$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb9bed6-2a4c-3752-b391-e463a5089a55.roa File: bfb9bed6-2a4c-3752-b391-e463a5089a55.roa (raw, json) Hash identifier: hQTKzPU1czc5YaW2Hord/g8Xc5ieFvBZx6VLgntWr8c= Subject key identifier: 7F:82:AE:C0:27:47:64:1C:4A:97:AF:6E:1C:53:33:6D:F1:5F:0B:EB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4A65DA41B3DBF4D6B960 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb9bed6-2a4c-3752-b391-e463a5089a55.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.86.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4a:65:da:41:b3:db:f4:d6:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=39ed6e85-5b02-4508-b12e-83ec262a1866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:96:06:81:74:b5:b9:34:a4:34:60:1b:92: cd:65:b2:c1:f2:91:01:61:6d:72:9f:d2:7d:da:a7: 11:da:9e:99:cc:c9:8b:c1:33:11:df:4f:b3:4d:67: 0f:7f:d9:b5:8d:8b:2c:c5:5f:b2:ff:66:ba:4a:89: 12:23:b8:fc:03:b2:0c:b6:e5:ea:9f:e0:e5:e0:5a: 55:60:c5:5d:21:bd:1a:c4:0a:60:c0:1d:7c:6e:60: ff:3d:cb:af:5e:38:ba:41:91:43:21:f1:e1:1a:d0: 4e:01:18:15:6c:24:04:18:6f:e2:9d:99:67:57:ed: 8b:a1:81:e4:1e:a2:fd:fd:ed:ab:c7:22:1a:55:4c: e0:aa:d6:e0:6c:b5:b3:3d:b8:d5:f4:d8:a8:01:74: cf:65:7e:9d:95:54:06:09:60:ef:c3:5b:72:1e:a3: 7c:87:28:db:1b:86:2b:86:b8:2a:da:f1:84:6b:47: cb:be:bf:a4:7d:76:c9:31:83:3e:81:36:e2:a2:81: 3c:bf:d9:c4:ee:2b:a3:2a:33:fc:c9:6d:b5:27:c6: a0:02:45:d0:1d:0d:c9:8a:a6:26:01:6c:9d:52:b6: a7:57:b7:97:2a:38:ed:ea:97:04:18:35:d3:c2:91: 48:8c:4f:52:25:4a:6b:18:12:96:2f:19:8d:7e:ab: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:AE:C0:27:47:64:1C:4A:97:AF:6E:1C:53:33:6D:F1:5F:0B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfb9bed6-2a4c-3752-b391-e463a5089a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:dd:21:d2:c7:2e:96:73:a6:a3:93:91:e1:5c:78:9d:41:7e: 29:cb:c9:79:38:ef:38:4d:1a:ee:54:18:93:93:4d:96:cc:f6: 2e:26:1d:71:0d:ac:8b:36:4d:df:d2:d6:07:8d:03:62:d7:9c: 2b:30:e1:4e:db:0b:60:bd:80:0d:2b:0c:4c:ab:e2:66:39:09: c2:77:1c:9f:cc:6e:1a:f3:fd:3e:8c:98:3e:ee:65:fb:fd:0c: 46:8f:2f:48:c2:e3:7c:11:3f:89:b3:3b:35:34:8b:4e:c4:da: ed:3b:95:60:87:e1:3a:79:5f:b8:c4:25:0f:3d:a2:48:a2:54: d0:a9:78:29:9e:26:34:84:5b:32:61:02:1b:9f:50:20:56:a1: 92:da:e4:c5:ec:1c:ad:97:97:23:eb:af:84:56:e5:e3:34:3c: ec:95:14:fa:2b:0f:da:eb:1f:14:e9:3f:cb:23:79:26:02:a0: 3e:1e:b3:b1:d6:d6:bc:8d:0d:b5:2e:b8:24:54:07:3d:b8:51: a3:c9:b4:13:c7:09:87:de:74:c4:79:fe:39:86:19:c2:bb:d5: 67:0c:03:52:07:f7:84:4d:4f:b7:81:8f:ba:6f:ab:2e:16:a2: 1f:32:bf:15:5d:06:e8:52:54:61:42:57:14:62:cf:e4:36:14: 1e:98:4a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkpl2kGz2/TWuWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzllZDZlODUtNWIwMi00NTA4LWIxMmUtODNlYzI2MmExODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EWWBoF0tbk0pDRgG5LNZbLB8pEBYW1yn9J9 2qcR2p6ZzMmLwTMR30+zTWcPf9m1jYssxV+y/2a6SokSI7j8A7IMtuXqn+Dl4FpV YMVdIb0axApgwB18bmD/PcuvXji6QZFDIfHhGtBOARgVbCQEGG/inZlnV+2LoYHk HqL9/e2rxyIaVUzgqtbgbLWzPbjV9NioAXTPZX6dlVQGCWDvw1tyHqN8hyjbG4Yr hrgq2vGEa0fLvr+kfXbJMYM+gTbiooE8v9nE7iujKjP8yW21J8agAkXQHQ3JiqYm AWydUranV7eXKjjt6pcEGDXTwpFIjE9SJUprGBKWLxmNfquBaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+CrsAnR2QcSpevbhxTM23xXwvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZiOWJlZDYtMmE0Yy0z NzUyLWIzOTEtZTQ2M2E1MDg5YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrdIdLHLpZzpqOTkeFceJ1BfinLyXk47zhNGu5UGJOTTZbM9i4mHXEN rIs2Td/S1geNA2LXnCsw4U7bC2C9gA0rDEyr4mY5CcJ3HJ/Mbhrz/T6MmD7uZfv9 DEaPL0jC43wRP4mzOzU0i07E2u07lWCH4Tp5X7jEJQ89okiiVNCpeCmeJjSEWzJh AhufUCBWoZLa5MXsHK2XlyPrr4RW5eM0POyVFPorD9rrHxTpP8sjeSYCoD4es7HW 1ryNDbUuuCRUBz24UaPJtBPHCYfedMR5/jmGGcK71WcMA1IH94RNT7eBj7pvqy4W oh8yvxVdBuhSVGFCVxRiz+Q2FB6YSjI= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:17 2026 by rpki-client