:15:e2:1c:26:c0:5c:8c: 43:85:85:27:1f:db:f6:2b:cd:9e:49:79:63:0f:ee:c3:f8:a6: a5:63:de:87:ba:73:c3:25:5d:91:bd:51:5b:e3:39:e1:f9:1a: e5:29:0d:59:24:45:48:13:5f:ec:b0:c0:d0:bf:c9:d2:ab:de: aa:01:f2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmauMf7K0rRM94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk M2FjOWNkZmMtNjBhNC00ZDQwLTgzZWEtM2I3YTE4OGQzNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbTJ77OVGyKkZvud82tqj4fk0CzxNSDQgvuA Z4qjJXFJzssEQdM86fikpnuwwnnrs6+ay9uxMfCGgkhtHAXNFOefd17GbnArnLuO U1oqgcHi0+kW2scr9DgYlIraUqLJ+f4t0Aqf7AIQ60IfjQLIC40CJ+aeOhkTxTri Usv1RI2pfVXi1c/WRy26addpr3guYt0xIvsS+0qqN5wyghkzJXUNcbdoU0frHZ8a 0drGj1fyzvoz9TPZbh+cCXVNcqyi6MMKzBMa3afKe5unY80v1YZootB4UqmoB8CJ GmXJejHskHgZXbaxfzY8YcGZ2ZHOSe373dsV4H/TcmdjyW+nGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+zbNJ2HSxTLA0jQaCgLn+wACknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTU4OWQ1NzYtYmIyOC0z MTg1LWI0OWYtYjVkMWRhNWIyN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIowwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcVT26glXsL9XDy8nAxRgweSxim68upSXImS504vlTeZnfJ5eaN4DEf Shf9Z+hv2//gywjoSRia49t3i3gmCpQDsYBGZv3YaElTslcXJ6Ha6nsaQ5QOA7L4 aFTO80kSRNpWOtms2Zhmn/Tn9VSOaBla8vFnhN4kxkNrIo7yJsxrQLQZHZdi0UCh 8nbUtEh9hJtn6HT3C3FbxvDr8w9V4hweoOkXclIz+tD74YfbXxjtQ0hbHroNnjAP NXUBK5fYFeIcJsBcjEOFhScf2/YrzZ5JeWMP7sP4pqVj3oe6c8MlXZG9UVvjOeH5 GuUpDVkkRUgTX+ywwNC/ydKr3qoB8iw= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:10 2026 by rpki-client