$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa File: 5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa (raw, json) Hash identifier: QhFddDvG3+VEflQ9GqpV8nhJPiJstB7fUAjvK/rjwdw= Subject key identifier: 47:0E:89:43:BA:26:51:7C:C7:9A:FD:0A:B5:BD:66:00:75:3C:09:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA9F2AB87A742F24DEE400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.151.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:9f:2a:b8:7a:74:2f:24:de:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=de015d1f-a73d-473f-9558-323b5ef966b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:04:f5:df:e5:f7:5e:7d:e5:d9:41:6e:31: 3d:d7:cd:48:f7:a9:c5:bb:0f:98:37:8e:64:06:5b: 1f:0b:91:89:89:4d:78:f2:a8:54:ed:da:ce:e0:09: 4a:0c:a8:6e:0b:a5:51:47:48:f9:44:12:63:e0:55: f6:af:43:2d:d4:2b:b6:25:4a:a3:65:0a:6e:5b:f9: af:19:26:6c:1f:7b:d8:a0:03:58:9b:17:d7:33:10: 47:8b:3e:36:a4:57:fa:52:33:11:49:91:ac:fb:cb: f4:c1:9d:31:35:2c:11:64:9c:b5:fc:97:ac:60:3c: 0b:c4:dc:b5:9a:44:af:36:6b:ca:99:45:cb:75:00: f5:59:6e:dd:69:cc:09:88:2a:32:bb:85:d2:dd:ad: 37:28:ed:d4:fb:5e:62:a7:91:d3:68:b8:c8:34:22: bb:0c:d1:ca:f9:9e:5e:b4:48:40:ab:24:3b:9e:e6: 11:e3:21:5f:00:02:66:c5:c3:4c:a0:2a:44:54:c8: c9:bf:3a:e9:d0:fd:27:05:95:ae:18:e4:71:f7:92: d9:f0:d7:47:5c:d8:92:2e:a2:df:e8:02:b3:50:fa: ee:c8:9b:dc:d9:f7:3e:85:27:b6:9f:4d:f6:d3:81: d1:da:b2:82:99:af:c3:ef:55:08:31:ad:80:74:12: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0E:89:43:BA:26:51:7C:C7:9A:FD:0A:B5:BD:66:00:75:3C:09:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e7:ee:03:aa:de:1a:e4:b5:c2:a0:9d:9c:b1:ba:70:37:f9: 1b:8d:dd:5c:51:8c:3b:9e:13:12:4c:31:28:0e:7d:49:cb:7f: 88:9a:bd:f9:f8:4b:8e:0f:66:3b:5d:27:34:26:fc:f3:f7:5c: 63:ed:dd:5f:3e:ab:73:a5:41:ea:11:3a:21:86:07:51:4f:0e: 7b:56:95:3c:20:d0:62:57:f5:ba:43:9b:d5:38:af:d4:f4:ab: 39:f9:4f:02:27:73:52:b9:0c:1f:f2:5c:f6:2d:03:97:81:13: 59:8f:29:84:91:e4:ae:0d:d3:a9:e9:84:ac:c4:aa:2a:64:ef: 6a:4d:6e:25:e0:e1:ad:69:99:53:67:b6:7d:c3:2f:da:7d:53: b6:64:26:61:c1:dd:8e:a0:00:51:87:75:4e:f6:36:d9:43:30: 5d:e5:13:37:15:b6:c6:aa:2a:53:f7:40:42:7d:d3:1a:33:cb: d2:1d:ae:ae:66:36:fc:f2:19:9e:8a:b4:94:ae:56:4e:e0:59: 55:bb:70:2b:c4:60:42:a3:c5:f2:1f:43:76:54:f2:22:e9:47: 77:1e:72:8f:02:23:cb:a3:78:ac:a6:3e:09:fe:1a:97:82:3e: f8:3e:33:dc:09:f7:8b:31:10:c8:f4:c5:96:c9:0e:34:8b:dc: e9:25:da:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqp8quHp0LyTe5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGUwMTVkMWYtYTczZC00NzNmLTk1NTgtMzIzYjVlZjk2NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEIE9d/l91595dlBbjE9181I96nFuw+YN45k BlsfC5GJiU148qhU7drO4AlKDKhuC6VRR0j5RBJj4FX2r0Mt1Cu2JUqjZQpuW/mv GSZsH3vYoANYmxfXMxBHiz42pFf6UjMRSZGs+8v0wZ0xNSwRZJy1/JesYDwLxNy1 mkSvNmvKmUXLdQD1WW7dacwJiCoyu4XS3a03KO3U+15ip5HTaLjINCK7DNHK+Z5e tEhAqyQ7nuYR4yFfAAJmxcNMoCpEVMjJvzrp0P0nBZWuGORx95LZ8NdHXNiSLqLf 6AKzUPruyJvc2fc+hSe2n03204HR2rKCma/D71UIMa2AdBL2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcOiUO6JlF8x5r9CrW9ZgB1PAmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWM3YmZkMWUtZGRhMi0z MDdlLTg0ZjYtOWVlMzNjMjg1NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbn7gOq3hrktcKgnZyxunA3+RuN3VxRjDueExJMMSgOfUnLf4iavfn4 S44PZjtdJzQm/PP3XGPt3V8+q3OlQeoROiGGB1FPDntWlTwg0GJX9bpDm9U4r9T0 qzn5TwInc1K5DB/yXPYtA5eBE1mPKYSR5K4N06nphKzEqipk72pNbiXg4a1pmVNn tn3DL9p9U7ZkJmHB3Y6gAFGHdU72NtlDMF3lEzcVtsaqKlP3QEJ90xozy9Idrq5m NvzyGZ6KtJSuVk7gWVW7cCvEYEKjxfIfQ3ZU8iLpR3ceco8CI8ujeKymPgn+GpeC Pvg+M9wJ94sxEMj0xZbJDjSL3Okl2nY= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:10 2026 by rpki-client