$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa File: af5296f1-8df0-36d8-8a09-14eade4ba563.roa (raw, json) Hash identifier: O/wUlimRgO0CDaWLIDVGcCYPMo+0xXW2N4w/G9go4Ts= Subject key identifier: 21:12:7B:DC:9E:2B:E5:EA:DD:82:07:77:DD:B9:C7:14:33:51:D2:B9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA8D208AE31FA368739700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.80.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:8d:20:8a:e3:1f:a3:68:73:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1543ae8c-dae2-46d2-8d9c-ed4a06381d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:9c:85:18:04:26:1a:fe:e7:2d:cc:bc:d8: cd:5e:6f:31:0f:bc:47:64:35:b2:aa:9c:15:a6:6b: 15:42:71:f5:9d:14:ba:dd:8e:a5:11:b8:44:e5:e0: 7e:a6:34:ec:90:d5:6c:0f:89:28:38:78:da:da:ba: cd:50:19:1e:33:03:ad:28:6d:38:22:66:0b:01:ef: c2:8b:dc:4f:69:bf:9d:0f:8d:2b:51:c9:f2:87:dd: 96:55:ac:1f:b1:37:ff:9c:14:73:82:32:c1:6c:cd: 4d:50:2a:ba:07:f1:03:d4:ff:58:54:d3:16:34:15: 21:5b:3a:30:9f:a3:73:c1:0c:9b:05:9a:45:32:e1: 36:41:da:45:ca:62:f0:7a:c7:12:cd:ac:50:2f:7b: eb:75:80:88:9b:15:24:25:bc:7a:d6:e1:48:2d:99: 84:c2:9b:f8:01:b0:a4:2b:26:b0:e9:5b:fa:19:d7: 06:e3:d4:c8:ba:e5:fb:05:9b:e0:b5:e6:e5:9a:bb: 61:b2:d4:0f:03:f4:68:d0:f7:1e:09:51:aa:d9:a5: 60:cf:a6:6c:c4:5f:1f:56:f9:75:ba:5e:6a:2a:b0: 81:4e:5d:86:66:c7:67:99:ab:37:77:45:57:cc:29: 89:6f:9a:03:68:db:be:7a:4c:c0:93:0b:21:17:f4: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:7B:DC:9E:2B:E5:EA:DD:82:07:77:DD:B9:C7:14:33:51:D2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.80.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:66:a1:64:0f:14:b7:2e:f5:e7:e5:ea:78:56:37:a4:ff:5e: 66:1c:f9:8c:86:0a:d4:b9:a2:2d:e1:ba:ad:f7:a6:d3:c9:21: 4b:90:4c:0a:74:f8:8b:59:dc:9b:b5:c3:1a:16:6e:c5:17:f5: a1:28:55:7e:68:81:89:44:2e:05:79:4d:37:43:a4:c9:63:17: 4a:ef:a4:7d:81:58:f6:45:7b:36:65:bb:39:cb:73:8c:55:51: b9:12:53:1f:91:42:e8:d4:37:99:40:37:a9:c1:ba:4a:0c:01: 1d:ed:47:90:45:c0:9b:6d:a7:82:6f:a6:6f:37:60:f5:ad:54: 58:c8:36:70:9f:cb:4c:53:a1:6f:f8:77:9b:37:cd:20:0b:72: 1d:47:41:73:d2:29:00:3d:2c:f9:a8:75:84:57:f6:d5:20:22: 21:20:12:7e:3a:91:51:7d:ef:71:ac:f5:d5:61:dc:9d:db:1f: 7c:fb:3d:9c:1a:49:9d:9a:da:09:60:3b:c0:84:04:8d:55:03: b7:ec:ce:6a:85:1e:9c:17:6a:57:9f:6b:6f:26:3e:02:d6:d9: 59:20:a9:d3:4b:05:a9:21:49:3e:c9:13:78:14:f4:3f:67:b0: 32:43:b9:a8:86:3e:36:9d:83:e2:0a:83:e8:8e:0b:e3:b5:27: 57:af:e6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqo0giuMfo2hzlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MTU0M2FlOGMtZGFlMi00NmQyLThkOWMtZWQ0YTA2MzgxZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVachRgEJhr+5y3MvNjNXm8xD7xHZDWyqpwV pmsVQnH1nRS63Y6lEbhE5eB+pjTskNVsD4koOHja2rrNUBkeMwOtKG04ImYLAe/C i9xPab+dD40rUcnyh92WVawfsTf/nBRzgjLBbM1NUCq6B/ED1P9YVNMWNBUhWzow n6NzwQybBZpFMuE2QdpFymLwescSzaxQL3vrdYCImxUkJbx61uFILZmEwpv4AbCk Kyaw6Vv6GdcG49TIuuX7BZvgteblmrthstQPA/Ro0PceCVGq2aVgz6ZsxF8fVvl1 ul5qKrCBTl2GZsdnmas3d0VXzCmJb5oDaNu+ekzAkwshF/RvCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCESe9yeK+Xq3YIHd925xxQzUdK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWY1Mjk2ZjEtOGRmMC0z NmQ4LThhMDktMTRlYWRlNGJhNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZmoWQPFLcu9efl6nhWN6T/XmYc+YyGCtS5oi3huq33ptPJIUuQTAp0 +ItZ3Ju1wxoWbsUX9aEoVX5ogYlELgV5TTdDpMljF0rvpH2BWPZFezZluznLc4xV UbkSUx+RQujUN5lAN6nBukoMAR3tR5BFwJttp4Jvpm83YPWtVFjINnCfy0xToW/4 d5s3zSALch1HQXPSKQA9LPmodYRX9tUgIiEgEn46kVF973Gs9dVh3J3bH3z7PZwa SZ2a2glgO8CEBI1VA7fszmqFHpwXalefa28mPgLW2VkgqdNLBakhST7JE3gU9D9n sDJDuaiGPjadg+IKg+iOC+O1J1ev5kk= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:42 2026 by rpki-client