$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa File: 8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa (raw, json) Hash identifier: P0iisexRRDyajZKqmjuevAsKFxhMpJlKGlfH5U6Gcn4= Subject key identifier: FD:60:FB:E8:3B:E6:C7:BA:AF:44:22:5D:09:95:EE:72:4A:41:36:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6196F21FD3EAE455A670 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.70.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:61:96:f2:1f:d3:ea:e4:55:a6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1b149ac9-f815-4a30-ae26-de1f75b1cc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:70:c9:57:7c:fd:88:3a:44:aa:b2:9c:e0: 9a:50:c9:57:89:60:e3:4f:ec:e8:f8:72:92:9a:d6: 52:b5:67:3e:24:de:1d:f0:32:fd:01:3b:3e:57:ad: 21:41:2c:6a:ce:fe:37:ca:76:a6:c9:1c:77:3e:bf: 90:11:9a:94:eb:56:68:e8:21:72:f9:d3:f1:95:c2: ff:55:ce:3c:c9:76:e4:f5:a0:dc:33:09:ba:b4:1a: f2:b9:c1:f0:a3:c7:6b:8c:d8:bb:83:71:14:d0:37: 8c:88:b9:1a:3d:42:e6:51:f7:f2:fc:a5:01:a6:68: d7:a1:24:ab:c7:9d:47:20:0c:d7:27:3f:1d:a4:9c: 44:8a:42:33:6d:52:2c:9b:64:f3:10:d1:65:2b:5f: fb:60:69:b5:b5:aa:8a:56:80:6f:c5:e3:ce:41:23: 42:cb:cc:76:7e:6d:80:89:23:3e:70:d1:fc:e2:72: 7b:48:77:5b:eb:7a:c4:0d:57:49:1d:af:d9:f7:b5: 45:e9:bc:a1:29:f7:0b:32:f9:62:91:77:f7:b1:88: 9e:45:58:9b:fc:1e:84:a6:1d:30:71:12:58:7f:e7: 81:5c:3c:79:ff:66:34:02:af:10:f7:3d:ca:98:18: 93:86:db:1a:8e:8f:68:10:9f:52:82:91:55:34:7e: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:FB:E8:3B:E6:C7:BA:AF:44:22:5D:09:95:EE:72:4A:41:36:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6c:2c:3f:ee:af:be:b1:99:d9:bd:71:bc:d8:0f:f4:f9:51: 9b:3c:f2:7b:5d:13:84:15:a4:57:0f:66:fa:74:5b:87:84:91: 5d:12:e7:dd:e2:26:40:ae:f6:bd:83:cb:9a:1d:a8:f0:38:d7: 86:72:ee:d1:cb:fd:43:0b:db:a8:48:f2:64:d1:a3:a8:94:1c: 71:38:b1:6c:b0:f3:c7:96:c0:a3:fc:17:9f:cc:da:0e:eb:57: 20:cc:b8:ea:0d:96:57:d4:19:a1:0d:31:d5:33:10:0a:c6:49: 4a:74:fb:50:42:6f:07:7d:36:51:b3:59:7f:7d:88:c7:8d:f8: d3:54:8d:4a:0e:ef:cb:95:db:96:e0:52:25:23:40:13:25:6b: 3a:ef:fc:ef:59:e6:bf:eb:d1:30:b1:bc:6d:f4:cf:2e:ab:b8: 5c:5d:b2:72:dc:83:9e:06:6f:b4:d5:36:68:68:d2:59:5d:3f: 7a:b9:d3:7f:7c:ba:68:1f:12:6e:3e:05:49:6d:24:8b:a7:9e: 77:ca:92:39:a4:79:d0:ca:67:72:5d:7c:d7:01:3f:a1:9d:f1: 9c:c2:fd:b7:b2:8d:27:a2:f3:87:07:df:a2:cd:32:c7:40:02: 19:94:6c:50:7b:21:9a:a4:66:16:d0:6c:3c:ee:f8:24:40:47: 43:f8:08:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmGW8h/T6uRVpnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWIxNDlhYzktZjgxNS00YTMwLWFlMjYtZGUxZjc1YjFjYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO9wyVd8/Yg6RKqynOCaUMlXiWDjT+zo+HKS mtZStWc+JN4d8DL9ATs+V60hQSxqzv43ynamyRx3Pr+QEZqU61Zo6CFy+dPxlcL/ Vc48yXbk9aDcMwm6tBryucHwo8drjNi7g3EU0DeMiLkaPULmUffy/KUBpmjXoSSr x51HIAzXJz8dpJxEikIzbVIsm2TzENFlK1/7YGm1taqKVoBvxePOQSNCy8x2fm2A iSM+cNH84nJ7SHdb63rEDVdJHa/Z97VF6byhKfcLMvlikXf3sYieRVib/B6Eph0w cRJYf+eBXDx5/2Y0Aq8Q9z3KmBiThtsajo9oEJ9SgpFVNH5DhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1g++g75se6r0QiXQmV7nJKQTZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGQ4YTVjMWUtNTA2NS0z M2E4LTljYzYtZDMwY2YzODFhOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtsLD/ur76xmdm9cbzYD/T5UZs88ntdE4QVpFcPZvp0W4eEkV0S593i JkCu9r2Dy5odqPA414Zy7tHL/UML26hI8mTRo6iUHHE4sWyw88eWwKP8F5/M2g7r VyDMuOoNllfUGaENMdUzEArGSUp0+1BCbwd9NlGzWX99iMeN+NNUjUoO78uV25bg UiUjQBMlazrv/O9Z5r/r0TCxvG30zy6ruFxdsnLcg54Gb7TVNmho0lldP3q50398 umgfEm4+BUltJIunnnfKkjmkedDKZ3JdfNcBP6Gd8ZzC/beyjSei84cH36LNMsdA AhmUbFB7IZqkZhbQbDzu+CRAR0P4CDM= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:49 2026 by rpki-client