$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa File: b5dd507c-2031-35e3-a85f-266fb48df32d.roa (raw, json) Hash identifier: aAbuG/uJUU5lYHGtvr/P8hgSSmnjsvxxf31DxN9AmmQ= Subject key identifier: F9:7A:D5:35:C4:98:1E:BF:F1:0B:A5:91:6F:44:C9:4A:46:1E:68:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA55DCD39632EA6F2C6880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.70.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:55:dc:d3:96:32:ea:6f:2c:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=0e7f70ab-49da-4500-ba98-24f6d016a173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:37:9b:ad:31:d1:a1:f1:8e:5c:b3:9d:82:6d: 81:ba:08:ad:b1:26:cf:ad:2b:c1:45:a7:49:8e:b7: bd:23:1a:b6:a7:c8:5e:46:52:e9:6f:47:ea:b7:26: 47:04:3e:b3:75:5c:39:7e:a3:9d:b8:27:71:9f:b3: b8:29:d4:8b:91:ac:26:85:d9:23:02:0a:8b:6e:de: 27:87:26:87:ec:90:68:3a:22:78:c8:b9:f5:fa:50: 7e:74:eb:b3:17:3b:40:5d:55:00:6a:24:98:42:0c: 0e:95:3e:d4:14:20:e0:d0:ce:0b:38:f8:c6:59:4e: 2e:f2:3c:6b:9d:fb:dc:6e:c2:fd:c4:8a:7d:62:64: 8d:a5:33:e5:ca:e8:59:a2:e3:0f:97:32:39:b4:10: 34:2e:9a:f9:bf:c0:c0:ee:5a:c4:91:b5:79:bc:e4: b2:82:f7:3f:8b:2c:a2:61:1a:41:52:61:d3:07:3c: 00:72:48:a1:e5:0a:6e:54:ff:57:c3:5c:45:dc:c0: 13:4a:3c:ed:a6:cd:18:ed:ad:72:20:ce:8a:69:15: 06:1e:b8:66:0f:2d:e5:55:24:58:b6:46:ec:6d:4d: b8:18:a7:1c:5a:b4:3e:0a:42:a4:4a:07:c8:d2:d7: 5d:c9:c9:21:cf:43:80:86:84:a9:44:bc:7e:d4:4c: b2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7A:D5:35:C4:98:1E:BF:F1:0B:A5:91:6F:44:C9:4A:46:1E:68:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:77:fd:a8:a6:2a:04:4e:54:b4:ea:d9:d8:a5:c3:58:58:c8: 01:ad:65:d9:9e:6a:7f:a3:2f:40:76:60:ef:0c:31:1a:dd:45: 6a:b3:90:da:f3:45:a1:5e:86:41:ea:0d:c5:ac:d0:3c:2c:2c: 08:6d:ae:6c:2a:5d:15:b4:94:17:e1:d4:bc:38:5d:59:5f:bb: cf:e4:56:5f:5d:1c:4a:08:5a:3b:24:2d:af:05:08:41:e2:c3: 30:5e:86:1d:96:b3:8c:a6:cf:2e:79:cb:15:4e:ea:12:f6:88: ca:5e:9e:97:b1:93:c4:b5:7f:62:e5:ba:8a:79:6a:a2:51:cc: 3b:c6:86:27:56:6c:35:34:17:eb:30:53:07:78:ae:a9:80:7a: b1:28:16:e5:13:7a:f7:b2:3e:25:e9:13:8e:79:6c:3d:81:68: d1:64:1a:ac:af:c7:d8:3c:8c:e7:1b:b0:1b:89:a6:1d:41:58: e9:4a:ab:15:f2:f3:b9:de:53:f4:c0:c9:d8:53:e8:d9:66:83: 9d:cd:a3:e5:6f:62:2b:15:e7:de:5d:36:69:ef:08:87:05:c1: 25:fe:2e:f7:37:73:3f:1d:85:43:45:8e:4e:00:72:37:18:41: 3c:a5:f8:1f:27:b2:94:60:4c:16:75:13:3e:44:57:e0:d1:4f: 6a:61:e6:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlXc05Yy6m8saIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MGU3ZjcwYWItNDlkYS00NTAwLWJhOTgtMjRmNmQwMTZhMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjebrTHRofGOXLOdgm2BugitsSbPrSvBRadJ jre9Ixq2p8heRlLpb0fqtyZHBD6zdVw5fqOduCdxn7O4KdSLkawmhdkjAgqLbt4n hyaH7JBoOiJ4yLn1+lB+dOuzFztAXVUAaiSYQgwOlT7UFCDg0M4LOPjGWU4u8jxr nfvcbsL9xIp9YmSNpTPlyuhZouMPlzI5tBA0Lpr5v8DA7lrEkbV5vOSygvc/iyyi YRpBUmHTBzwAckih5QpuVP9Xw1xF3MATSjztps0Y7a1yIM6KaRUGHrhmDy3lVSRY tkbsbU24GKccWrQ+CkKkSgfI0tddyckhz0OAhoSpRLx+1Eyy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl61TXEmB6/8QulkW9EyUpGHmjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjVkZDUwN2MtMjAzMS0z NWUzLWE4NWYtMjY2ZmI0OGRmMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh3/aimKgROVLTq2dilw1hYyAGtZdmean+jL0B2YO8MMRrdRWqzkNrz RaFehkHqDcWs0DwsLAhtrmwqXRW0lBfh1Lw4XVlfu8/kVl9dHEoIWjskLa8FCEHi wzBehh2Ws4ymzy55yxVO6hL2iMpenpexk8S1f2Lluop5aqJRzDvGhidWbDU0F+sw Uwd4rqmAerEoFuUTeveyPiXpE455bD2BaNFkGqyvx9g8jOcbsBuJph1BWOlKqxXy 87neU/TAydhT6Nlmg53No+VvYisV595dNmnvCIcFwSX+Lvc3cz8dhUNFjk4AcjcY QTyl+B8nspRgTBZ1Ez5EV+DRT2ph5pc= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:32 2026 by rpki-client