$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c268ece-471b-3212-8527-a6a0938e4ff6.roa File: 9c268ece-471b-3212-8527-a6a0938e4ff6.roa (raw, json) Hash identifier: AMiFRhI0tFv7zoUqEk2Ymt0X30cdrNeGPO5wcTDnj8g= Subject key identifier: A8:D8:61:41:30:32:62:FB:B2:C4:E1:6A:48:7C:AC:90:BD:18:02:DA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA363D1314204BA849AF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c268ece-471b-3212-8527-a6a0938e4ff6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.135.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:36:3d:13:14:20:4b:a8:49:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=5cd77b7d-1e62-4ff0-ac31-40fe692da0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:4d:06:8f:20:cb:b1:0d:52:d7:39:f0:bc: d2:c7:37:71:62:3b:93:6f:66:7e:43:87:b4:a2:bf: d5:c2:4c:60:8f:30:d5:45:28:6b:bc:f6:ed:aa:04: 63:1f:1f:48:fb:45:47:40:0b:c5:65:9a:aa:8d:f0: 6f:7b:61:f8:a3:16:eb:f2:d7:44:b1:4b:ec:05:f4: 1b:0f:7b:d1:5b:0d:16:11:c0:08:aa:5d:e1:ef:8b: 2d:aa:20:1c:a0:37:ee:e9:de:97:d9:e4:17:da:75: 3d:0d:38:d5:26:3d:e6:86:03:17:54:73:c8:5e:82: 99:0e:fc:bb:6c:bb:f3:43:34:08:70:c2:eb:ac:ee: f7:d1:4a:b7:1c:19:8c:7d:33:0b:34:89:dc:09:88: df:41:2e:2d:f8:fb:ce:8b:d0:37:0d:f2:5b:8b:85: 44:ba:2d:39:f5:09:80:17:96:95:db:a3:76:99:c4: c0:fc:cf:e6:97:a2:34:a8:78:ae:d6:c1:db:db:94: 72:7f:d3:c8:71:c2:3f:6d:00:8b:41:2c:03:b1:50: 73:17:92:e1:5f:8e:54:a4:80:a7:5d:23:a9:50:b0: a9:5d:c5:4b:9c:90:9b:b1:77:ed:c8:4e:20:6d:82: 82:cd:4d:40:ab:cc:5e:78:a0:da:67:0f:10:b8:fa: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D8:61:41:30:32:62:FB:B2:C4:E1:6A:48:7C:AC:90:BD:18:02:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9c268ece-471b-3212-8527-a6a0938e4ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:40:28:a0:e5:79:c8:e3:04:bb:50:c5:f3:91:b8:7d:d0:2f: a6:76:d5:b7:06:a8:b4:00:87:e5:91:c9:84:b9:c3:fa:84:ac: c8:51:a4:3a:cb:4d:e3:09:46:90:94:8f:ad:d0:52:eb:01:10: aa:70:2e:82:8a:9b:f2:38:0d:67:bf:5b:fb:d6:19:bc:7d:70: 21:db:3c:82:72:eb:12:db:f9:68:2e:de:be:f4:b7:eb:ba:7a: b2:a0:49:17:21:dd:95:ef:83:ec:94:8b:71:a5:9d:17:4b:9d: ee:20:20:f9:3c:c8:0c:b6:9a:e0:e1:c2:6d:93:fe:e2:48:4a: 0b:97:49:85:d4:98:77:0f:ba:53:16:99:99:d0:8b:32:0b:60: fc:e0:cc:be:0e:ae:c7:fb:59:fd:ef:ef:0f:1d:e7:7a:cf:d3: 31:35:e1:7f:9f:49:89:33:0e:26:4f:7d:2f:33:02:d7:a0:e8: 26:f9:d1:22:b9:88:44:a0:73:ce:2a:c7:6e:ed:94:4e:26:83: c2:7e:e4:74:75:7b:9e:d4:2e:87:4a:86:85:95:e7:82:9c:93: c9:a6:b2:77:20:60:7e:22:5e:5d:69:cf:16:e2:bc:c7:ec:c1: 0b:d8:72:b4:d3:2c:2d:fa:aa:3d:62:f2:eb:f1:6e:e2:5b:bd: 83:22:61:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjY9ExQgS6hJr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NWNkNzdiN2QtMWU2Mi00ZmYwLWFjMzEtNDBmZTY5MmRhMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzytNBo8gy7ENUtc58LzSxzdxYjuTb2Z+Q4e0 or/VwkxgjzDVRShrvPbtqgRjHx9I+0VHQAvFZZqqjfBve2H4oxbr8tdEsUvsBfQb D3vRWw0WEcAIql3h74stqiAcoDfu6d6X2eQX2nU9DTjVJj3mhgMXVHPIXoKZDvy7 bLvzQzQIcMLrrO730Uq3HBmMfTMLNIncCYjfQS4t+PvOi9A3DfJbi4VEui059QmA F5aV26N2mcTA/M/ml6I0qHiu1sHb25Ryf9PIccI/bQCLQSwDsVBzF5LhX45UpICn XSOpULCpXcVLnJCbsXftyE4gbYKCzU1Aq8xeeKDaZw8QuPo0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjYYUEwMmL7ssThakh8rJC9GALaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWMyNjhlY2UtNDcxYi0z MjEyLTg1MjctYTZhMDkzOGU0ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIodQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRAKKDlecjjBLtQxfORuH3QL6Z21bcGqLQAh+WRyYS5w/qErMhRpDrL TeMJRpCUj63QUusBEKpwLoKKm/I4DWe/W/vWGbx9cCHbPIJy6xLb+Wgu3r70t+u6 erKgSRch3ZXvg+yUi3GlnRdLne4gIPk8yAy2muDhwm2T/uJISguXSYXUmHcPulMW mZnQizILYPzgzL4Orsf7Wf3v7w8d53rP0zE14X+fSYkzDiZPfS8zAteg6Cb50SK5 iESgc84qx27tlE4mg8J+5HR1e57ULodKhoWV54Kck8mmsncgYH4iXl1pzxbivMfs wQvYcrTTLC36qj1i8uvxbuJbvYMiYaA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:08 2026 by rpki-client