$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa File: 8b23c060-e118-3105-b169-4562d614483f.roa (raw, json) Hash identifier: svqt7SjVpQRW4aiiTjOV8zZxUTlhoDfkzEZuNSn628A= Subject key identifier: CC:89:0A:62:CC:14:DF:47:53:E0:2E:EE:6A:6A:06:EE:B1:08:FE:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA7DC7F02C94BEE3A37120 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.68.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:7d:c7:f0:2c:94:be:e3:a3:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=17f3f5a9-077d-4924-a750-40e2b3d08cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:f3:54:a2:dc:8e:1f:51:78:22:a7:f3:e8: 58:fc:ed:36:a4:85:9c:a7:21:3e:30:e9:36:e9:c2: d2:f5:74:f0:03:8d:b6:46:b6:37:c5:5c:36:7c:37: 84:2f:0f:e3:71:b2:e1:02:56:50:4f:82:25:3b:d6: a4:ef:0f:67:ba:78:cf:7b:8b:b3:13:49:81:79:4b: 62:2b:f9:2f:d1:76:15:8f:12:49:3f:53:ac:5a:fb: 5d:68:34:8f:c4:ba:f5:f1:02:70:d6:65:0e:a3:38: 87:a1:a6:a7:b2:e3:44:d2:ba:61:c6:76:c8:a2:5e: 01:34:b6:f3:8e:8c:8c:e8:55:2e:8a:0b:4c:56:fb: cb:fc:ca:7b:07:1b:39:b3:fb:af:d2:c8:59:0b:73: 00:12:6c:6b:32:fe:5b:7c:a6:33:92:74:66:7a:65: 05:73:01:96:77:05:cd:4d:30:3f:26:d9:95:2c:52: 35:25:87:93:0f:4d:5e:be:27:d4:9e:35:c3:f3:50: 8e:54:13:c0:5a:ac:b5:4a:9e:b1:1e:64:4a:bb:d5: dd:d7:02:f9:ef:bc:45:9f:35:ee:82:90:61:17:d1: 6c:4a:81:90:80:6c:28:88:17:3c:c6:49:03:86:21: 66:9e:0c:3f:7a:10:81:79:6c:b8:31:f8:d3:1d:37: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:0A:62:CC:14:DF:47:53:E0:2E:EE:6A:6A:06:EE:B1:08:FE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:86:16:43:8b:32:f1:fb:39:f0:86:1d:62:5e:61:07:c6:dd: 0b:24:23:0f:4c:f4:a7:a0:39:2e:f6:98:9c:01:9e:93:bb:44: e1:4e:a9:14:4d:25:40:ab:4a:b8:99:42:bf:c9:51:c6:87:c7: be:7e:9d:9e:ba:e7:df:00:0b:fe:7e:23:8f:f7:32:11:e9:56: 77:08:89:57:f0:aa:88:77:72:42:5b:f5:9e:f5:2c:e9:f6:ea: e5:cc:26:31:97:cc:11:e9:99:ee:54:50:be:15:08:b9:9f:25: 48:ab:59:c3:30:7d:76:e3:5e:0a:91:ed:5e:6d:52:f6:6f:b8: 15:7b:3c:24:49:02:db:43:e6:69:04:7e:ba:19:70:b1:3e:ba: 1e:bc:05:99:29:6e:9f:0b:2c:9b:a3:02:b3:31:3e:5e:1d:c8: 7c:8c:1a:1e:9b:a7:4c:e6:60:70:cb:28:3a:13:bd:49:42:5b: e6:28:21:d8:a0:48:12:bb:f2:05:24:d2:08:04:91:8a:4e:f8: a4:dc:85:58:a5:94:77:eb:f0:ee:f9:34:ca:50:80:9b:46:1f: 66:d6:11:89:d5:0f:3b:0d:ba:cd:73:e4:6e:3c:12:d3:dc:db: 67:bd:6c:cc:fb:98:3b:dd:88:49:3d:03:8b:b6:08:a3:61:62: c2:f3:b6:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqn3H8CyUvuOjcSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MTdmM2Y1YTktMDc3ZC00OTI0LWE3NTAtNDBlMmIzZDA4Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnfzVKLcjh9ReCKn8+hY/O02pIWcpyE+MOk2 6cLS9XTwA422RrY3xVw2fDeELw/jcbLhAlZQT4IlO9ak7w9nunjPe4uzE0mBeUti K/kv0XYVjxJJP1OsWvtdaDSPxLr18QJw1mUOoziHoaansuNE0rphxnbIol4BNLbz joyM6FUuigtMVvvL/Mp7Bxs5s/uv0shZC3MAEmxrMv5bfKYzknRmemUFcwGWdwXN TTA/JtmVLFI1JYeTD01evifUnjXD81COVBPAWqy1Sp6xHmRKu9Xd1wL577xFnzXu gpBhF9FsSoGQgGwoiBc8xkkDhiFmngw/ehCBeWy4MfjTHTdzzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyJCmLMFN9HU+Au7mpqBu6xCP41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGIyM2MwNjAtZTExOC0z MTA1LWIxNjktNDU2MmQ2MTQ0ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOGFkOLMvH7OfCGHWJeYQfG3QskIw9M9KegOS72mJwBnpO7ROFOqRRN JUCrSriZQr/JUcaHx75+nZ66598AC/5+I4/3MhHpVncIiVfwqoh3ckJb9Z71LOn2 6uXMJjGXzBHpme5UUL4VCLmfJUirWcMwfXbjXgqR7V5tUvZvuBV7PCRJAttD5mkE froZcLE+uh68BZkpbp8LLJujArMxPl4dyHyMGh6bp0zmYHDLKDoTvUlCW+YoIdig SBK78gUk0ggEkYpO+KTchVillHfr8O75NMpQgJtGH2bWEYnVDzsNus1z5G48EtPc 22e9bMz7mDvdiEk9A4u2CKNhYsLztjU= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:22 2026 by rpki-client