$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa File: 686c5db4-0183-3cb3-a676-970651d1bf14.roa (raw, json) Hash identifier: /ZwVHrWHRBbX3DYv1H7BC1m/nUDvVVhL5VrkwH9VrD0= Subject key identifier: 72:14:BF:4E:C6:90:9E:EE:5E:A4:A9:BF:AD:DC:4C:D2:5C:B4:F0:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA95130EE8DE34613C62C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.133.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:95:13:0e:e8:de:34:61:3c:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=abb5c797-daa7-4c42-b3bd-710a9bd3a8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:dc:a0:b9:98:9e:68:ce:df:1d:cd:3c:a0: 33:db:57:72:a5:74:cd:9d:0e:f6:73:b5:52:4b:10: 71:10:79:aa:4d:cf:c0:e1:ca:11:3f:d5:25:6b:da: ec:96:fc:9e:41:7e:3c:24:f4:3c:83:29:24:e3:ca: b4:01:06:46:b6:74:8d:98:4d:2e:37:7b:c9:6a:ce: 82:db:32:0c:ed:95:52:fb:2e:ad:2c:9c:0b:97:67: 1e:fa:cd:1f:81:28:a9:e2:dc:e6:e9:11:d9:64:2f: 5b:8c:e9:11:62:bd:31:9f:dd:dd:2a:3a:bc:8a:78: ad:2d:12:f2:71:01:6c:4a:86:97:63:1d:82:ba:83: 78:05:c1:9a:f9:5c:64:bf:5f:0f:4e:cb:5d:cb:8a: 18:10:7f:d2:75:ff:bb:b6:bd:98:a5:ff:d8:3b:a6: 53:67:52:87:0a:e9:a1:0a:c7:3b:0c:c6:69:45:6d: 27:f4:b9:f9:b0:eb:42:18:41:01:b0:69:3e:70:68: 61:7c:cc:6c:21:96:98:2b:6d:22:fc:ea:96:99:a2: 25:55:87:bc:5a:f1:87:de:20:5a:4a:f1:b4:9c:b1: f2:1a:98:5c:5c:49:7f:c8:b7:4a:68:5a:2e:b2:e3: a5:91:92:34:1e:e1:70:60:42:5b:be:8c:d9:7f:2b: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:BF:4E:C6:90:9E:EE:5E:A4:A9:BF:AD:DC:4C:D2:5C:B4:F0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2a:39:36:b3:ee:97:2e:32:d4:5b:65:36:3a:72:86:fa:29: 59:49:31:d7:fb:87:dc:8c:f0:df:38:6b:2f:b4:f6:af:a0:2d: 4a:ef:7a:64:c9:05:b2:49:0f:ca:5e:72:b5:2d:00:2d:bc:6c: e7:09:90:d3:cb:97:03:c4:51:84:fb:b4:ee:cf:a4:5c:22:07: ac:ef:11:50:df:e3:77:d8:89:18:2c:f2:a1:eb:f3:1f:ca:07: 5a:f4:ba:6f:78:0b:a9:fd:26:8b:13:92:68:52:dc:50:39:2b: 3b:9b:b1:65:ae:7c:eb:ff:66:da:18:09:ae:27:21:f2:34:63: 64:d5:4f:16:5b:96:0d:fe:47:31:f8:29:5b:93:2f:96:16:61: ca:71:39:53:d2:67:8a:a5:a5:47:c7:ce:08:ce:b9:43:4a:20: f4:23:7f:88:66:d2:01:df:ac:76:24:61:10:20:24:38:a9:c7: ba:b5:2a:ec:3f:03:32:ba:76:c8:96:6c:eb:b5:e6:75:a5:c8: ce:03:b9:d0:71:a2:bf:5d:27:17:14:cb:00:e4:63:f0:84:d2: d5:f0:d4:f2:89:14:ae:6d:d5:3a:54:33:e7:37:8e:16:1e:9d: b2:51:9b:a5:bf:48:d8:a0:e1:ad:11:0f:2d:06:51:7a:b0:24: 19:71:12:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpUTDujeNGE8YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YWJiNWM3OTctZGFhNy00YzQyLWIzYmQtNzEwYTliZDNhOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAXcoLmYnmjO3x3NPKAz21dypXTNnQ72c7VS SxBxEHmqTc/A4coRP9Ula9rslvyeQX48JPQ8gykk48q0AQZGtnSNmE0uN3vJas6C 2zIM7ZVS+y6tLJwLl2ce+s0fgSip4tzm6RHZZC9bjOkRYr0xn93dKjq8initLRLy cQFsSoaXYx2CuoN4BcGa+Vxkv18PTstdy4oYEH/Sdf+7tr2Ypf/YO6ZTZ1KHCumh Csc7DMZpRW0n9Ln5sOtCGEEBsGk+cGhhfMxsIZaYK20i/OqWmaIlVYe8WvGH3iBa SvG0nLHyGphcXEl/yLdKaFousuOlkZI0HuFwYEJbvozZfysSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIUv07GkJ7uXqSpv63cTNJctPCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg2YzVkYjQtMDE4My0z Y2IzLWE2NzYtOTcwNjUxZDFiZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQqOTaz7pcuMtRbZTY6cob6KVlJMdf7h9yM8N84ay+09q+gLUrvemTJ BbJJD8pecrUtAC28bOcJkNPLlwPEUYT7tO7PpFwiB6zvEVDf43fYiRgs8qHr8x/K B1r0um94C6n9JosTkmhS3FA5KzubsWWufOv/ZtoYCa4nIfI0Y2TVTxZblg3+RzH4 KVuTL5YWYcpxOVPSZ4qlpUfHzgjOuUNKIPQjf4hm0gHfrHYkYRAgJDipx7q1Kuw/ AzK6dsiWbOu15nWlyM4DudBxor9dJxcUywDkY/CE0tXw1PKJFK5t1TpUM+c3jhYe nbJRm6W/SNig4a0RDy0GUXqwJBlxEsA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:22 2026 by rpki-client