$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa File: a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa (raw, json) Hash identifier: OH7drvJMvRQAMUVE7nDRZW0nGxP4HyqlizEpOCffVXk= Subject key identifier: 63:B1:1E:ED:B9:A8:55:4D:1B:12:75:7A:A4:92:28:70:14:03:10:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAACA0D8FDDB723ED51420 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.85.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ac:a0:d8:fd:db:72:3e:d5:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4a3459e5-756c-46ed-baa6-534a748e12bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:25:d2:92:19:89:86:b1:1b:a2:d0:44:54: 88:44:20:f5:6c:e8:50:a0:35:26:e1:af:46:5b:01: fd:e5:9e:3c:fc:a3:55:61:6f:54:54:a1:78:51:73: e2:33:fd:ab:1d:54:7d:0a:cd:54:c3:86:37:9c:90: ab:fa:86:61:50:3e:12:09:f9:fd:ae:fa:1c:d0:97: d2:42:ed:3b:e7:53:24:17:51:b2:28:68:0c:44:b9: 56:55:a9:5b:f0:65:d5:d2:56:92:95:3f:bb:bd:2b: 2f:ab:2c:d4:f4:ac:78:69:7a:e0:b3:b6:ca:99:fe: 03:0b:1b:d4:a7:58:e4:6f:a3:2c:17:96:d7:a9:5b: 4e:cc:38:7b:58:27:1c:65:3b:c1:00:3a:5f:f1:00: 67:62:2c:61:90:a0:7f:f1:01:d0:4b:98:18:72:85: 02:ee:1d:90:b0:8a:b3:b4:eb:19:48:3d:a4:d1:b3: a5:8e:fc:32:64:79:7b:c6:0f:9f:42:6c:0d:76:42: d0:f3:79:79:b7:ad:df:db:1a:d2:45:26:b9:2a:55: 85:1c:4a:70:16:81:98:1b:3a:88:dd:31:ba:15:b2: 9d:39:c6:da:eb:7d:de:cc:67:62:fe:d2:35:cf:28: 7b:de:2c:97:ff:84:e8:a1:c0:0b:30:68:84:40:c3: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:1E:ED:B9:A8:55:4D:1B:12:75:7A:A4:92:28:70:14:03:10:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:45:ad:0c:e9:26:dd:70:c5:31:b9:cf:03:5c:89:ca:17:49: b4:45:4a:e7:09:59:80:eb:3e:8c:0b:78:8d:fb:7b:ba:2f:9f: 6a:96:41:f2:3a:22:4c:8a:e6:9f:50:05:ef:7b:a4:8c:c3:44: e4:ef:6d:23:68:ad:49:bc:a0:ca:23:d4:c2:dc:c9:53:bd:6e: 49:29:17:d2:5f:3f:60:56:32:fb:40:0b:63:f8:c5:af:3b:15: d3:98:27:e8:25:8e:c4:e0:21:0a:72:99:40:a8:14:cd:8e:74: a9:a4:2c:4e:cc:67:78:96:a0:44:6b:8e:d5:54:bf:d5:73:52: ba:f6:fd:32:fc:83:de:ce:0f:13:08:0c:76:0e:62:58:94:10: 42:fd:e2:6b:b8:e9:77:18:af:42:d0:52:93:8b:48:d8:86:4f: 41:02:48:aa:6b:22:b0:de:a7:87:c7:f9:97:6a:f4:44:40:4f: 4c:ca:ef:03:bb:8d:36:26:39:60:bc:77:49:88:96:71:34:6e: ff:38:57:23:34:77:cc:a5:52:19:62:22:8c:27:6c:d3:3f:d3: cc:c4:38:14:2a:d7:76:73:a2:da:e3:4b:f4:0d:bc:cc:59:e2: d4:35:50:99:a8:69:0e:a5:9d:bd:e4:d9:14:f8:b2:d6:db:c8: 31:cb:ca:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqyg2P3bcj7VFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NGEzNDU5ZTUtNzU2Yy00NmVkLWJhYTYtNTM0YTc0OGUxMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHAl0pIZiYaxG6LQRFSIRCD1bOhQoDUm4a9G WwH95Z48/KNVYW9UVKF4UXPiM/2rHVR9Cs1Uw4Y3nJCr+oZhUD4SCfn9rvoc0JfS Qu0751MkF1GyKGgMRLlWValb8GXV0laSlT+7vSsvqyzU9Kx4aXrgs7bKmf4DCxvU p1jkb6MsF5bXqVtOzDh7WCccZTvBADpf8QBnYixhkKB/8QHQS5gYcoUC7h2QsIqz tOsZSD2k0bOljvwyZHl7xg+fQmwNdkLQ83l5t63f2xrSRSa5KlWFHEpwFoGYGzqI 3TG6FbKdOcba633ezGdi/tI1zyh73iyX/4ToocALMGiEQMPY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOxHu25qFVNGxJ1eqSSKHAUAxCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTJjZmM2YTctMGNlMS0z ODE2LTg4ODAtZDQ1MGNiNGEzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFFrQzpJt1wxTG5zwNcicoXSbRFSucJWYDrPowLeI37e7ovn2qWQfI6 IkyK5p9QBe97pIzDROTvbSNorUm8oMoj1MLcyVO9bkkpF9JfP2BWMvtAC2P4xa87 FdOYJ+gljsTgIQpymUCoFM2OdKmkLE7MZ3iWoERrjtVUv9VzUrr2/TL8g97ODxMI DHYOYliUEEL94mu46XcYr0LQUpOLSNiGT0ECSKprIrDep4fH+Zdq9ERAT0zK7wO7 jTYmOWC8d0mIlnE0bv84VyM0d8ylUhliIownbNM/08zEOBQq13ZzotrjS/QNvMxZ 4tQ1UJmoaQ6lnb3k2RT4stbbyDHLyr8= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:13 2026 by rpki-client