$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9688f62a-00e2-3cb7-992c-d61d7f347b95.roa File: 9688f62a-00e2-3cb7-992c-d61d7f347b95.roa (raw, json) Hash identifier: 8c7RIMSSXJt2qMb5v2tqICzseyCPV3o32nQTo6OOuCA= Subject key identifier: 58:6F:F9:D1:F1:70:03:F8:52:83:45:B2:C2:63:0E:86:19:06:74:74 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6E50FFC34DEB14640A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9688f62a-00e2-3cb7-992c-d61d7f347b95.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.74.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6e:50:ff:c3:4d:eb:14:64:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=34a1359b-0364-4f39-b378-e189ad4dfd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:39:64:aa:d7:9f:53:f4:17:05:92:44:ea:de: de:81:b0:ed:e7:86:e9:85:f2:4b:42:18:5b:ce:f2: b4:54:06:44:fb:57:4e:29:d9:07:61:7e:f5:79:b1: 4a:34:01:ee:cf:85:45:03:a5:a3:5f:59:41:54:db: 81:cb:41:fd:4c:c2:0f:6f:62:60:0d:33:e3:71:94: e1:76:bb:23:df:80:28:cc:ec:21:fc:c9:c0:7e:2d: 83:47:da:a5:1d:34:06:18:7c:fe:10:8e:37:c9:52: 5e:55:83:78:c4:a0:44:b6:d6:d1:06:9d:3d:b0:35: 68:36:c9:93:9b:38:c8:92:8a:47:6a:48:34:25:0d: 7b:cb:4a:ab:39:e6:92:c1:f4:1a:56:46:75:9e:c7: 6f:ce:71:a9:df:e1:d6:bb:66:25:c5:93:b4:86:c0: f1:fb:de:f5:c9:2a:4b:0e:87:4f:78:9f:6c:69:66: c7:69:d0:4e:a6:f1:5c:12:af:46:e4:c1:5a:cf:a5: 4a:7c:1c:b5:f1:30:18:64:97:bb:4b:91:74:8d:27: 42:4d:42:20:05:46:88:a9:a7:14:dd:56:81:98:52: 03:65:79:da:a3:dc:8a:64:0b:f2:ce:e0:b0:91:99: 9f:d9:57:7f:a9:8e:d0:92:89:cb:6a:72:50:ac:c7: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6F:F9:D1:F1:70:03:F8:52:83:45:B2:C2:63:0E:86:19:06:74:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9688f62a-00e2-3cb7-992c-d61d7f347b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9d:c2:59:a1:f0:7d:96:f3:be:2c:9a:55:c4:b3:b6:79:23: d4:77:0e:5a:e6:d7:d9:34:c1:8b:b4:a5:c9:1d:f1:2e:50:6f: 66:12:ec:2f:f4:bc:79:5f:fc:7e:10:2d:a3:94:54:49:2f:7d: ce:e2:2a:46:5e:2c:83:10:2a:6a:9c:09:f3:2a:3f:31:e7:d4: 59:f9:18:a3:ae:ca:f5:c6:56:22:b6:43:f8:09:70:86:d9:bf: a5:8a:8a:77:47:a3:40:61:8e:da:98:00:ac:8e:a4:89:cb:48: b2:2b:3f:64:0d:c8:fe:5b:c1:ee:54:d3:3e:56:3a:89:df:ea: d4:90:ac:eb:4b:1c:ce:73:2c:27:82:24:e2:68:43:1b:36:c0: 41:cb:31:e5:7d:e4:94:1c:93:0b:96:f0:eb:68:f3:dd:7c:0c: 0c:ea:b1:48:1e:98:05:d8:a4:58:51:37:3f:52:7b:ba:ce:53: 29:91:e0:fc:cf:1f:c1:e1:dd:3c:5a:cb:59:48:2b:7c:7f:5e: 8b:24:1a:33:82:c8:f1:22:9c:ca:b9:76:12:53:a0:bf:3e:cc: c5:e4:63:db:f4:66:d7:15:60:57:ec:58:ca:86:08:3e:75:ea: c8:65:c8:ba:18:80:d6:5c:4d:81:64:c2:27:75:0c:0d:6d:dc: db:2a:5f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqm5Q/8NN6xRkCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzRhMTM1OWItMDM2NC00ZjM5LWIzNzgtZTE4OWFkNGRmZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTlkqtefU/QXBZJE6t7egbDt54bphfJLQhhb zvK0VAZE+1dOKdkHYX71ebFKNAHuz4VFA6WjX1lBVNuBy0H9TMIPb2JgDTPjcZTh drsj34AozOwh/MnAfi2DR9qlHTQGGHz+EI43yVJeVYN4xKBEttbRBp09sDVoNsmT mzjIkopHakg0JQ17y0qrOeaSwfQaVkZ1nsdvznGp3+HWu2YlxZO0hsDx+971ySpL DodPeJ9saWbHadBOpvFcEq9G5MFaz6VKfBy18TAYZJe7S5F0jSdCTUIgBUaIqacU 3VaBmFIDZXnao9yKZAvyzuCwkZmf2Vd/qY7QkonLanJQrMe6sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhv+dHxcAP4UoNFssJjDoYZBnR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY4OGY2MmEtMDBlMi0z Y2I3LTk5MmMtZDYxZDdmMzQ3Yjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABudwlmh8H2W874smlXEs7Z5I9R3Dlrm19k0wYu0pckd8S5Qb2YS7C/0 vHlf/H4QLaOUVEkvfc7iKkZeLIMQKmqcCfMqPzHn1Fn5GKOuyvXGViK2Q/gJcIbZ v6WKindHo0BhjtqYAKyOpInLSLIrP2QNyP5bwe5U0z5WOonf6tSQrOtLHM5zLCeC JOJoQxs2wEHLMeV95JQckwuW8Oto8918DAzqsUgemAXYpFhRNz9Se7rOUymR4PzP H8Hh3Txay1lIK3x/XoskGjOCyPEinMq5dhJToL8+zMXkY9v0ZtcVYFfsWMqGCD51 6shlyLoYgNZcTYFkwid1DA1t3NsqX5Y= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:29 2026 by rpki-client