$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa File: 633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa (raw, json) Hash identifier: C6LtMjkzV4vSWj5MUwMsTCGKq/F74BCPE0/8UejgxSs= Subject key identifier: 43:0E:42:13:2E:35:DD:29:16:58:56:8E:3D:1A:81:19:45:10:E9:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0E5F00709310EB7A09700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.119.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e5:f0:07:09:31:0e:b7:a0:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=103d6adb-1b7f-43a5-ac25-3e06d8d3bfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:4c:7d:a2:9d:58:4a:9a:14:1c:09:93:8e: f5:a7:23:b3:cc:c2:20:2e:7a:88:47:06:64:b6:74: e7:90:4e:74:38:c6:71:4a:5c:fd:78:6a:b0:0a:64: 57:eb:a8:bd:af:55:5f:56:18:c1:40:c4:b3:51:16: bc:54:16:6a:23:6a:f8:cf:68:e4:a7:63:cd:b1:71: f7:ab:8d:30:4b:0a:ed:7c:b0:e0:ca:d9:8f:a4:f3: f3:bc:cb:0c:1a:40:dd:86:b8:fe:e6:98:bb:41:cf: fb:f4:f8:91:dc:41:86:12:53:ea:5a:44:2e:5a:d0: 06:0d:19:eb:d2:44:13:84:aa:af:7e:43:72:46:53: b8:f1:62:41:78:f8:03:59:40:31:7a:d4:55:ef:44: cc:05:f8:d9:8d:b3:63:d5:6d:e9:fc:d0:ff:42:43: cd:4e:36:10:fa:16:a8:04:02:7a:10:41:88:22:4b: dc:22:53:4b:f9:e7:a5:41:94:31:45:ff:8d:3b:43: 9e:ab:70:26:e0:ac:dc:38:f3:53:8b:c2:ac:ee:c6: 83:5f:f0:1b:f0:96:5d:93:9f:35:49:c1:17:2c:be: d4:48:f0:32:bf:6f:24:21:c7:c0:0f:2b:ec:37:f5: b6:47:30:1e:55:9e:bd:d6:b7:63:f7:cd:48:d5:9e: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0E:42:13:2E:35:DD:29:16:58:56:8E:3D:1A:81:19:45:10:E9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:df:79:13:84:6a:8b:4c:d8:e5:40:84:24:89:5c:c2:43:b4: 4b:67:97:b9:dc:3e:4b:cb:95:4c:d2:a0:48:d4:d1:2f:46:a0: dc:e7:e9:9f:8e:95:93:d8:9d:d7:e7:dd:86:5d:64:5c:46:2f: 4c:4c:4a:af:1a:6d:d6:38:3c:5d:32:ba:0b:e2:f5:2f:be:6f: 8b:15:fa:56:33:eb:85:79:a7:cc:23:4f:d3:d5:5a:28:54:2b: d4:43:d4:1d:7f:d0:89:47:cf:f0:de:57:5e:ab:82:f6:b4:5b: 00:24:f1:9a:55:46:67:01:98:ab:30:9f:f2:0e:91:25:95:6e: ec:6c:9c:1e:41:1b:22:4f:f2:a3:8e:95:c6:a9:4d:87:02:eb: d8:17:ac:2b:6e:5e:d5:4a:37:8c:82:a2:8a:7c:df:a6:de:96: 41:20:94:bf:a9:5d:4e:76:1a:dc:4b:b4:27:cc:29:5c:de:5b: 4d:50:f7:ee:e4:84:a7:34:b6:82:bc:4a:f0:bf:dd:c0:cc:24: 37:4b:27:04:36:57:7e:07:80:c6:40:9d:bc:83:00:04:9f:1c: 25:95:bd:31:01:ec:f3:35:57:99:c9:cf:7b:54:cc:a1:81:14: 1c:45:61:7d:1a:c0:83:18:77:97:d0:19:a3:8f:14:7d:a8:55: e3:5f:29:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OXwBwkxDreglwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTAzZDZhZGItMWI3Zi00M2E1LWFjMjUtM2UwNmQ4ZDNiZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWNMfaKdWEqaFBwJk471pyOzzMIgLnqIRwZk tnTnkE50OMZxSlz9eGqwCmRX66i9r1VfVhjBQMSzURa8VBZqI2r4z2jkp2PNsXH3 q40wSwrtfLDgytmPpPPzvMsMGkDdhrj+5pi7Qc/79PiR3EGGElPqWkQuWtAGDRnr 0kQThKqvfkNyRlO48WJBePgDWUAxetRV70TMBfjZjbNj1W3p/ND/QkPNTjYQ+hao BAJ6EEGIIkvcIlNL+eelQZQxRf+NO0Oeq3Am4KzcOPNTi8Ks7saDX/Ab8JZdk581 ScEXLL7USPAyv28kIcfADyvsN/W2RzAeVZ691rdj981I1Z7muQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMOQhMuNd0pFlhWjj0agRlFEOk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjMzZDdjNWMtMTBhMS0z NWY1LTk4MmEtN2M1ZTRjOWVjMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIndQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/feROEaotM2OVAhCSJXMJDtEtnl7ncPkvLlUzSoEjU0S9GoNzn6Z+O lZPYndfn3YZdZFxGL0xMSq8abdY4PF0yugvi9S++b4sV+lYz64V5p8wjT9PVWihU K9RD1B1/0IlHz/DeV16rgva0WwAk8ZpVRmcBmKswn/IOkSWVbuxsnB5BGyJP8qOO lcapTYcC69gXrCtuXtVKN4yCoop836belkEglL+pXU52GtxLtCfMKVzeW01Q9+7k hKc0toK8SvC/3cDMJDdLJwQ2V34HgMZAnbyDAASfHCWVvTEB7PM1V5nJz3tUzKGB FBxFYX0awIMYd5fQGaOPFH2oVeNfKeY= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:49 2026 by rpki-client