$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa File: aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa (raw, json) Hash identifier: 1xS/RhO1UIgKqDbve/CjqjeTcQOqMV9mqzPovGihie4= Subject key identifier: F8:F3:11:51:0C:CE:39:7C:3B:99:D8:B5:B8:F2:E4:7B:89:8F:8E:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA48EA6A86DB3167670D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.19.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:48:ea:6a:86:db:31:67:67:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4a541005-deea-40db-a973-9df1628e6426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:c2:83:9e:7f:2b:3e:6c:80:3a:dc:5f:13: 24:84:8d:4b:b6:52:56:d4:9e:4f:a3:9f:59:e9:4a: ee:b1:ac:e7:41:95:55:bf:06:32:f2:44:e9:ff:0f: 44:1a:ab:4a:59:6d:c3:42:17:ba:af:a1:12:87:c9: 47:73:a7:58:3c:ab:00:09:e8:40:34:2d:50:d4:9e: 87:a0:f0:6c:66:0a:44:42:1c:23:e1:17:13:68:3c: 8d:01:cf:d6:de:79:d5:6e:e1:84:12:7f:f7:90:53: 30:38:93:ce:e0:d1:14:40:b4:e1:4b:c3:87:30:e9: 31:82:62:8b:0b:e4:aa:36:3b:f9:93:e3:12:b7:2d: 86:12:9e:6d:e1:9e:3c:a6:19:54:d7:65:58:d2:93: a0:a4:18:12:3d:9e:ad:5e:de:ea:ad:74:55:28:c7: c6:3b:b7:0e:d8:42:55:70:7f:32:90:62:37:c3:a7: 3b:40:3b:0d:5c:5a:df:b4:55:73:1e:c0:3d:d1:c0: b8:1d:ee:71:43:b2:3b:b4:f1:c7:34:ea:49:2c:b8: 88:c9:44:3c:41:32:96:c3:a2:c5:dd:ca:86:ef:37: b2:ac:a9:db:3a:7b:ec:22:0e:e3:5d:87:7a:04:9a: 33:8a:f2:70:40:63:11:77:3d:06:38:fe:42:ec:d7: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F3:11:51:0C:CE:39:7C:3B:99:D8:B5:B8:F2:E4:7B:89:8F:8E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.19.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c9:4e:73:f2:03:ae:df:57:dd:48:e0:69:02:d8:00:39:cb: 4b:ad:57:0a:1c:f0:8d:47:e4:a9:6b:91:3d:d3:50:d7:31:43: 57:15:e1:33:de:96:16:1c:77:c6:f7:3e:53:69:81:1e:6a:ea: a0:ad:76:a7:8f:13:8b:7a:fb:1e:4f:f0:34:44:a9:b4:af:2b: 12:80:9c:01:62:83:a6:e9:22:a6:9a:52:45:81:6a:95:81:5a: d5:e5:b6:0a:94:1e:8f:20:a1:97:56:71:ca:3b:fb:7b:f2:b5: 45:73:e9:d3:ab:2e:1a:2d:0f:f5:29:ca:a0:e1:a7:b2:47:24: b5:2f:d2:56:21:b9:2a:6a:f6:fc:95:eb:30:a5:03:95:d0:2f: 5b:e3:ad:27:fe:0b:98:1b:e8:b7:5a:7d:09:7c:10:90:21:8f: 9d:6c:b2:18:59:78:5e:86:8b:0e:fb:6f:61:40:68:2b:32:ff: 81:2d:0b:d6:41:7d:58:f7:56:ff:05:42:22:fd:15:22:8d:37: 22:72:6b:0f:08:94:5b:0f:45:ac:89:34:20:54:92:1f:36:8e: de:db:cb:6a:e1:56:81:5b:9e:d3:36:45:ad:da:c7:06:8e:27: 1b:c2:63:b7:89:6e:21:cd:3c:19:52:83:a3:29:e8:63:13:b3: d4:37:27:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkjqaobbMWdnDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NGE1NDEwMDUtZGVlYS00MGRiLWE5NzMtOWRmMTYyOGU2NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSLCg55/Kz5sgDrcXxMkhI1LtlJW1J5Po59Z 6UrusaznQZVVvwYy8kTp/w9EGqtKWW3DQhe6r6ESh8lHc6dYPKsACehANC1Q1J6H oPBsZgpEQhwj4RcTaDyNAc/W3nnVbuGEEn/3kFMwOJPO4NEUQLThS8OHMOkxgmKL C+SqNjv5k+MSty2GEp5t4Z48phlU12VY0pOgpBgSPZ6tXt7qrXRVKMfGO7cO2EJV cH8ykGI3w6c7QDsNXFrftFVzHsA90cC4He5xQ7I7tPHHNOpJLLiIyUQ8QTKWw6LF 3cqG7zeyrKnbOnvsIg7jXYd6BJozivJwQGMRdz0GOP5C7NeHEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjzEVEMzjl8O5nYtbjy5HuJj44uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEyNTVkYzEtYzMyZC0z NWE4LWI0ZTgtMjdhN2NlOGQ1M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvJTnPyA67fV91I4GkC2AA5y0utVwoc8I1H5KlrkT3TUNcxQ1cV4TPe lhYcd8b3PlNpgR5q6qCtdqePE4t6+x5P8DREqbSvKxKAnAFig6bpIqaaUkWBapWB WtXltgqUHo8goZdWcco7+3vytUVz6dOrLhotD/UpyqDhp7JHJLUv0lYhuSpq9vyV 6zClA5XQL1vjrSf+C5gb6LdafQl8EJAhj51sshhZeF6Giw77b2FAaCsy/4EtC9ZB fVj3Vv8FQiL9FSKNNyJyaw8IlFsPRayJNCBUkh82jt7by2rhVoFbntM2Ra3axwaO JxvCY7eJbiHNPBlSg6Mp6GMTs9Q3J0A= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:26 2026 by rpki-client