$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa File: a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa (raw, json) Hash identifier: ITtUOvnGoLSv584l9/NTxd1VA+rKissqPNGnWolC/CU= Subject key identifier: 1E:2C:AD:F3:31:54:E9:82:6F:2D:1B:A3:DE:FC:2E:75:E0:89:B5:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA60BAD95830E1EC28C0C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.95.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:60:ba:d9:58:30:e1:ec:28:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e1d3d54c-f5f8-4949-bb31-723d8dac22b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:f0:ec:d8:9d:94:cb:2d:81:00:cb:a8:45: 16:88:97:b1:45:65:3d:68:f1:1d:d8:08:5b:71:05: 47:cf:92:db:87:89:6e:ca:e6:93:8f:ee:58:7b:24: de:6d:5a:22:c1:50:89:ac:52:f5:7c:3f:fe:24:0c: 46:e6:1f:9d:76:84:00:e4:5f:96:da:ae:1c:56:6f: 0c:fa:88:8f:55:d1:81:6a:68:8d:2a:64:6c:30:58: e7:8a:49:ce:84:5d:a6:00:60:31:93:53:85:06:60: 66:c0:79:46:8a:58:23:e8:66:4b:9a:09:43:78:97: 96:f8:03:35:e2:b2:cb:1d:26:89:74:be:6f:33:e3: 2e:21:e9:25:a0:a8:1e:28:e1:af:4e:a1:c8:ab:d9: c3:c4:71:62:08:a9:41:28:d5:2e:dd:12:6d:b2:e2: 87:ca:00:8c:9b:49:f0:ef:96:e4:35:72:9a:5d:2f: 68:32:04:d9:0a:88:b4:2e:74:6d:75:2b:ad:da:df: f5:82:a1:d7:69:07:c7:e9:80:14:3d:19:8b:2f:9f: 62:04:ca:04:89:40:51:6c:fa:72:6a:43:58:68:e3: 9a:4a:bc:d7:b2:44:1c:c4:65:ce:c3:7d:f1:9f:4a: b9:94:24:3f:42:e2:45:fb:6b:01:17:75:93:bb:a0: f3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2C:AD:F3:31:54:E9:82:6F:2D:1B:A3:DE:FC:2E:75:E0:89:B5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5d891d9-2530-322f-aff1-ae61d22d4f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f6:c9:1d:a1:b7:b1:de:c8:16:3d:f1:06:d6:ba:76:19:fc: b8:b5:6c:73:08:ff:2b:6b:e4:48:97:ee:86:2a:d8:6c:34:62: 89:2c:e4:aa:05:d1:41:89:06:de:5e:0c:81:8e:35:58:5c:d1: 51:81:2d:f6:00:4c:9d:33:e1:48:6d:44:8b:26:5b:fd:85:3f: 56:a2:33:6f:0a:86:dc:76:14:46:3b:7c:08:23:20:da:f9:f2: 4b:b9:fc:e6:44:d0:db:de:a5:21:a4:49:52:49:8a:e3:e6:2c: 88:4f:46:b2:55:d7:23:db:fe:65:65:03:c9:1a:34:97:e8:19: d6:c7:4a:2d:94:2c:71:fa:1f:8f:d3:79:05:06:2b:a8:f9:c7: 1f:2b:5a:f3:35:e7:f1:86:03:5b:0c:c5:53:b2:09:f6:f7:36: 05:d1:81:d1:84:36:38:ce:53:4a:1b:fc:60:8a:74:aa:80:75: 44:c9:e2:6b:2e:ec:41:01:d2:c0:de:f2:83:fe:02:3e:ad:f3: d1:e9:e4:23:6a:2b:da:ea:8e:72:eb:93:ba:cb:f0:80:ce:e1: 04:50:7f:79:4e:45:d6:eb:59:99:8e:26:da:db:68:82:79:1b: 61:47:5d:a6:ce:ba:01:f0:aa:7c:a2:2f:bd:af:ae:c9:7d:c7: b1:e6:e2:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmC62Vgw4ewowMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTFkM2Q1NGMtZjVmOC00OTQ5LWJiMzEtNzIzZDhkYWMyMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwLw7NidlMstgQDLqEUWiJexRWU9aPEd2Ahb cQVHz5Lbh4luyuaTj+5YeyTebVoiwVCJrFL1fD/+JAxG5h+ddoQA5F+W2q4cVm8M +oiPVdGBamiNKmRsMFjniknOhF2mAGAxk1OFBmBmwHlGilgj6GZLmglDeJeW+AM1 4rLLHSaJdL5vM+MuIekloKgeKOGvTqHIq9nDxHFiCKlBKNUu3RJtsuKHygCMm0nw 75bkNXKaXS9oMgTZCoi0LnRtdSut2t/1gqHXaQfH6YAUPRmLL59iBMoEiUBRbPpy akNYaOOaSrzXskQcxGXOw33xn0q5lCQ/QuJF+2sBF3WTu6DzTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4srfMxVOmCby0bo978LnXgibVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVkODkxZDktMjUzMC0z MjJmLWFmZjEtYWU2MWQyMmQ0ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP2yR2ht7HeyBY98QbWunYZ/Li1bHMI/ytr5EiX7oYq2Gw0Yoks5KoF 0UGJBt5eDIGONVhc0VGBLfYATJ0z4UhtRIsmW/2FP1aiM28Khtx2FEY7fAgjINr5 8ku5/OZE0NvepSGkSVJJiuPmLIhPRrJV1yPb/mVlA8kaNJfoGdbHSi2ULHH6H4/T eQUGK6j5xx8rWvM15/GGA1sMxVOyCfb3NgXRgdGENjjOU0ob/GCKdKqAdUTJ4msu 7EEB0sDe8oP+Aj6t89Hp5CNqK9rqjnLrk7rL8IDO4QRQf3lORdbrWZmOJtrbaIJ5 G2FHXabOugHwqnyiL72vrsl9x7Hm4lg= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:49 2026 by rpki-client