$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cb2d92-2e63-34bd-b9c6-c47276a4f25f.roa File: a5cb2d92-2e63-34bd-b9c6-c47276a4f25f.roa (raw, json) Hash identifier: 1lONX5Hde22bwzGbllPBg/52L+bOQzqXPG65IcRMD5Q= Subject key identifier: 1D:7A:B4:59:A8:B8:77:52:CF:BB:B6:CB:03:06:7D:7C:B5:A2:90:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA709CA6DDC3AA3ECEDB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cb2d92-2e63-34bd-b9c6-c47276a4f25f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.127.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:70:9c:a6:dd:c3:aa:3e:ce:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1c1b31d5-dbbf-4e64-b2e7-8306f405704d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:be:31:ce:63:48:51:a2:b5:da:cc:5d:92: e5:bc:64:89:ef:91:f2:18:8f:5b:6a:94:dd:00:40: c1:4d:48:f5:35:22:e6:45:39:00:9d:f6:23:6b:5f: 42:db:ee:a0:b4:31:79:c2:8d:86:8e:a6:a5:9c:ed: c1:7e:f6:e8:8f:ac:7b:01:25:58:2b:6b:cb:62:9f: d5:fb:2d:59:7f:85:0d:fe:d8:a7:8f:be:94:a1:86: 72:f4:f3:8f:14:13:8d:30:f3:93:43:0e:e0:eb:db: fd:92:64:c3:88:39:6c:4e:45:9a:3a:33:fb:b6:a7: 4f:fc:1a:b9:a8:fc:46:89:28:8b:4b:65:1d:3f:f3: 95:a8:29:a4:36:dd:67:51:a0:8c:fe:d1:2e:c0:f8: 3f:db:a2:9e:4a:a4:1b:35:de:fe:8e:45:ab:e5:69: 73:72:56:2c:0d:cc:9f:33:1c:6e:3f:3e:c2:ac:d2: f4:63:5b:c3:89:aa:b9:a4:55:19:fc:6a:37:4d:72: 9c:98:65:c8:43:c8:f3:96:9c:25:c4:03:1d:17:a1: 7a:04:3e:82:66:ed:f8:56:80:41:2a:59:69:a1:d2: 4e:41:7d:99:ed:1d:aa:aa:9f:ca:c0:7d:f4:00:d7: 88:10:3c:dc:b7:e2:c3:0f:1f:1e:ee:67:b4:08:cf: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:B4:59:A8:B8:77:52:CF:BB:B6:CB:03:06:7D:7C:B5:A2:90:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cb2d92-2e63-34bd-b9c6-c47276a4f25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.127.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f1:43:23:35:7a:c9:27:da:9e:8e:54:fc:3d:74:a2:6f:bd: fb:87:0a:0f:f8:77:10:f0:fc:c0:7f:72:5f:bb:4b:20:92:31: 23:8a:ca:71:e2:7b:72:0f:a1:41:49:50:74:e2:37:1f:27:df: 58:1f:28:09:e5:e9:6e:32:54:43:b0:be:55:df:c0:3c:8e:91: a1:fa:3d:5c:21:d9:0c:55:99:fd:96:a1:56:7b:ba:48:48:c8: af:97:03:7f:ba:ab:41:36:81:6b:b9:4f:1f:f3:42:10:7b:e6: 87:7e:7c:fd:60:0a:92:a3:77:cf:56:59:1e:24:f4:3c:b5:e5: 17:88:6a:82:ae:aa:59:36:e2:c8:5c:6d:30:c2:1c:1b:28:32: e8:72:e0:9a:47:6c:de:d7:c6:46:45:58:a6:68:d9:c3:dd:cf: f4:20:9e:82:a4:4a:42:aa:96:55:0f:45:fd:2f:95:d6:36:9a: d4:5c:d8:17:27:6e:77:2a:9b:c4:74:d7:1a:59:ef:13:fd:d0: ef:e1:f5:8d:d4:80:5b:41:c8:fb:3c:b2:6b:cd:c7:11:06:f6: 8a:63:07:cc:5b:e9:d2:40:2e:77:14:23:62:32:fc:bc:6a:c2: f8:51:24:2a:cb:80:4f:2b:4b:85:df:8b:05:97:94:10:9d:52: ce:9c:a5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnCcpt3Dqj7O2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWMxYjMxZDUtZGJiZi00ZTY0LWIyZTctODMwNmY0MDU3MDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9K+Mc5jSFGitdrMXZLlvGSJ75HyGI9bapTd AEDBTUj1NSLmRTkAnfYja19C2+6gtDF5wo2GjqalnO3Bfvboj6x7ASVYK2vLYp/V +y1Zf4UN/tinj76UoYZy9POPFBONMPOTQw7g69v9kmTDiDlsTkWaOjP7tqdP/Bq5 qPxGiSiLS2UdP/OVqCmkNt1nUaCM/tEuwPg/26KeSqQbNd7+jkWr5WlzclYsDcyf MxxuPz7CrNL0Y1vDiaq5pFUZ/Go3TXKcmGXIQ8jzlpwlxAMdF6F6BD6CZu34VoBB KllpodJOQX2Z7R2qqp/KwH30ANeIEDzct+LDDx8e7me0CM+6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB16tFmouHdSz7u2ywMGfXy1opCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVjYjJkOTItMmU2My0z NGJkLWI5YzYtYzQ3Mjc2YTRmMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLxQyM1eskn2p6OVPw9dKJvvfuHCg/4dxDw/MB/cl+7SyCSMSOKynHi e3IPoUFJUHTiNx8n31gfKAnl6W4yVEOwvlXfwDyOkaH6PVwh2QxVmf2WoVZ7ukhI yK+XA3+6q0E2gWu5Tx/zQhB75od+fP1gCpKjd89WWR4k9Dy15ReIaoKuqlk24shc bTDCHBsoMuhy4JpHbN7XxkZFWKZo2cPdz/QgnoKkSkKqllUPRf0vldY2mtRc2Bcn bncqm8R01xpZ7xP90O/h9Y3UgFtByPs8smvNxxEG9opjB8xb6dJALncUI2Iy/Lxq wvhRJCrLgE8rS4XfiwWXlBCdUs6cpWQ= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:32 2026 by rpki-client