$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9683d6f0-4817-3c6d-a213-4291a4005895.roa File: 9683d6f0-4817-3c6d-a213-4291a4005895.roa (raw, json) Hash identifier: AgS8ra9mzAn0g9ZMhBqEf0ZTEdzhXbNssS/gpldOPvI= Subject key identifier: 81:93:8C:FE:3F:A9:2F:98:6B:C2:69:78:A9:F3:FC:C1:F7:E1:EC:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB4A28ED4CE495B7FC080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9683d6f0-4817-3c6d-a213-4291a4005895.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.68.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b4:a2:8e:d4:ce:49:5b:7f:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a31d4ab2-568f-40b2-ab05-0f37e2c73845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:2d:0d:f8:d0:86:f6:6e:af:88:70:c4:05: dc:02:1f:43:cc:2d:7d:50:ac:44:c3:73:67:5d:00: c7:9e:e9:d1:6d:4b:5f:1c:34:7a:eb:ec:f7:22:c0: d9:39:27:c1:25:76:b4:2c:d8:80:cd:74:9f:9f:a8: a1:2f:25:92:e7:d1:85:a4:77:73:98:4a:5d:44:c9: 1e:f8:57:72:b3:9e:e4:90:04:18:7c:37:ec:57:62: e4:79:3d:57:f2:a2:74:32:32:53:68:6a:7e:40:80: 7c:68:4a:68:8b:03:18:9b:6a:c3:e7:eb:1d:4e:19: 1e:a8:f1:e8:82:a8:f8:00:95:cf:76:4b:12:c5:85: d5:d3:03:6f:85:af:85:1c:6e:97:77:a7:31:31:e4: 17:f6:96:b1:a4:0f:de:fe:cc:04:ee:3c:19:fb:5e: 2c:33:fb:ba:85:5e:b5:7e:83:30:92:70:78:77:89: f9:e7:26:6d:04:8f:9c:ab:72:87:03:28:2b:98:f7: 80:1e:e8:39:6d:74:7f:3e:e5:45:91:4b:ae:1e:51: 14:49:aa:1f:14:4e:00:6e:b0:db:d1:17:c2:a9:54: 5c:30:cb:e0:89:fa:9f:0f:5f:30:14:33:59:6e:bb: 47:e9:cf:77:0b:ae:5d:e0:ab:c1:97:6e:48:16:de: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:93:8C:FE:3F:A9:2F:98:6B:C2:69:78:A9:F3:FC:C1:F7:E1:EC:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9683d6f0-4817-3c6d-a213-4291a4005895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:dd:12:9d:a9:4e:e9:7b:8a:c2:26:9d:b5:e9:1e:1e:79:15: 0b:40:31:30:12:8d:6a:b5:f5:68:7b:4f:1d:2b:27:e3:cc:e7: be:60:14:bb:85:06:3d:ef:d7:40:4d:28:cb:6d:a5:ae:2c:87: 7e:33:c4:db:0c:c1:af:2b:bd:ca:e2:37:1c:75:8a:3f:fc:c2: fe:e4:65:01:ed:4b:e7:ab:d5:f7:61:0e:24:1b:d5:e5:9a:9c: af:42:d2:0c:e8:6a:f2:5b:34:01:e3:b0:d4:02:7d:74:17:53: fd:cc:a6:64:94:c6:e7:56:2b:b0:87:d5:fb:63:f3:f8:6a:d8: 0b:61:4c:42:ac:db:61:62:43:73:ef:0b:cb:f4:07:7d:90:05: b0:26:c8:f2:b5:18:92:18:d1:c8:19:86:70:e3:0b:63:54:a2: 36:62:bf:45:bd:36:6b:2d:4e:7d:ce:3a:63:b1:2b:f9:a8:5d: e4:05:bc:5b:db:25:5e:9a:f4:66:48:2d:23:ee:a4:1c:3d:ee: 6d:63:a5:66:51:44:be:d8:04:a8:79:a2:a0:94:23:f3:01:65: ad:52:b8:c7:ba:ce:43:86:ff:5a:be:50:2a:03:65:0b:f8:e6: 48:f5:74:07:2a:af:62:9d:64:2b:27:38:3b:66:75:41:e1:c1: d0:8d:17:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrSijtTOSVt/wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YTMxZDRhYjItNTY4Zi00MGIyLWFiMDUtMGYzN2UyYzczODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthQtDfjQhvZur4hwxAXcAh9DzC19UKxEw3Nn XQDHnunRbUtfHDR66+z3IsDZOSfBJXa0LNiAzXSfn6ihLyWS59GFpHdzmEpdRMke +Fdys57kkAQYfDfsV2LkeT1X8qJ0MjJTaGp+QIB8aEpoiwMYm2rD5+sdThkeqPHo gqj4AJXPdksSxYXV0wNvha+FHG6Xd6cxMeQX9paxpA/e/swE7jwZ+14sM/u6hV61 foMwknB4d4n55yZtBI+cq3KHAygrmPeAHug5bXR/PuVFkUuuHlEUSaofFE4AbrDb 0RfCqVRcMMvgifqfD18wFDNZbrtH6c93C65d4KvBl25IFt4NVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGTjP4/qS+Ya8JpeKnz/MH34ewjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY4M2Q2ZjAtNDgxNy0z YzZkLWEyMTMtNDI5MWE0MDA1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPdEp2pTul7isImnbXpHh55FQtAMTASjWq19Wh7Tx0rJ+PM575gFLuF Bj3v10BNKMttpa4sh34zxNsMwa8rvcriNxx1ij/8wv7kZQHtS+er1fdhDiQb1eWa nK9C0gzoavJbNAHjsNQCfXQXU/3MpmSUxudWK7CH1ftj8/hq2AthTEKs22FiQ3Pv C8v0B32QBbAmyPK1GJIY0cgZhnDjC2NUojZiv0W9NmstTn3OOmOxK/moXeQFvFvb JV6a9GZILSPupBw97m1jpWZRRL7YBKh5oqCUI/MBZa1SuMe6zkOG/1q+UCoDZQv4 5kj1dAcqr2KdZCsnODtmdUHhwdCNF9k= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:06 2026 by rpki-client