$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa File: aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa (raw, json) Hash identifier: Hx8Z1zOXVr5GiAEZ1UBpT5+wGVR5LO8wo7fy1BC3UpU= Subject key identifier: 42:B8:58:54:B1:05:FF:6D:0E:BA:89:C7:56:E7:49:5E:73:49:E1:1C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA78E6F205798F97164660 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.96.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:78:e6:f2:05:79:8f:97:16:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ff0b6318-7293-4f29-9349-f46cfffd3b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:cf:fe:82:22:14:e1:c3:ba:4c:17:5e:bf: b6:b1:ee:ab:b0:0b:48:40:cf:54:c6:55:71:a3:4d: 95:d7:17:0a:23:0f:ec:07:d2:1f:c9:fa:09:8f:96: 2c:fe:ae:b7:0c:12:e9:5b:25:8f:3c:2b:61:b4:19: 58:ac:45:5c:21:52:ac:9b:a2:c8:c5:6f:6a:ee:c5: f3:b2:d5:50:a8:ae:51:ad:14:84:6f:5c:48:dd:ec: c1:52:15:b2:b2:d7:f9:7e:fc:57:98:ea:46:38:71: 62:bf:94:09:f4:85:69:ab:aa:bc:0a:76:d8:07:70: 26:91:35:1a:30:f7:98:a7:6d:20:a2:0b:14:31:26: 56:13:aa:92:54:3b:20:da:f7:83:7f:23:b6:3b:a0: 1d:37:2f:a3:28:45:1a:0c:2e:c3:73:04:03:1b:9e: c9:9a:2c:24:88:08:14:44:70:0a:48:71:0e:11:31: 9a:14:f1:69:b9:b5:1d:94:25:e7:87:df:3f:fa:92: a9:07:54:6c:e2:7a:0f:0a:4a:bf:54:25:6b:55:12: 66:af:5d:01:e4:99:92:08:a6:cd:cd:26:5f:d7:01: 2b:6c:18:1c:0d:fc:cd:b2:0c:50:00:ff:fe:fd:28: c7:00:cc:75:32:39:a6:18:ad:e1:53:48:9b:ac:5f: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B8:58:54:B1:05:FF:6D:0E:BA:89:C7:56:E7:49:5E:73:49:E1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ba:68:ed:5d:36:93:7a:63:12:8b:2b:69:99:6c:18:b7:b0: 1b:c2:10:17:45:08:4d:1a:3b:54:47:04:ac:0f:29:67:ae:a5: dc:bf:94:f2:ce:f0:91:ec:2d:c8:4c:90:84:39:95:25:8f:12: 87:4f:ca:f6:9d:8e:cc:0a:26:c9:55:26:74:d0:62:9f:a1:f6: 0b:c3:0d:57:e4:b0:0e:e3:45:74:25:18:60:91:82:76:0b:c4: ce:8a:c5:d5:d2:23:ad:f3:a5:09:3b:3f:6e:8b:98:46:6e:f9: 3f:96:d8:79:e0:ea:59:a6:a2:6d:55:7c:ad:03:22:44:21:e8: 3b:b3:f9:7f:b9:38:98:27:bd:ed:8d:7a:c4:d6:0b:f0:7b:f4: 92:c4:1a:c6:d4:24:00:e0:b6:8f:13:33:75:d3:8e:4b:66:c1: 67:64:47:26:14:9a:18:75:be:7a:b6:ea:ef:42:fd:a6:45:f3: d9:7b:48:1f:ab:00:5a:85:fd:0e:5f:63:69:af:39:94:d3:87: 89:4a:db:33:f4:e8:22:16:36:6c:ad:cb:7f:72:d3:d5:a9:f8: bf:96:f0:73:40:89:1b:80:2e:9d:1c:84:50:e8:75:9e:16:96: 3c:48:fc:38:8b:c9:12:4b:9c:ee:3f:63:27:ca:c4:7d:17:1a: 48:73:dd:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnjm8gV5j5cWRmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmYwYjYzMTgtNzI5My00ZjI5LTkzNDktZjQ2Y2ZmZmQzYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEvP/oIiFOHDukwXXr+2se6rsAtIQM9UxlVx o02V1xcKIw/sB9IfyfoJj5Ys/q63DBLpWyWPPCthtBlYrEVcIVKsm6LIxW9q7sXz stVQqK5RrRSEb1xI3ezBUhWystf5fvxXmOpGOHFiv5QJ9IVpq6q8CnbYB3AmkTUa MPeYp20gogsUMSZWE6qSVDsg2veDfyO2O6AdNy+jKEUaDC7DcwQDG57JmiwkiAgU RHAKSHEOETGaFPFpubUdlCXnh98/+pKpB1Rs4noPCkq/VCVrVRJmr10B5JmSCKbN zSZf1wErbBgcDfzNsgxQAP/+/SjHAMx1MjmmGK3hU0ibrF9wkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK4WFSxBf9tDrqJx1bnSV5zSeEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE5ZDk4MDUtY2YyZS0z OTE2LTliOGUtOGE0OGU2ZWFiNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe6aO1dNpN6YxKLK2mZbBi3sBvCEBdFCE0aO1RHBKwPKWeupdy/lPLO 8JHsLchMkIQ5lSWPEodPyvadjswKJslVJnTQYp+h9gvDDVfksA7jRXQlGGCRgnYL xM6KxdXSI63zpQk7P26LmEZu+T+W2Hng6lmmom1VfK0DIkQh6Duz+X+5OJgnve2N esTWC/B79JLEGsbUJADgto8TM3XTjktmwWdkRyYUmhh1vnq26u9C/aZF89l7SB+r AFqF/Q5fY2mvOZTTh4lK2zP06CIWNmyty39y09Wp+L+W8HNAiRuALp0chFDodZ4W ljxI/DiLyRJLnO4/YyfKxH0XGkhz3Vw= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:52 2026 by rpki-client