$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/966da7d6-ab9d-3dac-828d-4333574104a0.roa File: 966da7d6-ab9d-3dac-828d-4333574104a0.roa (raw, json) Hash identifier: hlVJIOwfAEAnGtZpgDHQki46cAj6iGHAe7lu1NFpTB8= Subject key identifier: 00:91:32:57:F2:EF:18:16:D3:42:29:60:BD:B6:7F:1A:2D:B0:DA:9F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA46CD63A85A15F67F3540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/966da7d6-ab9d-3dac-828d-4333574104a0.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.171.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:46:cd:63:a8:5a:15:f6:7f:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=fdc99fdb-af81-4bb1-b13a-bb069d734687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:44:21:19:ea:a0:b9:8b:d0:05:32:51:8a: 3b:50:df:61:91:a6:6a:be:a1:ae:0c:c4:73:5a:5f: 5a:00:dd:eb:63:1e:6c:aa:3a:ef:f9:88:ca:0d:fc: 7a:1d:27:45:63:b4:2a:71:ec:4b:4b:ce:73:9f:d1: 81:7c:a3:7a:6e:a0:f5:f4:f4:89:3e:41:51:5e:ae: d4:27:d4:16:35:f8:2b:3d:4c:d5:4c:6f:35:f9:3b: 26:20:81:21:60:28:ce:46:53:55:ad:fd:89:a2:e2: 32:4c:79:29:1d:53:b4:28:4a:22:9b:20:04:3f:18: 6a:71:6d:2a:2e:1c:80:58:fa:a8:20:7d:c6:53:67: 18:4f:31:62:3c:f4:54:0d:b7:ae:2a:19:e5:59:c1: e7:cc:20:44:45:70:f4:54:66:5b:25:94:fd:d3:36: c6:85:9b:8d:4c:e5:db:48:b5:f9:d4:ea:6d:51:47: 36:88:3c:4f:56:85:c1:a9:f7:15:90:78:71:b3:4e: 16:d0:e0:d4:e1:52:3d:10:16:cc:a9:49:66:a9:eb: 4b:31:f2:78:8e:5e:69:f8:49:c4:25:05:ec:a8:f3: 9a:04:0e:d7:4b:b3:f9:73:09:a3:c9:7b:86:4b:dd: af:7c:ba:d7:cf:c2:01:db:f4:9b:a6:7b:2e:d3:fa: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:91:32:57:F2:EF:18:16:D3:42:29:60:BD:B6:7F:1A:2D:B0:DA:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/966da7d6-ab9d-3dac-828d-4333574104a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.171.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:71:fb:f0:67:ab:07:d1:5e:9d:b7:ef:73:3b:46:c4:01:cd: c0:71:52:54:59:1f:af:9e:17:d2:6b:e7:76:24:95:d7:db:96: 08:97:fd:b9:31:f6:69:ce:63:65:ce:74:8d:43:41:eb:81:24: 73:f1:a5:c2:7b:36:6b:fa:7d:52:3a:20:0d:e4:23:ad:c2:f3: 58:0c:6e:e0:5e:d1:88:f7:58:e1:c9:2a:c4:ec:61:0f:cf:4f: 05:31:a6:bf:18:2e:d7:1f:5c:c9:33:e9:34:b4:3c:e8:95:62: 85:c6:7f:9f:0e:2d:a7:c3:83:12:bd:8f:ba:be:a3:62:51:2f: d1:18:e6:40:00:b8:c1:98:29:ab:2b:6e:45:fa:30:50:e9:2f: c6:14:d7:d4:f9:21:69:a2:39:fa:56:88:89:1a:ea:ab:65:9b: 93:c9:de:a2:95:14:b1:ae:f2:24:ee:d5:f8:2f:48:be:d2:7f: 44:ca:06:56:52:1b:93:f6:41:3d:cc:98:fe:c6:68:6c:b5:d0: 76:9e:eb:88:75:e0:d9:9e:cd:bf:48:77:43:ca:76:5b:73:6a: cb:1d:ba:36:84:0d:ea:0f:f8:7d:47:1f:2d:0a:71:ae:b5:dd: c3:bd:9e:74:c2:e3:38:2b:4f:e2:d2:94:c2:d8:29:0d:58:9d: 38:18:03:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkbNY6haFfZ/NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmRjOTlmZGItYWY4MS00YmIxLWIxM2EtYmIwNjlkNzM0Njg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaFEIRnqoLmL0AUyUYo7UN9hkaZqvqGuDMRz Wl9aAN3rYx5sqjrv+YjKDfx6HSdFY7QqcexLS85zn9GBfKN6bqD19PSJPkFRXq7U J9QWNfgrPUzVTG81+TsmIIEhYCjORlNVrf2JouIyTHkpHVO0KEoimyAEPxhqcW0q LhyAWPqoIH3GU2cYTzFiPPRUDbeuKhnlWcHnzCBERXD0VGZbJZT90zbGhZuNTOXb SLX51OptUUc2iDxPVoXBqfcVkHhxs04W0ODU4VI9EBbMqUlmqetLMfJ4jl5p+EnE JQXsqPOaBA7XS7P5cwmjyXuGS92vfLrXz8IB2/Sbpnsu0/okPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACRMlfy7xgW00IpYL22fxotsNqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY2ZGE3ZDYtYWI5ZC0z ZGFjLTgyOGQtNDMzMzU3NDEwNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpx+/BnqwfRXp2373M7RsQBzcBxUlRZH6+eF9Jr53YkldfblgiX/bkx 9mnOY2XOdI1DQeuBJHPxpcJ7Nmv6fVI6IA3kI63C81gMbuBe0Yj3WOHJKsTsYQ/P TwUxpr8YLtcfXMkz6TS0POiVYoXGf58OLafDgxK9j7q+o2JRL9EY5kAAuMGYKasr bkX6MFDpL8YU19T5IWmiOfpWiIka6qtlm5PJ3qKVFLGu8iTu1fgvSL7Sf0TKBlZS G5P2QT3MmP7GaGy10Hae64h14Nmezb9Id0PKdltzassdujaEDeoP+H1HHy0Kca61 3cO9nnTC4zgrT+LSlMLYKQ1YnTgYA8c= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:24 2026 by rpki-client