$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa File: 95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa (raw, json) Hash identifier: DyEE0ZkzuBdCIV4hDyZswk58aC/bcD81GIapuLD5hdg= Subject key identifier: 96:E0:F7:52:08:FF:B4:87:4B:68:AC:31:D9:1D:3A:E6:63:FC:7D:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAABDDB9231570869EA800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.148.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ab:dd:b9:23:15:70:86:9e:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4f1f7e8a-e62b-4591-943f-a1b7c70dc3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:11:96:53:5a:b7:5c:ae:97:51:f5:53:4f:69: 03:d2:80:9b:53:d4:46:a2:eb:0a:4e:ce:be:71:99: 36:8e:ae:8d:cd:a7:f2:68:2f:5d:7b:45:f8:c8:0d: a7:f9:c7:d1:17:d7:3d:1d:c5:b5:bf:a8:d4:03:97: ca:3c:32:2f:02:a8:b5:93:04:78:37:8b:22:b5:44: 30:c8:cb:89:8f:87:d1:d5:ab:73:a9:4c:e0:eb:2a: 51:74:ae:d5:81:72:e3:92:05:0e:f9:2a:d8:07:4d: 20:64:20:58:b4:aa:1c:be:64:59:0d:06:41:6b:ef: ba:8e:54:3d:13:16:2a:9d:1b:85:79:ee:ee:09:d5: 94:1f:fa:f2:a9:c3:2e:d5:84:48:21:df:af:c8:c0: 0e:d4:4a:4a:f7:3b:5f:31:5b:56:1d:4a:0b:f7:20: 3c:0f:56:0a:3b:89:a1:bb:72:73:5a:56:ae:cc:54: 25:97:79:88:a6:e0:b1:af:94:82:32:37:c1:58:c9: 05:c4:56:6f:33:52:18:7e:e2:11:17:ec:3b:fc:f4: de:92:44:15:10:f1:03:64:d9:e9:f8:37:e6:f3:8b: e4:ff:1a:c1:e1:68:24:79:1b:ad:0a:b4:a1:15:1a: 70:a2:18:f7:08:78:50:c3:e3:82:47:81:d3:7e:c6: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:F7:52:08:FF:B4:87:4B:68:AC:31:D9:1D:3A:E6:63:FC:7D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0f:57:12:6c:8c:c7:42:0a:29:f5:93:49:a7:a9:36:ce:b5: 38:7d:c0:0a:ea:d3:45:78:e7:6e:0b:f9:87:73:e0:f2:ac:9d: 7d:52:e3:95:08:c8:92:d2:5e:b0:01:1f:7b:c6:bd:99:f9:a0: a0:38:ea:6a:8d:1d:e0:7c:85:22:1d:8c:8a:87:20:2b:aa:de: 30:07:1e:45:0a:5d:37:73:a7:df:aa:43:01:84:d1:2c:c1:58: 40:72:fa:1d:df:c3:b6:54:a8:c3:4c:61:fb:91:ea:3f:6e:0b: e1:27:4f:cd:6f:64:c0:7d:13:6f:6b:cd:a4:65:7c:f2:ad:65: 95:33:82:d9:c2:09:5d:7e:62:42:5c:1e:b1:7b:3e:71:ba:e3: 29:3c:83:d6:aa:9b:14:03:f3:d8:6c:cf:ed:ce:de:99:39:a1: 00:30:bf:ac:2e:e7:82:ca:7b:80:21:f0:af:60:9d:1f:bc:b9: 7b:d6:0a:a3:02:86:21:fa:99:ee:67:51:e2:87:1f:6b:4a:3b: 66:1f:b5:18:29:e3:c1:e6:2c:65:42:46:b8:57:20:58:6a:2d: 06:da:b1:00:b6:28:39:88:06:8e:f1:e0:68:c4:9f:00:1d:2c: 6a:c2:51:63:ff:89:1d:a1:b1:42:1d:98:ac:78:f3:cc:02:46: b6:0a:95:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqvduSMVcIaeqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NGYxZjdlOGEtZTYyYi00NTkxLTk0M2YtYTFiN2M3MGRjM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBGWU1q3XK6XUfVTT2kD0oCbU9RGousKTs6+ cZk2jq6NzafyaC9de0X4yA2n+cfRF9c9HcW1v6jUA5fKPDIvAqi1kwR4N4sitUQw yMuJj4fR1atzqUzg6ypRdK7VgXLjkgUO+SrYB00gZCBYtKocvmRZDQZBa++6jlQ9 ExYqnRuFee7uCdWUH/ryqcMu1YRIId+vyMAO1EpK9ztfMVtWHUoL9yA8D1YKO4mh u3JzWlauzFQll3mIpuCxr5SCMjfBWMkFxFZvM1IYfuIRF+w7/PTekkQVEPEDZNnp +Dfm84vk/xrB4WgkeRutCrShFRpwohj3CHhQw+OCR4HTfsYFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbg91II/7SHS2isMdkdOuZj/H0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTVhMGU0MDEtZjcyYS0z ZDhkLThjNzctYjczZGUwNmE1MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMPVxJsjMdCCin1k0mnqTbOtTh9wArq00V4524L+Ydz4PKsnX1S45UI yJLSXrABH3vGvZn5oKA46mqNHeB8hSIdjIqHICuq3jAHHkUKXTdzp9+qQwGE0SzB WEBy+h3fw7ZUqMNMYfuR6j9uC+EnT81vZMB9E29rzaRlfPKtZZUzgtnCCV1+YkJc HrF7PnG64yk8g9aqmxQD89hsz+3O3pk5oQAwv6wu54LKe4Ah8K9gnR+8uXvWCqMC hiH6me5nUeKHH2tKO2YftRgp48HmLGVCRrhXIFhqLQbasQC2KDmIBo7x4GjEnwAd LGrCUWP/iR2hsUIdmKx488wCRrYKlf4= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:16 2026 by rpki-client