$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa File: bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa (raw, json) Hash identifier: 3Hc22txwEjq+ELq4b1Y8FapDZwg5YuMwILi7aKjyRto= Subject key identifier: 9C:F4:41:96:24:2C:52:B7:7E:2A:06:FA:03:FF:B6:E2:75:5C:8C:EA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB35868C5AC3E44A21300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.65.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b3:58:68:c5:ac:3e:44:a2:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=88f2308d-aa9b-4e9c-acc2-be66a68e44a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:f7:be:ae:54:8b:a0:9d:ab:ec:e0:71:d3: 49:6e:90:ae:74:07:b6:34:0a:e8:5e:a6:07:c2:88: a5:3b:7e:9e:99:b3:03:33:9b:e5:fb:f7:4e:4f:51: fb:27:f4:ca:a8:8c:87:5c:fb:64:5e:ad:7d:de:59: b1:fb:b2:28:c0:19:39:21:61:01:d4:56:2f:e8:d1: 60:df:e4:f4:e6:11:4a:de:2b:d5:82:0b:9d:22:4b: 25:b5:25:c5:23:c6:6e:f2:ed:eb:97:d0:21:56:54: f1:02:df:ff:9b:3e:64:40:0e:d0:ba:54:ef:83:cc: 9f:a4:3e:3c:5c:9a:78:c1:91:6c:a7:79:77:53:00: d5:29:89:73:45:6f:a7:f0:4f:b6:14:56:ca:3b:3a: 5b:2f:c0:67:62:6b:75:de:ba:70:8e:e5:96:ef:43: aa:c8:51:3f:bb:bc:bb:32:87:52:45:b3:9d:e8:c1: ad:dd:a7:5b:dc:69:e9:09:a9:25:59:10:9a:a1:f4: 48:e1:8d:14:60:75:27:91:ed:13:57:8f:42:3d:d3: 39:e3:21:58:c8:b1:89:5a:68:0a:70:b4:3b:28:53: c9:09:21:82:39:ff:82:3e:75:50:96:72:cd:36:98: f5:8d:ed:40:b3:1b:af:b6:b4:2a:b5:5f:23:77:88: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:41:96:24:2C:52:B7:7E:2A:06:FA:03:FF:B6:E2:75:5C:8C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:89:65:3c:66:e2:28:9a:d8:91:c5:d6:29:b6:ab:7f:62:04: b6:6f:bb:33:37:e6:9d:5d:ab:d0:36:28:1a:fb:94:14:41:3c: f4:dc:e0:6a:f3:f3:46:c7:28:c7:4f:3b:b8:8c:6f:1a:89:f0: 8e:d8:9c:d6:0d:23:4a:24:3e:56:fa:27:80:0f:e8:c8:5a:83: 6f:11:17:af:ae:a9:cd:d1:20:87:fa:b8:0a:84:ba:f8:e3:d4: 2d:01:ce:47:70:ad:4e:e9:30:bd:c3:e3:fc:ba:24:40:96:45: ae:ee:61:ea:4e:c0:e2:54:15:27:00:98:e7:a4:60:91:89:06: 9f:bf:ca:2e:a9:d2:74:c3:fc:5a:58:66:70:32:c4:04:25:1a: cf:bc:b3:3a:39:5a:6d:a9:36:fb:81:d5:89:45:63:8e:a3:dd: 34:ab:37:33:59:1c:5b:41:d8:a6:9b:db:ad:6c:7e:8f:52:90: 89:c3:89:cd:e4:83:4b:4e:62:5d:1c:68:d1:36:2c:42:bd:09: 96:c1:ea:28:ab:e7:7e:ac:93:db:21:89:b2:15:31:e4:0c:95: 2c:f4:32:d3:cd:9a:18:77:44:50:3d:4c:14:57:4c:a3:cc:95: 03:5e:42:31:36:f9:d7:0e:ff:42:c2:1e:19:47:49:5b:d4:01: 6f:70:3c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrNYaMWsPkSiEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODhmMjMwOGQtYWE5Yi00ZTljLWFjYzItYmU2NmE2OGU0NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5b3vq5Ui6Cdq+zgcdNJbpCudAe2NAroXqYH woilO36embMDM5vl+/dOT1H7J/TKqIyHXPtkXq193lmx+7IowBk5IWEB1FYv6NFg 3+T05hFK3ivVggudIksltSXFI8Zu8u3rl9AhVlTxAt//mz5kQA7QulTvg8yfpD48 XJp4wZFsp3l3UwDVKYlzRW+n8E+2FFbKOzpbL8BnYmt13rpwjuWW70OqyFE/u7y7 ModSRbOd6MGt3adb3GnpCaklWRCaofRI4Y0UYHUnke0TV49CPdM54yFYyLGJWmgK cLQ7KFPJCSGCOf+CPnVQlnLNNpj1je1AsxuvtrQqtV8jd4gBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz0QZYkLFK3fioG+gP/tuJ1XIzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmI5NTQ5YzktNzBkMC0z YjdkLTlmYWQtMjJhNTEzNGEwODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCJZTxm4iia2JHF1im2q39iBLZvuzM35p1dq9A2KBr7lBRBPPTc4Grz 80bHKMdPO7iMbxqJ8I7YnNYNI0okPlb6J4AP6Mhag28RF6+uqc3RIIf6uAqEuvjj 1C0BzkdwrU7pML3D4/y6JECWRa7uYepOwOJUFScAmOekYJGJBp+/yi6p0nTD/FpY ZnAyxAQlGs+8szo5Wm2pNvuB1YlFY46j3TSrNzNZHFtB2Kab261sfo9SkInDic3k g0tOYl0caNE2LEK9CZbB6iir536sk9shibIVMeQMlSz0MtPNmhh3RFA9TBRXTKPM lQNeQjE2+dcO/0LCHhlHSVvUAW9wPAI= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:28 2026 by rpki-client