$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abb8343f-2815-3cd0-a2f6-92949582d9c4.roa File: abb8343f-2815-3cd0-a2f6-92949582d9c4.roa (raw, json) Hash identifier: 0hzzMYwTjAsU8pCtHJ/IqUxlN+BUPokpR2UWquKKbs4= Subject key identifier: B0:08:5D:82:0B:D6:D7:54:BF:0B:F0:1C:71:5F:87:C2:C0:26:8D:DC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E02D75D3A9E080E4C79280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abb8343f-2815-3cd0-a2f6-92949582d9c4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.119.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2d:75:d3:a9:e0:80:e4:c7:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=21419fbc-beef-41be-89cb-a1d7477a6558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fe:45:6d:68:cb:fd:75:1e:ae:2a:be:10:72: ce:dd:71:3e:be:76:d6:fb:60:fa:00:5b:7e:15:e7: aa:aa:98:19:56:88:cf:d7:ee:76:6e:35:33:02:85: 94:c8:e2:c0:d6:62:84:46:e6:e4:8b:5c:6d:d2:e9: 31:c8:2f:c3:47:85:9d:86:b0:67:c2:58:6d:2a:48: 0c:16:fe:d9:aa:5b:e1:44:8d:bc:48:95:74:45:50: 88:f1:41:c6:91:0c:7f:3e:5c:f6:59:94:23:09:e8: de:d5:8a:0d:37:1c:cf:6f:03:e2:90:96:a9:05:99: ff:11:37:48:e0:3e:56:09:49:f6:90:c8:6d:48:c1: ae:e2:4f:a5:1a:2b:bc:6d:77:b9:f3:47:23:5a:d0: 55:fb:79:42:e0:4e:30:29:51:d1:3b:aa:46:02:c8: 10:7b:4d:15:05:0d:00:de:95:2a:a1:de:85:01:87: 61:4b:78:f9:f4:35:d4:61:2d:93:27:f5:53:f6:c0: f6:aa:38:cb:3e:8b:f5:5d:01:0a:f5:95:aa:95:18: 92:54:ce:54:ec:ad:95:cb:30:81:b4:f8:0a:12:a5: 30:0f:ba:f0:8c:e0:21:1c:81:ca:5a:e0:3e:d8:ce: f8:13:10:c3:4b:ba:2e:02:15:7c:57:88:5f:10:74: 7c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:08:5D:82:0B:D6:D7:54:BF:0B:F0:1C:71:5F:87:C2:C0:26:8D:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abb8343f-2815-3cd0-a2f6-92949582d9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:51:e8:a4:57:d0:8b:66:b9:47:d1:fe:c7:15:b9:3d:05:c3: 1b:5a:37:aa:c6:af:ac:13:b0:94:14:66:12:36:12:29:87:d6: 3c:62:21:95:86:63:94:da:28:88:9e:0d:8d:97:7b:ab:a8:a5: ee:93:2a:4b:c5:41:10:b1:5c:ff:b3:1c:db:35:1c:57:3b:a7: 6d:f7:31:37:c6:28:41:12:4d:4d:81:fd:e3:22:51:f5:c9:8a: bc:42:d9:b2:67:f6:a8:e9:37:87:38:f9:a5:0f:3a:a1:53:f7: 51:d7:e1:af:ae:f9:a7:2f:97:50:1e:41:17:05:56:35:65:67: 6f:a4:77:d8:d8:aa:50:a7:ce:7c:c2:d7:a4:cf:4f:95:cb:d5: a5:22:41:56:b5:e9:2e:91:2e:28:c1:a2:e2:7a:dc:f2:c4:60: 9d:c8:66:a1:ce:08:c4:fb:95:41:28:62:5b:d2:e2:9d:5a:4a: 96:78:cd:39:cf:cb:ae:ac:b4:0c:eb:6b:43:92:5b:28:cc:2c: 4c:fa:15:eb:87:7e:1a:91:9a:a5:24:b3:64:5e:9e:94:73:9d: 1e:4d:4d:e9:f2:40:1c:c8:5b:23:2f:f8:33:92:cc:e8:1f:60: b2:0c:96:65:1a:e3:17:ca:cf:40:36:29:1b:45:b2:6d:13:03: 38:1e:29:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4C1106nggOTHkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjE0MTlmYmMtYmVlZi00MWJlLTg5Y2ItYTFkNzQ3N2E2NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf5FbWjL/XUeriq+EHLO3XE+vnbW+2D6AFt+ FeeqqpgZVojP1+52bjUzAoWUyOLA1mKERubki1xt0ukxyC/DR4WdhrBnwlhtKkgM Fv7ZqlvhRI28SJV0RVCI8UHGkQx/Plz2WZQjCeje1YoNNxzPbwPikJapBZn/ETdI 4D5WCUn2kMhtSMGu4k+lGiu8bXe580cjWtBV+3lC4E4wKVHRO6pGAsgQe00VBQ0A 3pUqod6FAYdhS3j59DXUYS2TJ/VT9sD2qjjLPov1XQEK9ZWqlRiSVM5U7K2VyzCB tPgKEqUwD7rwjOAhHIHKWuA+2M74ExDDS7ouAhV8V4hfEHR8bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAIXYIL1tdUvwvwHHFfh8LAJo3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWJiODM0M2YtMjgxNS0z Y2QwLWEyZjYtOTI5NDk1ODJkOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIndgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdR6KRX0ItmuUfR/scVuT0FwxtaN6rGr6wTsJQUZhI2EimH1jxiIZWG Y5TaKIieDY2Xe6uope6TKkvFQRCxXP+zHNs1HFc7p233MTfGKEESTU2B/eMiUfXJ irxC2bJn9qjpN4c4+aUPOqFT91HX4a+u+acvl1AeQRcFVjVlZ2+kd9jYqlCnznzC 16TPT5XL1aUiQVa16S6RLijBouJ63PLEYJ3IZqHOCMT7lUEoYlvS4p1aSpZ4zTnP y66stAzra0OSWyjMLEz6FeuHfhqRmqUks2RenpRznR5NTenyQBzIWyMv+DOSzOgf YLIMlmUa4xfKz0A2KRtFsm0TAzgeKTo= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:03 2026 by rpki-client