$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa File: b04c07b8-cff9-318b-a338-11569a7f320a.roa (raw, json) Hash identifier: NyYsT0dgUc6sQMjT8WKNTpfm4++5u3GBOn2FNAl2GNA= Subject key identifier: 72:B0:68:5A:04:7F:93:2F:BB:60:89:76:37:99:DF:E2:4F:AA:A5:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA1E1AF16F281D5192600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.146.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a1:e1:af:16:f2:81:d5:19:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3cb29d70-ba56-46ef-8206-2f07a0adfb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a1:83:38:32:ad:7b:16:6e:d3:4f:b4:fe:ac: f9:8e:88:cc:1c:2b:7d:93:25:0e:81:15:42:1e:dd: e1:99:ef:46:94:00:ba:58:fd:58:af:a5:fc:34:bc: a7:5c:3b:3d:0d:cb:26:04:1f:b9:25:62:16:67:09: 52:5c:81:95:ab:eb:86:01:33:41:a6:64:d0:19:0e: fe:02:31:8d:c6:32:ae:49:c4:5b:cd:e4:86:89:67: f6:01:03:9d:58:e7:8c:aa:6a:06:b1:f1:8c:40:4c: 7d:e8:07:b4:c7:41:66:90:e2:ed:7b:b7:ad:6a:1c: 4f:31:ab:2a:95:d2:b0:c9:67:5f:06:2e:97:12:62: 82:8d:ac:19:dd:55:11:ef:02:d7:04:1a:9b:12:08: e7:ea:7d:27:f9:22:0a:0d:85:c0:df:82:da:6a:a3: 4d:fe:f1:3d:d1:cb:f9:56:5a:df:7c:b0:16:6a:8e: 7f:8e:2d:8b:3d:33:5a:67:19:76:af:e7:86:36:b4: 98:63:69:ce:ca:17:04:c8:2d:77:32:ea:1e:ab:52: 30:38:16:a0:6f:9e:11:94:c7:16:6f:3b:fe:fa:28: 9f:60:7d:c4:4a:5d:04:dc:80:15:2d:08:5a:f6:d4: 9c:ab:ab:36:3c:0c:04:31:ac:4f:2d:4c:46:79:76: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B0:68:5A:04:7F:93:2F:BB:60:89:76:37:99:DF:E2:4F:AA:A5:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.146.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f8:2d:32:97:2c:15:6e:8c:c5:fa:97:08:ea:b7:b6:cf:aa: 2d:11:b7:2c:c0:65:d2:81:f2:0f:ab:0c:1c:a3:33:32:f6:b7: 40:36:fa:d7:6f:64:bb:ef:06:c0:6d:c0:99:4e:f4:92:72:97: 30:41:dc:32:87:e7:9c:33:9c:cc:b6:81:3c:40:b6:75:7c:18: 88:bf:35:8d:93:2b:45:e6:9b:1d:f4:27:26:48:5a:2f:9e:ea: 53:3f:61:d4:dc:ac:c2:94:f6:e3:91:3e:69:9d:21:1e:00:44: 60:c0:85:f8:78:59:a9:f3:af:ee:45:05:28:c3:0b:42:1b:7e: 2c:95:4b:82:49:61:79:0a:62:eb:49:f0:d9:50:6f:92:e5:fb: 4b:72:36:26:63:6b:6a:6c:4a:71:b1:da:fd:a5:db:4c:25:05: 13:55:a4:b6:c5:73:91:22:1c:15:85:6c:91:16:71:7e:1b:71: c9:dd:8a:a3:3c:bb:56:f5:0a:f3:42:b0:55:5c:d2:53:f2:38: 48:51:6c:bc:d5:f4:8e:d4:f8:21:50:fd:93:75:11:3d:e9:f5: 0f:18:9b:b0:c6:0b:16:98:d7:1c:99:a2:54:5e:d2:da:13:22: 00:6a:dd:13:3b:e7:63:9c:ad:88:4e:a1:50:2c:a8:77:64:e7: 47:9c:7d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqHhrxbygdUZJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk M2NiMjlkNzAtYmE1Ni00NmVmLTgyMDYtMmYwN2EwYWRmYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6GDODKtexZu00+0/qz5jojMHCt9kyUOgRVC Ht3hme9GlAC6WP1Yr6X8NLynXDs9DcsmBB+5JWIWZwlSXIGVq+uGATNBpmTQGQ7+ AjGNxjKuScRbzeSGiWf2AQOdWOeMqmoGsfGMQEx96Ae0x0FmkOLte7etahxPMasq ldKwyWdfBi6XEmKCjawZ3VUR7wLXBBqbEgjn6n0n+SIKDYXA34LaaqNN/vE90cv5 VlrffLAWao5/ji2LPTNaZxl2r+eGNrSYY2nOyhcEyC13Muoeq1IwOBagb54RlMcW bzv++iifYH3ESl0E3IAVLQha9tScq6s2PAwEMaxPLUxGeXbVpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKwaFoEf5Mvu2CJdjeZ3+JPqqWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjA0YzA3YjgtY2ZmOS0z MThiLWEzMzgtMTE1NjlhN2YzMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG34LTKXLBVujMX6lwjqt7bPqi0RtyzAZdKB8g+rDByjMzL2t0A2+tdv ZLvvBsBtwJlO9JJylzBB3DKH55wznMy2gTxAtnV8GIi/NY2TK0Xmmx30JyZIWi+e 6lM/YdTcrMKU9uORPmmdIR4ARGDAhfh4Wanzr+5FBSjDC0IbfiyVS4JJYXkKYutJ 8NlQb5Ll+0tyNiZja2psSnGx2v2l20wlBRNVpLbFc5EiHBWFbJEWcX4bccndiqM8 u1b1CvNCsFVc0lPyOEhRbLzV9I7U+CFQ/ZN1ET3p9Q8Ym7DGCxaY1xyZolRe0toT IgBq3RM752OcrYhOoVAsqHdk50ecfSE= -----END CERTIFICATE-----Generated at Thu Mar 19 01:50:57 2026 by rpki-client