$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4f7493d-7b8a-3116-8e6f-5660c6e42b43.roa File: a4f7493d-7b8a-3116-8e6f-5660c6e42b43.roa (raw, json) Hash identifier: Tu1jHURIj/c4QhSMX7QjjLZbMXnsPDjzGXzSQvlPsWM= Subject key identifier: 67:21:DC:D5:F9:7B:32:BB:4F:1C:2B:12:A0:45:A1:87:40:7B:80:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA5CF45067EF4BC0A51580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4f7493d-7b8a-3116-8e6f-5660c6e42b43.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.97.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:5c:f4:50:67:ef:4b:c0:a5:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=18bd0f7b-bc16-48bd-982b-db126c71ec8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:c2:a0:2f:72:67:3c:7b:16:68:90:a2:a1: 15:fe:69:7c:26:4e:c1:78:59:df:28:12:8f:6b:51: 76:bc:88:d5:d2:81:bb:74:88:6a:7f:d2:5c:68:c4: 01:47:cb:fb:69:54:42:27:a0:9c:05:96:11:c6:6a: a1:a6:81:7d:66:68:6f:2f:5a:b3:b4:fb:61:21:0f: e2:a4:d0:f8:a9:da:c1:d7:ab:fe:03:11:1e:e2:01: 0a:e3:c4:02:e4:f4:57:21:f3:cf:fa:47:e1:82:1c: 6e:a8:67:89:e2:65:12:ab:6b:14:ac:ee:13:30:93: dc:0d:65:08:97:ce:04:52:a6:2a:e7:4d:49:d0:d5: 80:dd:6f:8b:72:02:ea:d2:cb:a9:d9:57:0c:a3:09: 8d:6a:66:14:4e:27:ae:de:2b:30:65:d3:f7:71:d9: f2:b5:fd:8e:a5:66:0a:c5:dd:80:62:1c:4a:6d:3f: 7f:87:e2:9d:5c:14:1d:a0:48:7f:ea:19:ce:f0:0f: ea:84:16:81:ca:da:f0:e6:cc:ce:39:d6:68:aa:2f: fa:0b:02:93:52:ef:bf:1d:06:56:77:36:85:dc:36: 5a:c6:34:14:8f:de:10:d5:74:21:ee:b8:39:52:92: 1f:14:7d:72:55:11:09:e9:34:be:38:eb:99:14:13: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:DC:D5:F9:7B:32:BB:4F:1C:2B:12:A0:45:A1:87:40:7B:80:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4f7493d-7b8a-3116-8e6f-5660c6e42b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:51:c2:47:40:26:f3:8b:35:40:0a:1a:9e:8b:0b:a2:14:9e: ca:ee:c5:9d:72:31:44:7b:b8:74:f3:cb:7f:b6:99:de:99:49: 1a:cf:c5:7e:df:74:ad:02:44:1b:c7:50:11:ea:1f:c9:1f:aa: f3:54:64:56:b4:91:1e:06:e7:27:49:39:cd:2a:02:7b:fd:e4: 72:eb:06:33:75:ad:f5:55:94:fb:37:7d:dd:d2:ef:ee:71:06: ae:76:b7:53:30:cf:98:a3:47:47:5f:82:f6:5f:c5:ab:66:86: e8:78:c1:12:4a:f4:fe:66:5b:42:7e:fe:80:34:b3:2f:8b:21: a4:0f:ad:37:75:88:d8:16:ca:f5:3b:d2:0d:e6:a2:0f:b0:32: 6f:ef:4a:9a:bf:36:30:78:c9:e9:86:81:f9:62:1f:a0:62:d7: 6f:b9:b9:a8:05:30:10:4e:02:af:5f:27:e2:77:f1:c9:83:f1: 6d:71:a3:2c:0e:2a:d1:6a:31:5f:ec:de:be:bc:f6:f2:ed:c4: ef:67:37:ae:9e:b4:d3:05:59:33:f8:2e:9b:b0:18:e3:80:a1: a6:48:15:ee:3a:50:bd:66:c1:aa:eb:e9:13:50:9f:4b:b7:c1: 66:7e:c5:99:d5:b8:4f:df:89:ce:a5:a3:9f:10:90:50:ad:8d: 2b:26:36:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlz0UGfvS8ClFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MThiZDBmN2ItYmMxNi00OGJkLTk4MmItZGIxMjZjNzFlYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMzCoC9yZzx7FmiQoqEV/ml8Jk7BeFnfKBKP a1F2vIjV0oG7dIhqf9JcaMQBR8v7aVRCJ6CcBZYRxmqhpoF9ZmhvL1qztPthIQ/i pND4qdrB16v+AxEe4gEK48QC5PRXIfPP+kfhghxuqGeJ4mUSq2sUrO4TMJPcDWUI l84EUqYq501J0NWA3W+LcgLq0sup2VcMowmNamYUTieu3iswZdP3cdnytf2OpWYK xd2AYhxKbT9/h+KdXBQdoEh/6hnO8A/qhBaBytrw5szOOdZoqi/6CwKTUu+/HQZW dzaF3DZaxjQUj94Q1XQh7rg5UpIfFH1yVREJ6TS+OOuZFBMdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGch3NX5ezK7TxwrEqBFoYdAe4ABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRmNzQ5M2QtN2I4YS0z MTE2LThlNmYtNTY2MGM2ZTQyYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBRwkdAJvOLNUAKGp6LC6IUnsruxZ1yMUR7uHTzy3+2md6ZSRrPxX7f dK0CRBvHUBHqH8kfqvNUZFa0kR4G5ydJOc0qAnv95HLrBjN1rfVVlPs3fd3S7+5x Bq52t1Mwz5ijR0dfgvZfxatmhuh4wRJK9P5mW0J+/oA0sy+LIaQPrTd1iNgWyvU7 0g3mog+wMm/vSpq/NjB4yemGgfliH6Bi12+5uagFMBBOAq9fJ+J38cmD8W1xoywO KtFqMV/s3r689vLtxO9nN66etNMFWTP4LpuwGOOAoaZIFe46UL1mwarr6RNQn0u3 wWZ+xZnVuE/fic6lo58QkFCtjSsmNtA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:47 2026 by rpki-client