$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa File: bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa (raw, json) Hash identifier: N9sObYwSwiUejdAVYj5PesASugSivTZ+ZK8kGoxn4Qo= Subject key identifier: 02:AE:2D:70:99:E7:77:57:A8:95:90:15:50:E8:41:C2:CD:2C:E8:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA782FBFDE393FD85A2280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.99.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:78:2f:bf:de:39:3f:d8:5a:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=fe47c02a-2037-4154-8fce-212bc97b8aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:d8:9b:ff:ac:92:1f:43:eb:09:29:9a:af: 18:eb:f3:ec:a3:9b:71:c9:3a:47:d0:72:0c:95:48: 41:e0:d4:c5:2a:d1:fd:4e:c9:dd:99:40:7e:34:08: 01:ff:9d:2e:b4:2f:42:7b:33:98:4e:c3:3d:7f:5f: 6e:a0:eb:4a:c8:d1:d1:f3:27:c7:62:ef:f7:29:d3: 85:43:d7:3a:49:2d:8a:12:24:ba:3c:04:32:6a:57: b7:c2:cb:0d:d2:3b:e9:9e:65:d7:89:a7:9a:58:19: c0:ff:6e:26:04:4e:25:db:ea:a8:35:64:ad:18:49: e5:fd:a6:c7:41:39:9b:e9:d6:57:55:ce:c1:cb:ac: bd:e3:a2:80:c6:eb:21:da:86:1d:28:f5:04:8f:23: fc:b0:fb:4a:ee:39:4e:fd:8f:d7:43:6f:63:6a:d2: 54:e5:fa:13:53:71:ec:43:07:66:e8:77:ea:a0:63: c4:5c:43:2d:3d:ff:be:9d:d5:dc:e3:11:53:ba:b2: 2d:68:40:3a:67:c3:1e:10:18:f6:64:80:cc:ae:cd: 47:ed:22:76:51:9e:79:6f:5b:30:74:51:02:79:9f: eb:03:fc:8f:7b:a6:98:b5:8b:56:9c:48:08:9f:a8: c4:11:f8:82:66:95:2a:6d:1f:52:c1:82:e8:5e:fb: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:2D:70:99:E7:77:57:A8:95:90:15:50:E8:41:C2:CD:2C:E8:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb3a033-a324-3a8f-a3b4-efd5f46f5350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bb:61:ba:c3:15:92:51:46:05:37:12:59:59:45:af:6c:4c: d6:71:ea:d0:2e:16:2c:b5:a4:9e:3b:e4:20:79:49:74:72:ad: aa:39:79:a5:53:76:d9:50:39:11:87:8f:15:4f:08:c6:4a:e6: 48:3a:f8:1d:24:87:ff:7f:70:26:5b:d3:5d:e3:a2:62:09:ed: f9:c1:0e:b5:10:ad:06:ec:03:90:74:36:a5:86:1d:60:2c:a6: 93:c9:13:06:8f:84:22:c8:ac:4b:b8:f2:4c:60:bc:fb:d9:22: 73:00:27:3e:29:a2:e5:63:b0:df:0b:a7:b5:b3:1c:b8:b3:82: af:0a:0b:0d:ea:52:d4:c7:3a:a2:6d:b5:2b:33:46:97:89:93: 3d:0b:44:07:f4:f8:4b:01:cd:70:04:e3:57:ba:0d:a5:50:fb: 3f:ed:1f:84:52:cb:be:1c:84:ed:6c:43:bf:d7:1b:19:83:0f: 18:ac:11:02:b1:66:fd:2d:b1:74:7a:f2:eb:24:fc:cf:7c:0f: 50:14:c6:85:f5:63:6c:bd:61:21:dd:b8:9b:3c:84:91:42:26: 1f:d2:63:39:2c:4f:aa:15:f0:ed:2a:5a:4b:a0:f9:18:57:de: 30:17:bf:46:6b:8a:35:9e:c2:2a:52:6b:11:4d:d6:47:9f:6b: 0c:74:c3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqngvv945P9haIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmU0N2MwMmEtMjAzNy00MTU0LThmY2UtMjEyYmM5N2I4YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomXYm/+skh9D6wkpmq8Y6/Pso5txyTpH0HIM lUhB4NTFKtH9TsndmUB+NAgB/50utC9CezOYTsM9f19uoOtKyNHR8yfHYu/3KdOF Q9c6SS2KEiS6PAQyale3wssN0jvpnmXXiaeaWBnA/24mBE4l2+qoNWStGEnl/abH QTmb6dZXVc7By6y946KAxush2oYdKPUEjyP8sPtK7jlO/Y/XQ29jatJU5foTU3Hs Qwdm6HfqoGPEXEMtPf++ndXc4xFTurItaEA6Z8MeEBj2ZIDMrs1H7SJ2UZ55b1sw dFECeZ/rA/yPe6aYtYtWnEgIn6jEEfiCZpUqbR9SwYLoXvs7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKuLXCZ53dXqJWQFVDoQcLNLOi+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZiM2EwMzMtYTMyNC0z YThmLWEzYjQtZWZkNWY0NmY1MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+7YbrDFZJRRgU3EllZRa9sTNZx6tAuFiy1pJ475CB5SXRyrao5eaVT dtlQORGHjxVPCMZK5kg6+B0kh/9/cCZb013jomIJ7fnBDrUQrQbsA5B0NqWGHWAs ppPJEwaPhCLIrEu48kxgvPvZInMAJz4pouVjsN8Lp7WzHLizgq8KCw3qUtTHOqJt tSszRpeJkz0LRAf0+EsBzXAE41e6DaVQ+z/tH4RSy74chO1sQ7/XGxmDDxisEQKx Zv0tsXR68usk/M98D1AUxoX1Y2y9YSHduJs8hJFCJh/SYzksT6oV8O0qWkug+RhX 3jAXv0ZrijWewipSaxFN1kefawx0wxE= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:40 2026 by rpki-client