$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa File: c5aa77b2-9462-3e06-b308-60218f049024.roa (raw, json) Hash identifier: 3Mux+FlpSE0JpOPjLqteiI2SlY4+OauZxu1odw4Nl7w= Subject key identifier: 7C:BC:A6:1C:9E:27:D5:0B:F3:53:1F:0B:0F:95:87:72:B3:6B:2F:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0F1AB485366ED221D3700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.118.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f1:ab:48:53:66:ed:22:1d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=70a19119-ffbb-4589-9263-e9f18841583c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:e5:99:8b:b1:b8:66:89:59:a4:0e:10:d4: 2f:22:01:5f:ba:8f:84:b1:0d:32:6c:dc:94:d5:6c: 7f:f9:2e:50:78:55:49:a4:1c:74:36:5c:8d:7f:5a: d5:36:1f:08:ff:28:ce:43:b3:43:b9:be:f5:c4:ed: b5:cf:a3:ea:29:d5:21:18:16:5a:5a:65:90:de:ef: a3:cf:7a:02:70:c3:01:af:fb:73:f0:a6:d5:ac:68: 8c:41:80:b6:5d:81:4c:22:58:f0:49:de:0d:81:9f: e3:b6:b2:8d:bd:b0:19:b7:4b:53:c7:18:ba:00:dd: 23:03:ef:7b:78:aa:78:48:05:50:cc:55:17:8f:21: d0:db:a6:cd:04:95:e5:f1:63:9d:e8:2f:c0:de:5e: 83:2c:6f:68:e1:4e:97:5a:83:63:cc:39:f7:ac:b5: 56:f8:bd:55:01:9a:08:3e:89:53:cc:a3:3e:22:25: 4b:1d:3e:8b:37:13:e4:a9:be:95:8e:74:0d:c3:2d: f3:6a:bb:52:90:2d:d2:50:d2:03:1e:93:62:46:32: 8f:9f:27:46:29:b9:7d:95:eb:20:85:ff:f2:e4:6e: ad:4c:c8:f5:f0:fa:e5:b7:c0:5b:ed:b9:c0:07:d3: 6a:62:de:22:d6:2f:54:1d:1f:4a:1a:1b:05:3e:4a: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BC:A6:1C:9E:27:D5:0B:F3:53:1F:0B:0F:95:87:72:B3:6B:2F:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ff:b5:c5:43:8f:d6:09:35:a3:c3:54:01:16:0c:5d:8f:f1: c2:66:37:92:ac:4f:e5:ed:06:4e:aa:cb:2e:14:77:ae:6e:02: 37:f7:18:e3:c0:1f:25:08:cf:89:0d:2f:db:cb:ea:dd:60:d8: fc:6d:9e:27:c1:a5:11:46:e8:39:5c:b0:48:50:92:a5:2f:2e: 8d:76:6f:82:55:49:c4:c6:25:7f:58:49:87:ff:bb:b6:fa:5f: 73:c0:e7:fc:35:f0:df:03:ec:3c:f2:2e:ae:26:7c:e7:8d:b1: 5c:6b:73:70:37:b2:07:75:19:0d:b2:dc:01:53:50:f9:8e:d9: 17:5d:a6:5e:00:4c:75:d8:31:71:f2:24:56:87:31:5f:2f:f3: 86:14:c4:9f:90:63:b9:5a:f7:9b:0e:42:8a:9a:fe:f9:c5:bd: ba:59:e9:88:67:5d:7e:0b:70:a6:7d:3c:89:93:22:4e:f9:7b: 29:80:f4:44:5f:e7:23:9c:7f:6f:36:5c:c0:ef:2d:29:d9:8b: 82:3e:1c:6e:99:e3:d4:05:49:fa:b0:15:fd:ee:c2:11:53:ec: 92:7f:5c:9a:22:ad:ad:48:f0:7a:ef:47:bf:29:01:83:91:49: 6f:c7:10:67:f4:d2:f9:f7:7b:3f:a7:63:92:dd:1d:95:73:66: 9f:64:9a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PGrSFNm7SIdNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzBhMTkxMTktZmZiYi00NTg5LTkyNjMtZTlmMTg4NDE1ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiALlmYuxuGaJWaQOENQvIgFfuo+EsQ0ybNyU 1Wx/+S5QeFVJpBx0NlyNf1rVNh8I/yjOQ7NDub71xO21z6PqKdUhGBZaWmWQ3u+j z3oCcMMBr/tz8KbVrGiMQYC2XYFMIljwSd4NgZ/jtrKNvbAZt0tTxxi6AN0jA+97 eKp4SAVQzFUXjyHQ26bNBJXl8WOd6C/A3l6DLG9o4U6XWoNjzDn3rLVW+L1VAZoI PolTzKM+IiVLHT6LNxPkqb6VjnQNwy3zartSkC3SUNIDHpNiRjKPnydGKbl9lesg hf/y5G6tTMj18Prlt8Bb7bnAB9NqYt4i1i9UHR9KGhsFPkqp/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy8phyeJ9UL81MfCw+Vh3Kzay8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzVhYTc3YjItOTQ2Mi0z ZTA2LWIzMDgtNjAyMThmMDQ5MDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKD/tcVDj9YJNaPDVAEWDF2P8cJmN5KsT+XtBk6qyy4Ud65uAjf3GOPA HyUIz4kNL9vL6t1g2PxtnifBpRFG6DlcsEhQkqUvLo12b4JVScTGJX9YSYf/u7b6 X3PA5/w18N8D7DzyLq4mfOeNsVxrc3A3sgd1GQ2y3AFTUPmO2Rddpl4ATHXYMXHy JFaHMV8v84YUxJ+QY7la95sOQoqa/vnFvbpZ6YhnXX4LcKZ9PImTIk75eymA9ERf 5yOcf282XMDvLSnZi4I+HG6Z49QFSfqwFf3uwhFT7JJ/XJoira1I8HrvR78pAYOR SW/HEGf00vn3ez+nY5LdHZVzZp9kmq8= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:46 2026 by rpki-client