$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa File: 70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa (raw, json) Hash identifier: GdU8garm363y0Fj4+VUeUiVsYp8KU+MsBYm0aya+M/A= Subject key identifier: 99:3E:1B:C8:E3:82:35:74:56:2E:C4:BC:1A:83:C7:5F:C3:16:4B:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB6329F38ACA9F33FA200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.134.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b6:32:9f:38:ac:a9:f3:3f:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=34d3849a-6e87-4f44-bc19-9883bed163a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:b9:0a:38:70:d8:d7:d8:66:9e:62:2d:c2: d7:64:19:c6:9d:36:97:9f:07:a9:6c:33:19:04:59: 5f:80:55:c0:12:7f:e7:3f:82:2f:20:99:0c:0f:41: 96:14:0a:e2:d5:bd:48:54:b7:50:00:1f:68:ee:15: db:3d:1c:4c:7d:2b:1e:4d:0b:91:6c:4f:54:fd:f1: 68:2d:c4:09:7e:ed:db:af:f8:22:20:3d:01:43:17: 62:b1:55:1d:05:91:b5:14:c0:72:d4:7b:5f:c7:e0: fe:fb:02:8b:6f:c4:78:65:38:e0:92:02:1e:22:9d: 64:ec:1a:19:76:e8:6d:21:81:d0:65:46:47:8f:b6: 95:6f:18:e3:ea:b1:97:8f:78:d4:74:a1:6c:ad:72: a9:35:95:dd:fa:1e:9d:70:8d:77:1e:52:e7:91:99: 05:6b:67:ff:03:7f:a4:68:e6:39:eb:61:04:d2:95: 27:14:0d:5d:3b:8c:1f:f4:c3:22:37:f2:44:3c:5b: 33:d1:27:8a:ad:3b:6a:f7:8b:4d:03:b6:e0:88:51: ba:b1:f4:c7:a3:31:05:26:6a:47:5e:02:1e:d3:0b: f1:f3:c5:f2:a0:ce:11:db:7a:1f:d9:90:fc:98:2a: 0a:cc:de:65:47:c7:0e:cb:e0:d5:e1:f7:73:85:68: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:1B:C8:E3:82:35:74:56:2E:C4:BC:1A:83:C7:5F:C3:16:4B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1b:60:bf:9d:14:0c:52:d4:51:ba:76:b4:04:62:96:ec:a2: 74:cd:fe:c9:13:7d:f9:38:ca:70:40:e0:8e:d3:09:b5:4a:d4: ea:12:ee:5d:10:dd:0f:cb:33:27:77:06:27:7e:00:c0:f2:88: 66:0a:c6:04:3d:c2:35:88:31:ab:47:5c:84:ba:0b:a4:5f:9e: 33:18:36:c6:d2:a7:2b:31:5e:4e:f4:9b:4e:81:5d:92:b8:a5: 70:4f:70:72:e8:92:5f:91:74:4f:1a:28:5c:8b:5f:af:48:ae: 65:93:ac:c4:9a:f7:5f:b9:97:17:5e:7c:21:d4:bb:79:c4:ba: 88:87:51:3c:33:3d:eb:04:40:f7:37:13:70:b0:f3:5d:a5:87: ae:10:65:d5:37:98:9c:b8:bd:33:51:65:77:ae:ec:76:44:5a: 1c:3d:e6:f2:82:3f:8a:0e:20:ec:83:cd:03:15:79:da:68:bc: 11:6a:9a:e7:a6:aa:b6:87:31:37:dc:f2:28:c2:ce:38:47:9c: d5:c6:86:5e:43:f8:dc:e1:66:51:c6:7a:e2:fb:fa:5b:dd:78: e6:e3:cc:21:f1:95:e4:f8:a7:36:a1:ad:a9:3d:5d:89:7d:a8: 38:fe:40:6e:5c:b5:3a:5d:bd:60:40:4e:3a:73:93:f9:70:c2: f2:02:19:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrYynzisqfM/ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzRkMzg0OWEtNmU4Ny00ZjQ0LWJjMTktOTg4M2JlZDE2M2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr65Cjhw2NfYZp5iLcLXZBnGnTaXnwepbDMZ BFlfgFXAEn/nP4IvIJkMD0GWFAri1b1IVLdQAB9o7hXbPRxMfSseTQuRbE9U/fFo LcQJfu3br/giID0BQxdisVUdBZG1FMBy1Htfx+D++wKLb8R4ZTjgkgIeIp1k7BoZ duhtIYHQZUZHj7aVbxjj6rGXj3jUdKFsrXKpNZXd+h6dcI13HlLnkZkFa2f/A3+k aOY562EE0pUnFA1dO4wf9MMiN/JEPFsz0SeKrTtq94tNA7bgiFG6sfTHozEFJmpH XgIe0wvx88XyoM4R23of2ZD8mCoKzN5lR8cOy+DV4fdzhWglYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk+G8jjgjV0Vi7EvBqDx1/DFkslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzBjOGM3MWItMWI1OS0z M2E1LThmOWUtMjllMDQzZTRhZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEbYL+dFAxS1FG6drQEYpbsonTN/skTffk4ynBA4I7TCbVK1OoS7l0Q 3Q/LMyd3Bid+AMDyiGYKxgQ9wjWIMatHXIS6C6RfnjMYNsbSpysxXk70m06BXZK4 pXBPcHLokl+RdE8aKFyLX69IrmWTrMSa91+5lxdefCHUu3nEuoiHUTwzPesEQPc3 E3Cw812lh64QZdU3mJy4vTNRZXeu7HZEWhw95vKCP4oOIOyDzQMVedpovBFqmuem qraHMTfc8ijCzjhHnNXGhl5D+NzhZlHGeuL7+lvdeObjzCHxleT4pzahrak9XYl9 qDj+QG5ctTpdvWBATjpzk/lwwvICGaM= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:17 2026 by rpki-client