$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa File: a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa (raw, json) Hash identifier: InyC4TSy7SrQvJztZJs0f+mHb/7UpWdSvCS9O6x+gY8= Subject key identifier: 56:63:C1:0F:FB:6B:5A:C6:B9:86:40:87:9C:F7:B1:C8:D5:A4:FD:6E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6B9B1BDFDBE0220E7600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.139.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6b:9b:1b:df:db:e0:22:0e:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=341b92c0-a4c9-40a3-910a-ef642fcb58bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:98:f9:c2:24:e6:43:37:1e:ba:7c:25:b1: d8:1a:88:3f:68:62:ac:9d:4e:eb:0a:33:b4:a8:0e: 15:29:8e:66:91:25:ee:f5:ee:00:4b:c2:4d:8a:a2: 3f:29:e3:55:8c:9a:58:a6:52:e1:0a:05:0a:5e:e3: 6d:90:ba:1c:19:4b:39:8d:9c:55:93:9f:77:6d:00: 9d:f4:d8:02:29:bc:5f:de:28:f7:e2:33:7e:d5:d8: d7:d5:24:39:41:fc:aa:9a:31:f9:64:a5:79:f1:fe: aa:79:4d:4f:6c:33:33:1f:d4:7b:e8:ce:df:07:01: 1f:1d:e3:20:17:ea:f1:9a:fe:9d:93:98:1c:50:e6: 1c:61:7c:83:bb:b3:7d:1a:b2:a4:8c:67:06:be:04: cd:95:2c:41:67:5c:54:12:1d:20:f3:da:6b:05:06: ab:7a:1f:8a:b1:ec:eb:f9:91:c5:9e:88:96:03:2f: 0b:ca:cd:ca:01:af:62:26:19:6e:0b:ed:96:24:f6: 3b:a8:6c:2f:4a:8c:8c:81:74:d4:09:19:6c:9b:8a: 3b:2e:20:fb:2d:27:26:4a:8b:44:8b:7d:42:9b:56: 8d:38:1c:56:1c:e3:5a:b0:b6:85:2a:c5:5b:d7:1b: 4c:e2:94:55:6e:61:30:bf:96:be:28:61:05:c3:df: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:63:C1:0F:FB:6B:5A:C6:B9:86:40:87:9C:F7:B1:C8:D5:A4:FD:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:99:5d:f9:c9:b3:8b:f9:4d:ce:92:6a:1c:2f:07:d3:ba:cf: 0f:44:1a:17:c7:61:3c:47:41:07:19:59:f5:89:fa:bf:ee:68: 4e:02:2f:84:92:b8:13:36:15:5a:51:d8:88:73:bd:9f:0c:62: 89:ca:92:59:8a:b5:91:33:5a:63:bd:6d:0e:78:a4:33:88:91: 9a:5c:3e:c5:cc:30:5a:d5:bc:9e:02:c9:a1:4e:5f:c6:82:26: 93:15:d6:dc:28:9f:9b:8e:64:41:c2:38:d4:f6:de:a0:dc:73: 89:46:09:bd:30:d5:80:bd:0a:de:87:63:77:72:fc:fa:f2:23: c9:2a:c2:47:64:a3:7d:d7:81:5b:18:74:5f:4d:c0:0a:66:b8: ff:70:a7:ea:c2:81:e0:31:41:2f:a2:38:7e:fb:40:0b:9f:91: e4:78:ea:fd:5e:98:ff:d2:44:a2:02:9e:90:c1:1d:ce:03:bb: 22:f9:d9:9c:55:0e:52:bf:95:cb:8b:0d:32:02:fc:7c:77:c9: 75:97:0d:cc:e8:40:0b:38:b2:ff:8b:c6:23:20:47:15:f8:23: ab:38:e4:bf:22:14:a9:b5:a4:30:10:29:5a:33:2b:47:f2:3f: 8e:7c:cb:c6:48:a7:5b:5a:0d:a6:46:c7:7f:00:3c:18:e5:27: 41:ce:21:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmubG9/b4CIOdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzQxYjkyYzAtYTRjOS00MGEzLTkxMGEtZWY2NDJmY2I1OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg+Y+cIk5kM3Hrp8JbHYGog/aGKsnU7rCjO0 qA4VKY5mkSXu9e4AS8JNiqI/KeNVjJpYplLhCgUKXuNtkLocGUs5jZxVk593bQCd 9NgCKbxf3ij34jN+1djX1SQ5QfyqmjH5ZKV58f6qeU1PbDMzH9R76M7fBwEfHeMg F+rxmv6dk5gcUOYcYXyDu7N9GrKkjGcGvgTNlSxBZ1xUEh0g89prBQareh+Ksezr +ZHFnoiWAy8Lys3KAa9iJhluC+2WJPY7qGwvSoyMgXTUCRlsm4o7LiD7LScmSotE i31Cm1aNOBxWHONasLaFKsVb1xtM4pRVbmEwv5a+KGEFw9+hGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZjwQ/7a1rGuYZAh5z3scjVpP1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTBhNDQyZTAtY2Y4Zi0z YmM5LWI5ZGYtZWQ4ZjlhM2JkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIouAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWZXfnJs4v5Tc6SahwvB9O6zw9EGhfHYTxHQQcZWfWJ+r/uaE4CL4SS uBM2FVpR2IhzvZ8MYonKklmKtZEzWmO9bQ54pDOIkZpcPsXMMFrVvJ4CyaFOX8aC JpMV1twon5uOZEHCONT23qDcc4lGCb0w1YC9Ct6HY3dy/PryI8kqwkdko33XgVsY dF9NwApmuP9wp+rCgeAxQS+iOH77QAufkeR46v1emP/SRKICnpDBHc4DuyL52ZxV DlK/lcuLDTIC/Hx3yXWXDczoQAs4sv+LxiMgRxX4I6s45L8iFKm1pDAQKVozK0fy P458y8ZIp1taDaZGx38APBjlJ0HOIR8= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:49 2026 by rpki-client