$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa File: bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa (raw, json) Hash identifier: ImzE1JVISC6LpAN2vWmPUEytRD7l7bUnLlPiP69J+QM= Subject key identifier: 71:F5:6B:D6:9A:48:A8:84:DE:D3:44:6B:B1:5D:F0:5C:19:5F:58:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4F158CFD1B016B1C2180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.91.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4f:15:8c:fd:1b:01:6b:1c:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=dc7d8d41-e9a0-428a-a1b6-ef87e15d36a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:d4:e6:ac:35:ce:02:8a:a9:33:b1:ed:d1: 17:f4:bc:f8:cd:4c:d8:ae:ce:ef:3e:f5:70:6f:28: 4c:29:1f:8f:46:93:2e:7b:93:86:d4:26:aa:85:12: ad:dc:1d:fd:33:80:bb:9b:f7:d8:01:8a:3d:e9:5a: e5:9d:c5:a3:a0:3f:71:1f:58:71:b2:2b:44:46:9e: 73:8a:d8:ba:ad:bd:8f:31:40:0b:b9:4e:9b:fa:7b: 45:c7:ed:fe:86:2f:79:a0:1e:05:ab:8b:d6:7f:3b: 92:ac:f4:5b:34:0c:a4:9b:52:6a:1d:d9:dc:71:34: 23:68:ed:8b:16:2d:32:bb:d3:b6:21:63:8e:19:80: f5:e7:58:f9:e6:f0:15:9a:9f:21:85:1e:71:79:88: 67:a8:68:91:90:90:8e:1d:2d:93:82:ed:9b:0c:04: 24:0a:6f:d6:cf:1e:6a:b7:20:df:14:2a:ca:2f:cc: 63:ae:27:0c:3a:0b:81:a3:59:78:ff:2c:bb:5c:3d: c5:73:6f:b3:2b:49:3a:46:d9:ba:af:ad:dd:e4:6d: 56:18:0d:00:86:39:bb:f8:71:d3:41:fc:8b:21:45: 8c:8a:33:1f:6c:a9:14:41:71:85:10:b6:a1:b0:99: d8:5b:05:b2:f7:86:0f:c2:e4:50:a0:32:41:22:cd: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F5:6B:D6:9A:48:A8:84:DE:D3:44:6B:B1:5D:F0:5C:19:5F:58:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.91.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e1:c6:e7:3d:26:fe:34:d4:c4:fe:38:28:02:cb:aa:15:ad: 1f:64:5f:5b:19:03:72:65:ab:d8:48:57:65:07:97:e1:95:cb: af:42:47:eb:f8:f9:95:54:39:52:46:a1:ec:6c:01:89:0a:8f: dc:c6:11:bc:0c:50:4f:f7:b8:44:27:f5:49:fc:7f:f4:e7:c4: 09:05:65:aa:0c:90:56:02:c4:c9:30:cb:9e:93:aa:6a:c2:9c: 9c:c7:5a:24:93:96:68:ea:54:bb:08:1d:73:c7:a8:d2:a6:38: e6:9b:14:3d:ac:a7:6f:84:24:39:5d:f1:1b:f8:bb:8a:49:37: 5f:41:17:e7:75:41:fc:65:2e:44:3e:24:eb:1e:7a:98:27:aa: 16:3a:fe:d2:9b:17:f9:7a:72:3c:c6:7b:fa:68:f5:ba:f0:6b: bd:d4:61:28:d9:0c:6c:c6:6a:6f:bc:e8:0a:59:8a:97:fa:35: 96:6c:00:16:84:5f:34:6d:97:23:fe:da:49:d7:5c:87:83:99: 61:9b:ca:d9:2b:10:7a:43:83:c6:2b:b6:45:a3:45:9e:d8:49: ea:22:fa:10:57:14:03:c5:07:3b:59:1d:25:70:17:8c:2c:ef: 34:7a:6c:d5:21:6a:3d:9c:92:00:b7:c7:eb:15:3d:ad:2c:59: 44:66:5a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqk8VjP0bAWscIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGM3ZDhkNDEtZTlhMC00MjhhLWExYjYtZWY4N2UxNWQzNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDTU5qw1zgKKqTOx7dEX9Lz4zUzYrs7vPvVw byhMKR+PRpMue5OG1CaqhRKt3B39M4C7m/fYAYo96VrlncWjoD9xH1hxsitERp5z iti6rb2PMUALuU6b+ntFx+3+hi95oB4Fq4vWfzuSrPRbNAykm1JqHdnccTQjaO2L Fi0yu9O2IWOOGYD151j55vAVmp8hhR5xeYhnqGiRkJCOHS2Tgu2bDAQkCm/Wzx5q tyDfFCrKL8xjricMOguBo1l4/yy7XD3Fc2+zK0k6Rtm6r63d5G1WGA0Ahjm7+HHT QfyLIUWMijMfbKkUQXGFELahsJnYWwWy94YPwuRQoDJBIs2HaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH1a9aaSKiE3tNEa7Fd8FwZX1iKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY1ZTVjNGEtNWRmNy0z ZjZiLWI1NjYtNTMxYmQ1Y2FjZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIltwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKThxuc9Jv401MT+OCgCy6oVrR9kX1sZA3Jlq9hIV2UHl+GVy69CR+v4 +ZVUOVJGoexsAYkKj9zGEbwMUE/3uEQn9Un8f/TnxAkFZaoMkFYCxMkwy56TqmrC nJzHWiSTlmjqVLsIHXPHqNKmOOabFD2sp2+EJDld8Rv4u4pJN19BF+d1QfxlLkQ+ JOseepgnqhY6/tKbF/l6cjzGe/po9brwa73UYSjZDGzGam+86ApZipf6NZZsABaE XzRtlyP+2knXXIeDmWGbytkrEHpDg8YrtkWjRZ7YSeoi+hBXFAPFBztZHSVwF4ws 7zR6bNUhaj2ckgC3x+sVPa0sWURmWgo= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:19 2026 by rpki-client