$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa File: ba543447-8c4d-3150-9872-2f0e3ae1b000.roa (raw, json) Hash identifier: 2w9joqmrWsLv0hZsL92puOtwP7NmX23wI2Jcn4ctrJw= Subject key identifier: 6C:1C:A8:23:0F:1D:F6:1B:85:8C:39:90:9C:30:DA:FD:C7:00:E6:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E103934AD4D718D3D8E480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 19527 IP address blocks: 34.1.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:03:93:4a:d4:d7:18:d3:d8:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1065a8c3-7c72-4c35-ad9a-785e4090d210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:ad:21:85:c9:c8:b7:b8:e3:1f:83:4c:37: 56:39:54:cc:75:86:f8:13:42:bd:68:ea:e7:01:a1: 02:00:d2:d6:3b:3a:d5:42:d6:fc:0e:9e:5d:c5:a4: 95:b0:1d:63:2e:c3:09:f9:51:d0:e0:b6:7b:fa:7e: 91:24:22:ec:f7:7a:31:c3:98:0b:ac:4a:13:a7:9f: fc:38:dd:d9:cf:ad:d9:96:53:c5:0c:85:58:c5:92: 4f:82:96:e3:b0:5e:e5:61:63:f5:ce:54:f7:14:48: 30:5c:9b:f7:97:64:d1:93:83:78:d2:fa:e1:4b:5c: 57:73:8d:09:e0:3c:f6:a8:41:1e:70:bb:8e:11:bd: 12:e5:19:d9:7e:f3:74:68:bb:79:85:2f:c4:cd:ff: 57:af:29:72:28:18:a5:a9:27:92:ab:b3:d7:58:9d: 51:9d:93:37:5a:67:b5:34:57:57:6b:03:88:bb:62: 06:5b:7d:c2:db:e5:f1:bd:65:75:f3:44:43:72:1a: 6f:d3:b3:fd:bb:98:ca:eb:7c:5a:80:75:af:0c:d8: ca:4b:cf:31:5e:df:7f:8c:b9:71:19:be:1a:7f:5b: 33:42:c5:da:7a:ea:d1:5a:9f:55:7c:da:d4:64:24: 57:3f:83:1b:c7:cd:3a:63:c0:e4:99:e4:bd:25:25: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1C:A8:23:0F:1D:F6:1B:85:8C:39:90:9C:30:DA:FD:C7:00:E6:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2f:49:2c:4b:17:c9:d2:a9:cc:17:9d:25:af:f0:bb:20:62: a2:0f:f5:d4:31:82:c4:b5:82:15:23:8a:2b:17:2f:0f:12:96: 30:74:ba:c3:ae:a0:90:e6:c4:c3:65:fa:65:36:56:34:e1:fc: 63:22:8e:35:c0:0f:6b:a8:18:03:c4:eb:8e:98:e0:8f:77:ca: 47:59:29:b4:27:b2:8d:ec:c1:12:87:80:c6:a1:a1:62:20:dc: 66:6e:bb:e8:31:93:a8:69:e7:b2:b0:fb:63:cc:0c:d9:60:e4: 5c:14:93:38:15:8b:26:0a:65:e6:80:05:75:77:38:57:05:d4: ae:0a:5e:d3:d2:f5:f0:e3:0a:91:b2:25:43:9e:13:05:e4:17: d5:a6:ff:bc:17:a8:8d:14:e6:24:72:52:b4:96:bb:1a:e0:4c: 66:2a:d8:13:63:ca:07:7a:9a:15:1c:4c:81:b1:0f:51:af:ba: 44:b0:cb:3c:a3:28:63:0c:5c:96:7d:ba:ae:c8:de:fa:b5:67: 75:d4:a7:51:3a:1f:5a:e5:a4:10:95:1b:af:1e:df:1c:bf:db: e9:10:ad:d2:59:6b:bd:d3:bc:50:8f:ac:73:8f:6a:57:c5:3f: af:88:8d:22:10:50:3c:a5:eb:45:d2:6f:ab:44:8f:5b:47:4d: a5:58:8c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4QOTStTXGNPY5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTA2NWE4YzMtN2M3Mi00YzM1LWFkOWEtNzg1ZTQwOTBkMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zCtIYXJyLe44x+DTDdWOVTMdYb4E0K9aOrn AaECANLWOzrVQtb8Dp5dxaSVsB1jLsMJ+VHQ4LZ7+n6RJCLs93oxw5gLrEoTp5/8 ON3Zz63ZllPFDIVYxZJPgpbjsF7lYWP1zlT3FEgwXJv3l2TRk4N40vrhS1xXc40J 4Dz2qEEecLuOEb0S5RnZfvN0aLt5hS/Ezf9XrylyKBilqSeSq7PXWJ1RnZM3Wme1 NFdXawOIu2IGW33C2+XxvWV180RDchpv07P9u5jK63xagHWvDNjKS88xXt9/jLlx Gb4af1szQsXaeurRWp9VfNrUZCRXP4Mbx806Y8DkmeS9JSU+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwcqCMPHfYbhYw5kJww2v3HAOYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE1NDM0NDctOGM0ZC0z MTUwLTk4NzItMmYwZTNhZTFiMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsvSSxLF8nSqcwXnSWv8LsgYqIP9dQxgsS1ghUjiisXLw8SljB0usOu oJDmxMNl+mU2VjTh/GMijjXAD2uoGAPE646Y4I93ykdZKbQnso3swRKHgMahoWIg 3GZuu+gxk6hp57Kw+2PMDNlg5FwUkzgViyYKZeaABXV3OFcF1K4KXtPS9fDjCpGy JUOeEwXkF9Wm/7wXqI0U5iRyUrSWuxrgTGYq2BNjygd6mhUcTIGxD1GvukSwyzyj KGMMXJZ9uq7I3vq1Z3XUp1E6H1rlpBCVG68e3xy/2+kQrdJZa73TvFCPrHOPalfF P6+IjSIQUDyl60XSb6tEj1tHTaVYjF0= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:42 2026 by rpki-client