$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa File: 588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa (raw, json) Hash identifier: vS11NjRHleERA8zkBitG4wtIO2+k2WUAtJzVMX47ReE= Subject key identifier: 84:4E:51:93:6B:5A:22:EA:1D:7D:88:50:3E:6F:89:AD:B9:C8:11:1A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA40D4A90181B9DCEB8180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.131.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:40:d4:a9:01:81:b9:dc:eb:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ca5d845b-2cb5-4fbc-8457-ffb6951e4083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:be:37:7e:a2:61:35:07:d7:24:fa:22:aa: 98:4e:b6:a1:b4:db:21:ff:52:63:b6:c7:91:c9:10: 63:74:c9:7d:64:d0:e0:84:db:07:84:ff:06:18:5b: fb:3d:b4:d4:31:23:0c:77:86:4d:77:95:bb:18:9a: bf:b1:10:3d:4f:ab:0b:56:09:13:3b:93:d1:b9:08: 20:e0:f3:75:d5:90:fb:ab:82:cf:1e:f0:33:8f:3f: 44:a7:a8:d6:71:25:b8:42:30:77:81:83:80:77:d5: 7f:f3:64:b0:cc:75:d2:17:62:bb:8d:bf:31:4f:f9: 3d:99:49:d8:8a:8b:da:d5:f9:e6:03:ce:6a:27:86: 16:ac:7f:b0:9f:98:6a:ea:da:c8:71:a5:3e:32:04: e1:f4:a5:0a:3e:88:59:99:46:35:4d:4b:6b:8b:cd: 89:51:ba:36:a5:95:71:57:66:6d:ed:fc:8f:80:90: 20:11:02:1e:18:a6:5a:25:73:c1:c6:cd:fd:aa:2b: 78:e3:d2:bf:cc:90:99:46:c9:1a:c8:3d:39:f9:14: be:6b:05:3e:84:80:9a:09:7d:51:37:00:a8:3d:1d: 5b:3c:88:3e:b9:cd:1e:47:7f:28:2b:9d:56:cd:20: c4:5c:7e:a4:24:0d:e4:a2:ba:76:85:23:94:ae:48: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4E:51:93:6B:5A:22:EA:1D:7D:88:50:3E:6F:89:AD:B9:C8:11:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:65:52:8e:89:1e:a0:ad:c8:90:83:f5:ab:cc:df:10:f0:86: d3:9e:d9:1a:2f:ec:78:c7:61:22:b6:b5:8f:03:c7:aa:36:eb: 04:46:3e:f5:14:8f:04:78:25:d8:b2:98:ef:0a:a2:5b:bf:64: 45:a6:83:a2:62:37:3d:52:3b:a8:f8:78:00:d6:e0:37:67:6e: c9:37:b7:0f:13:d8:f3:1c:80:f0:74:43:77:ad:cd:c6:62:b8: 89:0f:84:76:eb:66:27:4b:f2:e7:bd:97:85:91:57:a8:82:fd: f9:6e:28:08:49:b5:18:9a:1a:93:92:ad:e7:12:f0:5f:8f:87: 1e:f9:02:77:9b:a6:2b:c5:6b:f8:b1:39:ab:37:a0:34:a9:c1: c9:44:77:8a:c4:4b:37:a0:6d:9e:27:5f:05:bf:32:cf:dc:5b: 9a:d5:49:c4:f4:bb:a2:8f:27:5e:10:2f:83:ad:37:a6:d4:58: 21:38:79:1c:9b:36:77:41:7b:17:4a:50:54:0a:43:9c:0c:63: 05:31:2c:18:a8:b9:f8:8c:e8:de:20:69:dd:5c:8a:0e:45:71: 0a:3d:c8:bb:45:0a:c1:40:3d:83:21:96:99:0a:9d:bb:60:e8: 84:d4:89:51:bc:41:a8:5e:20:c6:60:da:22:88:7a:36:fa:7a: 0d:23:dc:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkDUqQGBudzrgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2E1ZDg0NWItMmNiNS00ZmJjLTg0NTctZmZiNjk1MWU0MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5y+N36iYTUH1yT6IqqYTrahtNsh/1JjtseR yRBjdMl9ZNDghNsHhP8GGFv7PbTUMSMMd4ZNd5W7GJq/sRA9T6sLVgkTO5PRuQgg 4PN11ZD7q4LPHvAzjz9Ep6jWcSW4QjB3gYOAd9V/82SwzHXSF2K7jb8xT/k9mUnY iova1fnmA85qJ4YWrH+wn5hq6trIcaU+MgTh9KUKPohZmUY1TUtri82JUbo2pZVx V2Zt7fyPgJAgEQIeGKZaJXPBxs39qit449K/zJCZRskayD05+RS+awU+hICaCX1R NwCoPR1bPIg+uc0eR38oK51WzSDEXH6kJA3korp2hSOUrkhkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIROUZNrWiLqHX2IUD5via25yBEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg4Nzc2ZWItZjljNi0z ZjQxLThjZTgtNGI2NWUwNDA3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJlUo6JHqCtyJCD9avM3xDwhtOe2Rov7HjHYSK2tY8Dx6o26wRGPvUU jwR4JdiymO8Kolu/ZEWmg6JiNz1SO6j4eADW4Ddnbsk3tw8T2PMcgPB0Q3etzcZi uIkPhHbrZidL8ue9l4WRV6iC/fluKAhJtRiaGpOSrecS8F+Phx75AnebpivFa/ix Oas3oDSpwclEd4rESzegbZ4nXwW/Ms/cW5rVScT0u6KPJ14QL4OtN6bUWCE4eRyb NndBexdKUFQKQ5wMYwUxLBioufiM6N4gad1cig5FcQo9yLtFCsFAPYMhlpkKnbtg 6ITUiVG8QaheIMZg2iKIejb6eg0j3PM= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:13 2026 by rpki-client