$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa File: af01f159-d206-33a9-96fa-e15512e82350.roa (raw, json) Hash identifier: ZObIjQdYwARQ6dhLFVRVfh7S8y/zONABmor0239Gz3Q= Subject key identifier: 88:97:48:BD:D7:10:72:42:CF:DB:9F:57:60:05:66:F8:B9:D4:CB:D8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA637B9650D822F13F3600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.68.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:63:7b:96:50:d8:22:f1:3f:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=85e51621-152e-49e0-860c-940da9cc09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7d:3c:95:af:86:46:8b:ce:2a:a0:f9:9a:69: d0:ad:0a:f3:60:14:d0:7e:e3:20:19:b1:8d:cf:b2: aa:9e:6c:ba:a3:b0:23:5d:3e:89:6a:ae:d4:43:1a: 08:5f:81:56:b0:8a:ec:20:6d:79:2e:02:09:11:bc: da:08:4e:f4:64:e3:11:40:93:b7:a4:01:a3:aa:0e: 09:4f:37:1f:9d:fb:1c:15:af:80:20:5f:43:53:f6: 95:52:72:8b:00:f9:84:3d:10:63:cc:19:a2:8a:72: 87:98:76:2a:b8:7f:17:31:e6:70:ae:b8:bd:a5:f5: 57:61:ec:9b:c3:19:2f:83:85:84:8d:45:40:34:d9: ff:85:0e:b0:10:04:47:d1:2b:ee:f4:23:1a:0b:e8: a3:31:7f:41:da:1c:81:f9:99:fc:32:67:8c:b7:6c: f4:b0:6a:ed:74:b4:63:c6:2d:f6:48:90:b8:70:bf: 1c:a6:dc:5e:9a:fd:b0:62:36:67:d7:d4:7c:a6:0d: b2:56:67:82:2a:a7:82:e5:50:57:f5:e2:17:91:77: 0b:d9:40:22:86:e0:00:06:03:4f:12:42:c5:10:a7: ed:91:98:af:2b:68:e7:87:36:18:5e:46:81:e8:e1: 48:4d:40:59:6b:c2:fc:c5:8a:62:a5:55:2c:6a:56: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:97:48:BD:D7:10:72:42:CF:DB:9F:57:60:05:66:F8:B9:D4:CB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ec:c8:d8:2d:46:34:ed:31:3b:dd:ca:5c:4c:a5:1a:db:cb: 77:b7:06:fa:16:c0:a3:d3:36:7c:6c:bc:66:b7:36:e2:45:73: d2:76:9e:d1:aa:6d:f6:33:a2:3f:2c:9a:2b:7a:3e:3f:89:5c: 62:43:06:af:28:a7:c9:ed:0a:dd:15:42:c5:59:7b:05:ee:43: b5:a8:5a:65:1a:d0:e5:ad:f1:72:84:1e:d4:17:46:2a:46:65: 93:1b:9a:70:19:c0:1a:1e:a8:2c:3f:ed:52:32:03:84:1b:d9: 22:39:ef:bb:20:06:7f:bf:23:88:f6:9d:e4:48:96:e5:88:4b: 18:24:18:ca:3f:6a:7a:d8:7d:8a:2c:01:5a:c1:29:4e:4b:ac: 50:16:f4:30:a9:f2:09:3b:ba:72:ea:d3:85:e5:04:a3:27:9f: 89:3c:86:28:74:24:05:5b:dc:c0:9d:7c:cf:f6:9c:64:96:84: 8a:05:05:71:3c:d4:96:29:70:77:eb:35:8f:2c:d0:33:ec:33: 73:e3:ec:0b:13:3a:66:66:ec:b8:a5:0a:80:a5:a9:b2:56:a0: 3e:21:2d:6f:4c:a2:74:30:ce:07:41:e1:ba:ef:aa:23:51:9e: 0a:3f:d7:57:f5:b7:0c:cf:b2:29:bc:de:45:ec:98:64:0a:82: f5:47:ed:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmN7llDYIvE/NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODVlNTE2MjEtMTUyZS00OWUwLTg2MGMtOTQwZGE5Y2MwOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH08la+GRovOKqD5mmnQrQrzYBTQfuMgGbGN z7Kqnmy6o7AjXT6Jaq7UQxoIX4FWsIrsIG15LgIJEbzaCE70ZOMRQJO3pAGjqg4J TzcfnfscFa+AIF9DU/aVUnKLAPmEPRBjzBmiinKHmHYquH8XMeZwrri9pfVXYeyb wxkvg4WEjUVANNn/hQ6wEARH0Svu9CMaC+ijMX9B2hyB+Zn8MmeMt2z0sGrtdLRj xi32SJC4cL8cptxemv2wYjZn19R8pg2yVmeCKqeC5VBX9eIXkXcL2UAihuAABgNP EkLFEKftkZivK2jnhzYYXkaB6OFITUBZa8L8xYpipVUsalZbyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiXSL3XEHJCz9ufV2AFZvi51MvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWYwMWYxNTktZDIwNi0z M2E5LTk2ZmEtZTE1NTEyZTgyMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvsyNgtRjTtMTvdylxMpRrby3e3BvoWwKPTNnxsvGa3NuJFc9J2ntGq bfYzoj8smit6Pj+JXGJDBq8op8ntCt0VQsVZewXuQ7WoWmUa0OWt8XKEHtQXRipG ZZMbmnAZwBoeqCw/7VIyA4Qb2SI577sgBn+/I4j2neRIluWISxgkGMo/anrYfYos AVrBKU5LrFAW9DCp8gk7unLq04XlBKMnn4k8hih0JAVb3MCdfM/2nGSWhIoFBXE8 1JYpcHfrNY8s0DPsM3Pj7AsTOmZm7LilCoClqbJWoD4hLW9MonQwzgdB4brvqiNR ngo/11f1twzPsim83kXsmGQKgvVH7d0= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:50 2026 by rpki-client