$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/710b950a-c0c3-3150-85ed-9b0fc49f4295.roa File: 710b950a-c0c3-3150-85ed-9b0fc49f4295.roa (raw, json) Hash identifier: NjBweuXcLP2Fp6VTV7Wq80ERzNiAs8KgMQ7VbEvyRSU= Subject key identifier: D6:E4:12:93:04:DC:1B:DF:19:11:17:EB:E9:87:E6:17:D0:C5:E0:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA43109A092EED53CBD900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/710b950a-c0c3-3150-85ed-9b0fc49f4295.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.70.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:43:10:9a:09:2e:ed:53:cb:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=472d4482-79a9-4891-b734-aec6d71b6a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:26:70:a0:d5:e6:0b:53:0b:f2:6a:21:77: 2f:12:f9:88:df:00:6f:a0:b0:10:22:8a:ee:cf:3c: a5:ee:8e:dd:7d:fb:2b:bd:66:50:ce:5d:61:6a:7c: 76:1d:de:b7:e2:5b:0c:cd:96:02:5f:f1:86:26:7b: 60:dc:a5:bd:69:c7:c3:ae:bd:0a:66:74:42:d7:52: b1:d8:72:16:01:44:75:12:1e:f2:2e:2b:0f:8e:de: 46:52:4b:6b:cc:bf:a4:72:a6:27:40:a0:97:21:b0: fc:6a:ec:e7:08:dd:46:67:79:34:ba:00:22:84:e5: 32:62:56:1c:ac:8f:ed:50:ec:0a:c1:56:39:c9:a5: c5:39:2c:42:f2:ae:93:e8:75:1e:25:09:be:26:ec: 11:a5:bf:9d:b0:ea:92:97:7b:94:42:ca:14:da:e8: e7:03:35:8a:ad:65:86:9b:d4:83:45:19:ed:18:68: c2:61:00:68:02:07:b9:31:1f:53:70:0e:c9:a7:87: ee:6b:a8:14:71:05:41:60:9d:82:2a:a0:96:ff:f9: b5:22:76:45:ff:55:9d:fb:7e:5c:b3:bd:b3:0e:75: a6:cb:df:71:8c:77:bc:b7:ab:74:da:35:62:47:64: fa:24:12:52:70:36:95:6c:51:33:1d:d4:d9:89:ef: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E4:12:93:04:DC:1B:DF:19:11:17:EB:E9:87:E6:17:D0:C5:E0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/710b950a-c0c3-3150-85ed-9b0fc49f4295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:05:69:0d:09:fa:4e:9f:77:07:6a:e7:a2:0c:79:1a:8e:a6: c8:5b:b4:a1:a7:39:17:f6:da:fe:e7:9c:fb:3f:db:e1:3f:3d: c8:99:76:17:aa:24:16:03:5a:c0:1b:b0:0a:14:11:12:aa:fd: 0b:19:eb:23:90:bb:36:93:ce:37:8c:30:da:c3:0f:6b:09:5d: 61:20:cb:77:c5:e0:ee:92:2c:fe:19:b4:97:3b:d3:6a:be:80: 7b:97:a4:36:42:30:8f:60:ac:80:82:48:d8:00:4f:ae:16:0a: 8f:3b:42:82:96:b3:d9:0e:0a:c4:5c:12:d0:d6:32:1e:98:5e: a3:46:81:2f:b1:25:a2:12:43:ce:d5:82:84:d6:3f:ae:bb:1d: ef:38:ff:c0:7c:93:49:41:1b:c4:cf:82:9c:6d:94:50:ba:a6: 2b:83:42:e2:0a:54:f1:98:57:0e:73:0e:f9:b9:a8:41:36:fc: ec:37:92:be:ea:08:b4:ef:98:8a:de:3a:1b:c0:23:4e:ad:9f: 75:c8:aa:98:2c:50:70:ed:3e:f4:ef:d3:52:13:73:c8:09:b5: f2:cf:aa:bb:a5:f0:7e:d9:e4:d8:cd:bc:d8:79:94:07:43:76: 7b:50:4d:55:25:20:59:ff:e7:5d:5e:75:75:fc:03:18:7a:b2: c7:0c:8b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkMQmgku7VPL2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDcyZDQ0ODItNzlhOS00ODkxLWI3MzQtYWVjNmQ3MWI2YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns8mcKDV5gtTC/JqIXcvEvmI3wBvoLAQIoru zzyl7o7dffsrvWZQzl1hanx2Hd634lsMzZYCX/GGJntg3KW9acfDrr0KZnRC11Kx 2HIWAUR1Eh7yLisPjt5GUktrzL+kcqYnQKCXIbD8auznCN1GZ3k0ugAihOUyYlYc rI/tUOwKwVY5yaXFOSxC8q6T6HUeJQm+JuwRpb+dsOqSl3uUQsoU2ujnAzWKrWWG m9SDRRntGGjCYQBoAge5MR9TcA7Jp4fua6gUcQVBYJ2CKqCW//m1InZF/1Wd+35c s72zDnWmy99xjHe8t6t02jViR2T6JBJScDaVbFEzHdTZie+1FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbkEpME3BvfGREX6+mH5hfQxeAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzEwYjk1MGEtYzBjMy0z MTUwLTg1ZWQtOWIwZmM0OWY0Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8FaQ0J+k6fdwdq56IMeRqOpshbtKGnORf22v7nnPs/2+E/PciZdheq JBYDWsAbsAoUERKq/QsZ6yOQuzaTzjeMMNrDD2sJXWEgy3fF4O6SLP4ZtJc702q+ gHuXpDZCMI9grICCSNgAT64WCo87QoKWs9kOCsRcEtDWMh6YXqNGgS+xJaISQ87V goTWP667He84/8B8k0lBG8TPgpxtlFC6piuDQuIKVPGYVw5zDvm5qEE2/Ow3kr7q CLTvmIreOhvAI06tn3XIqpgsUHDtPvTv01ITc8gJtfLPqrul8H7Z5NjNvNh5lAdD dntQTVUlIFn/511edXX8Axh6sscMi2o= -----END CERTIFICATE-----Generated at Thu Mar 19 01:50:17 2026 by rpki-client