$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: bgb1LK7LkccRaz2IV0tcSl2sReQ2My1RWJepVAGD5z8= Subject key identifier: AB:81:60:5F:68:2D:15:DC:A4:E1:7C:20:64:A4:86:29:B0:4A:C4:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6F671E4DF8D64AD41080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6f:67:1e:4d:f8:d6:4a:d4:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=8dabf2e1-cb42-4a55-87a1-95dec4f56e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ee:8e:0e:6b:b5:86:e9:a9:81:85:a7:49:fa: 25:a9:fd:20:c4:44:71:9c:f2:2e:70:05:76:c5:f8: 87:bd:9c:c0:05:39:49:97:cc:97:b2:f9:c9:78:3d: ea:1f:28:b2:88:59:7e:80:11:91:6f:96:e9:02:14: 93:b8:de:28:f1:3c:0c:23:86:62:28:b4:4a:76:e9: c2:39:47:4b:47:21:f8:a8:c8:16:0b:35:94:11:65: 19:6e:65:c3:91:6d:a4:1e:3b:aa:a3:e4:e6:f1:4f: c0:d8:2b:bf:f7:ce:8a:72:77:6d:48:a8:a0:7a:13: 3a:a2:4d:d7:db:74:63:2d:4b:1f:86:70:15:f4:52: 42:b6:17:a2:c5:31:f0:9d:6d:61:c7:3d:2e:ab:09: fd:6b:fb:64:41:f2:4b:a2:d8:1f:53:65:52:68:21: 4d:30:9b:a5:da:c2:fe:2a:9c:f2:f6:bf:7c:91:cd: 03:e3:2f:9e:58:61:33:6a:1c:b8:90:5f:18:eb:ce: 95:2d:73:45:d4:79:1c:37:12:ba:ae:32:6e:99:d8: 0b:f2:d2:90:5f:41:65:cf:3e:b1:5e:24:0c:36:14: 77:21:46:b0:a5:79:3f:17:52:27:14:7c:f8:cb:74: 0e:40:83:a7:e2:ee:06:f2:19:06:64:5e:29:3c:5b: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:81:60:5F:68:2D:15:DC:A4:E1:7C:20:64:A4:86:29:B0:4A:C4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9f:1f:77:9d:be:d5:f0:c4:89:b7:f0:a9:35:74:4f:7b:76: f6:28:54:c4:26:5f:79:cc:3a:6d:04:69:65:e1:98:96:32:e5: 15:4c:d6:8e:f5:26:d1:c5:13:eb:70:39:78:f3:7c:df:d5:a9: 46:92:87:e8:36:74:be:b2:95:e0:e6:68:fd:fc:a0:fe:76:5f: fb:6b:d8:ee:d2:4d:78:e0:20:2e:f6:5e:3d:18:a8:d8:9c:1d: 74:45:55:f6:f7:5a:d9:2f:2a:78:26:ea:ba:2b:02:9e:0c:13: 5f:81:52:59:61:b6:59:e2:ef:b5:2a:2f:01:36:4f:7e:22:55: 9c:69:f7:b3:00:c8:a0:0f:90:f9:e9:7c:d1:c0:3e:da:54:7c: 92:1a:d5:5a:a7:b0:c7:b5:c7:79:d6:cd:5c:2c:5c:9e:37:b8: 70:90:26:0f:c8:ba:6c:c6:6e:ff:53:04:60:d6:67:7f:dd:82: e3:0e:e3:11:d9:5b:d3:5a:5b:93:0a:f0:7a:c6:d1:71:d8:21: 47:a3:58:54:16:72:1c:46:e9:05:ae:c0:8e:63:1b:02:02:f9: 8f:6d:e8:e8:b7:5b:e9:31:b0:00:8c:b8:32:fe:01:bd:58:34: 86:b7:92:2f:4e:42:20:07:15:6f:5a:4f:e0:73:30:4d:60:ed: 70:a0:e5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqm9nHk341krUEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OGRhYmYyZTEtY2I0Mi00YTU1LTg3YTEtOTVkZWM0ZjU2ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+6ODmu1humpgYWnSfolqf0gxERxnPIucAV2 xfiHvZzABTlJl8yXsvnJeD3qHyiyiFl+gBGRb5bpAhSTuN4o8TwMI4ZiKLRKdunC OUdLRyH4qMgWCzWUEWUZbmXDkW2kHjuqo+Tm8U/A2Cu/986KcndtSKigehM6ok3X 23RjLUsfhnAV9FJCtheixTHwnW1hxz0uqwn9a/tkQfJLotgfU2VSaCFNMJul2sL+ Kpzy9r98kc0D4y+eWGEzahy4kF8Y686VLXNF1HkcNxK6rjJumdgL8tKQX0Flzz6x XiQMNhR3IUawpXk/F1InFHz4y3QOQIOn4u4G8hkGZF4pPFvbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuBYF9oLRXcpOF8IGSkhimwSsRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSfH3edvtXwxIm38Kk1dE97dvYoVMQmX3nMOm0EaWXhmJYy5RVM1o71 JtHFE+twOXjzfN/VqUaSh+g2dL6yleDmaP38oP52X/tr2O7STXjgIC72Xj0YqNic HXRFVfb3WtkvKngm6rorAp4ME1+BUllhtlni77UqLwE2T34iVZxp97MAyKAPkPnp fNHAPtpUfJIa1VqnsMe1x3nWzVwsXJ43uHCQJg/IumzGbv9TBGDWZ3/dguMO4xHZ W9NaW5MK8HrG0XHYIUejWFQWchxG6QWuwI5jGwIC+Y9t6Oi3W+kxsACMuDL+Ab1Y NIa3ki9OQiAHFW9aT+BzME1g7XCg5aA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:26 2026 by rpki-client