$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5da30c5c-8919-3657-bf3a-1e24ca5841bc.roa File: 5da30c5c-8919-3657-bf3a-1e24ca5841bc.roa (raw, json) Hash identifier: ZLJ9VXxJslaKD7CaiI8l4GVlvf6Yrniag9/gRcPWWj4= Subject key identifier: 80:96:85:4B:53:61:E8:25:4C:16:BC:8A:93:9B:B9:C7:6D:16:5E:B1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3C025285A330C936D380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5da30c5c-8919-3657-bf3a-1e24ca5841bc.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.133.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3c:02:52:85:a3:30:c9:36:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=41b5e8a5-d57f-4cec-8949-8c9866d75825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:18:42:41:89:22:b6:40:d3:33:a5:7b:72: 1a:cc:4a:3d:59:82:ab:89:5a:67:2f:7a:39:35:ef: 86:71:87:74:34:51:d2:8f:4a:f2:dd:cb:08:f6:e4: c7:bc:f6:83:95:c8:35:d8:6b:30:cf:29:39:44:c5: 4a:4a:39:da:36:07:ba:65:0b:45:a3:63:f2:fa:e5: ee:b5:29:6c:2f:77:50:b5:e5:0c:67:53:a7:e1:74: 1f:a4:56:2f:16:39:13:9e:15:07:d7:c9:6b:05:31: 19:f8:20:8e:41:f8:40:e5:f3:c3:68:b5:be:0c:a5: c3:cd:89:42:0f:c1:ab:84:b0:b6:05:cc:6c:24:d1: f9:73:f5:09:3f:8a:d9:de:86:c0:30:1e:ec:11:b0: 66:e1:17:2e:b6:98:02:37:9e:00:4c:df:5e:ee:08: de:b9:7d:e0:ba:3e:4d:be:3e:68:b4:ac:9a:67:bc: 74:68:6d:5f:27:5c:85:0d:7a:95:7a:ff:ea:10:28: e3:66:84:69:4c:fd:9d:a9:1c:d8:a0:d9:5d:24:95: 21:41:74:9f:33:a8:63:00:23:0f:f4:8e:e2:5b:c0: 22:09:6c:c0:b6:c2:f8:a9:8e:0b:1f:35:1d:a3:5e: 5a:6b:51:21:34:4a:de:5c:50:3e:9c:f2:03:20:a8: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:96:85:4B:53:61:E8:25:4C:16:BC:8A:93:9B:B9:C7:6D:16:5E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5da30c5c-8919-3657-bf3a-1e24ca5841bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:90:ee:19:25:f0:5f:bf:a6:a7:bf:1b:4c:4a:c8:b8:83:11: 8f:90:70:dd:96:e3:3a:c3:cc:7d:af:ce:b4:67:25:84:f5:fb: d8:76:a2:d2:85:3c:b6:b6:2c:b6:b1:76:86:b4:b6:cc:1f:3f: 9a:f8:d5:e9:29:c5:a2:84:60:23:0b:62:e1:eb:46:fc:ba:42: 69:e5:5a:c2:ef:bb:30:aa:6f:14:f9:a5:2a:7e:15:25:d1:36: 5c:36:4a:58:0c:ff:8b:b8:d4:6e:40:ef:0b:33:f3:12:e6:5f: b7:f8:8a:11:62:74:fb:8a:07:a0:f2:5a:71:87:5a:d0:8e:00: e1:0c:7a:da:1a:2d:7b:bc:55:75:bd:17:ad:cc:dc:51:12:c2: 78:70:1a:92:17:9e:59:67:af:ae:12:ce:ca:35:08:8d:9c:96: 8d:0f:f8:46:d6:d6:72:f3:2d:3d:af:73:d4:bf:95:52:4a:b2: ee:62:04:d8:e2:2b:ac:58:78:04:fe:ee:9f:1c:fd:be:28:f3: 89:3d:8a:e3:99:86:4c:10:dd:ec:aa:f8:e9:96:8f:dd:b2:96: 6f:61:5c:c0:31:34:a1:bf:08:e4:5b:71:d0:21:2e:66:b3:ae: 31:36:eb:10:ee:c0:c5:e6:44:d9:15:0e:a2:5c:e9:47:35:97: 8c:52:af:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjwCUoWjMMk204AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDFiNWU4YTUtZDU3Zi00Y2VjLTg5NDktOGM5ODY2ZDc1ODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqskYQkGJIrZA0zOle3IazEo9WYKriVpnL3o5 Ne+GcYd0NFHSj0ry3csI9uTHvPaDlcg12Gswzyk5RMVKSjnaNge6ZQtFo2Py+uXu tSlsL3dQteUMZ1On4XQfpFYvFjkTnhUH18lrBTEZ+CCOQfhA5fPDaLW+DKXDzYlC D8GrhLC2BcxsJNH5c/UJP4rZ3obAMB7sEbBm4RcutpgCN54ATN9e7gjeuX3guj5N vj5otKyaZ7x0aG1fJ1yFDXqVev/qECjjZoRpTP2dqRzYoNldJJUhQXSfM6hjACMP 9I7iW8AiCWzAtsL4qY4LHzUdo15aa1EhNEreXFA+nPIDIKg+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICWhUtTYeglTBa8ipObucdtFl6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRhMzBjNWMtODkxOS0z NjU3LWJmM2EtMWUyNGNhNTg0MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqQ7hkl8F+/pqe/G0xKyLiDEY+QcN2W4zrDzH2vzrRnJYT1+9h2otKF PLa2LLaxdoa0tswfP5r41ekpxaKEYCMLYuHrRvy6QmnlWsLvuzCqbxT5pSp+FSXR Nlw2SlgM/4u41G5A7wsz8xLmX7f4ihFidPuKB6DyWnGHWtCOAOEMetoaLXu8VXW9 F63M3FESwnhwGpIXnllnr64Szso1CI2clo0P+EbW1nLzLT2vc9S/lVJKsu5iBNji K6xYeAT+7p8c/b4o84k9iuOZhkwQ3eyq+OmWj92ylm9hXMAxNKG/CORbcdAhLmaz rjE26xDuwMXmRNkVDqJc6Uc1l4xSr6Y= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:53 2026 by rpki-client