$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa File: 9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa (raw, json) Hash identifier: op1fRee2NtuKM30Mc04mou9gEM3Y7xoRbrTlzSIW3dM= Subject key identifier: BB:0E:7B:79:68:25:AD:0D:67:9A:E0:ED:39:BE:0B:A0:F2:D4:7D:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0467F12865B2261D56680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.100.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:46:7f:12:86:5b:22:61:d5:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5cb0f3dd-eb0f-48ce-a213-b76f716eb425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:59:93:92:65:1a:fc:d6:16:bd:fe:e3:b7: 33:d7:4c:37:02:71:30:4c:03:09:db:d1:f1:77:f4: b9:b5:5c:7a:31:16:4f:a5:b9:f6:e1:28:e6:2a:0e: 69:19:ac:89:1d:21:9f:43:42:3f:17:27:48:9d:12: 29:9b:23:cc:3c:d1:6b:0b:17:ca:94:1b:0e:4e:67: 0c:7d:76:cd:2d:9c:5f:6f:25:5a:15:53:9c:77:46: 25:66:2f:4c:f0:d9:ba:83:22:0a:4d:21:31:92:06: ee:2f:34:49:b9:6f:ea:dd:5e:c6:35:27:4c:fb:0e: 91:32:de:2c:8b:6f:5e:4e:7a:e9:e0:69:4f:62:be: 76:e3:34:c7:70:99:6e:94:07:54:1b:16:c1:54:1e: e1:07:85:02:f6:96:36:5a:d6:bb:09:46:c3:c9:f3: 3d:4a:03:06:43:a0:52:9f:98:2d:5b:89:32:33:ae: 99:d9:fd:07:0e:92:3a:ae:63:1e:7a:12:7d:24:98: 00:bf:19:d6:37:82:fd:cf:ba:f4:e7:95:df:67:4b: 93:70:e7:6a:55:01:e5:3e:18:01:14:5c:b8:b4:dc: ca:59:c2:7e:a8:73:47:c2:60:53:ac:95:7c:19:2a: 52:14:96:b5:f2:7d:74:60:9d:84:e4:20:b7:08:c3: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:7B:79:68:25:AD:0D:67:9A:E0:ED:39:BE:0B:A0:F2:D4:7D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c6:2b:69:8d:66:63:3b:36:ed:8f:25:98:2e:69:15:aa:c1: 9d:9f:25:86:c8:b0:24:b3:21:52:39:74:2f:e4:76:a6:68:9f: 2e:e8:b3:8b:b4:78:2a:24:93:9a:15:30:ed:51:f0:e0:8c:aa: 3f:ff:a4:a9:9f:74:9b:1b:18:a0:32:bf:d5:c0:dd:0e:53:b2: 66:b3:24:74:b0:23:f1:d4:ff:38:e2:ae:f3:77:fa:b8:c6:7f: 2c:f8:6b:e3:b7:81:4e:bc:47:05:80:f4:19:85:f1:ee:b0:76: ef:8b:40:d7:78:c9:3c:b4:8e:63:cc:a7:6f:f1:84:ff:49:b2: a0:7b:ed:22:30:3b:22:81:88:aa:dd:83:00:6e:df:8f:7a:72: 1d:37:92:00:d2:1a:5a:e2:b8:1f:5d:2e:9c:72:0e:27:0a:0f: ec:57:6a:17:31:5a:f8:6a:fc:b9:56:ce:34:d9:42:d4:f1:3e: 68:1c:49:3a:29:df:25:2d:3c:cf:7a:55:0f:ca:5c:c5:5d:00: fe:30:3f:44:a7:fe:2e:2b:1a:ef:df:bd:7e:a8:62:ec:85:d4: 1a:54:68:51:c8:1e:d6:6a:82:b2:fd:b7:c7:72:47:a2:ce:cb: 2e:60:6f:70:9b:8a:bf:f7:9f:d5:81:05:a8:97:15:6a:29:32: 5f:fb:e3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EZ/EoZbImHVZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWNiMGYzZGQtZWIwZi00OGNlLWEyMTMtYjc2ZjcxNmViNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHpZk5JlGvzWFr3+47cz10w3AnEwTAMJ29Hx d/S5tVx6MRZPpbn24SjmKg5pGayJHSGfQ0I/FydInRIpmyPMPNFrCxfKlBsOTmcM fXbNLZxfbyVaFVOcd0YlZi9M8Nm6gyIKTSExkgbuLzRJuW/q3V7GNSdM+w6RMt4s i29eTnrp4GlPYr524zTHcJlulAdUGxbBVB7hB4UC9pY2Wta7CUbDyfM9SgMGQ6BS n5gtW4kyM66Z2f0HDpI6rmMeehJ9JJgAvxnWN4L9z7r055XfZ0uTcOdqVQHlPhgB FFy4tNzKWcJ+qHNHwmBTrJV8GSpSFJa18n10YJ2E5CC3CMMdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsOe3loJa0NZ5rg7Tm+C6Dy1H3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWE4ZjFiNmUtYjg4NS0z OGU3LWFkZTYtZGRkYjhhMmRhNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/GK2mNZmM7Nu2PJZguaRWqwZ2fJYbIsCSzIVI5dC/kdqZony7os4u0 eCokk5oVMO1R8OCMqj//pKmfdJsbGKAyv9XA3Q5TsmazJHSwI/HU/zjirvN3+rjG fyz4a+O3gU68RwWA9BmF8e6wdu+LQNd4yTy0jmPMp2/xhP9JsqB77SIwOyKBiKrd gwBu3496ch03kgDSGlriuB9dLpxyDicKD+xXahcxWvhq/LlWzjTZQtTxPmgcSTop 3yUtPM96VQ/KXMVdAP4wP0Sn/i4rGu/fvX6oYuyF1BpUaFHIHtZqgrL9t8dyR6LO yy5gb3Cbir/3n9WBBaiXFWopMl/748A= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:26 2026 by rpki-client