$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7516985-a159-3fae-a251-2e707beebc79.roa File: c7516985-a159-3fae-a251-2e707beebc79.roa (raw, json) Hash identifier: 5+/iKcy+/amt7DSXOnj/MifYu7gSvryFZOJuLyx21rU= Subject key identifier: 1E:D7:03:49:47:A4:D6:C0:0E:BE:CC:A4:63:54:75:0F:92:06:E8:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4A77351D5BAD68D55140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7516985-a159-3fae-a251-2e707beebc79.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.99.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4a:77:35:1d:5b:ad:68:d5:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=555a2f43-23d8-48ac-9df8-813a7a04ed4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:ae:29:b3:8b:fa:35:4b:a1:aa:0a:68:f5: 61:2e:05:d5:40:c4:88:fe:ab:c0:00:49:5b:78:a0: c9:59:7f:1d:50:af:a9:02:4d:a0:8a:73:3a:17:3b: e1:81:4e:23:38:87:c9:62:5c:b8:84:8b:2e:63:a9: 04:18:30:c9:5b:f6:be:00:d7:94:0f:18:b9:15:d1: 08:dc:7e:21:d5:fd:4b:49:d2:9a:c1:62:d0:1c:86: a2:3d:de:00:b1:2f:eb:3d:85:d3:47:c9:02:f9:34: dc:45:ff:23:1a:8e:1e:04:87:ec:ef:e8:c1:67:0e: dc:cc:51:46:16:c4:0b:3e:de:a2:85:e5:e8:a3:36: fd:ae:03:76:de:a1:a3:b6:01:f1:98:77:40:35:be: 1d:bc:86:89:9a:bf:86:67:6e:0c:40:69:ee:0d:49: 57:fa:9d:7f:59:9c:4a:2a:2b:1d:82:57:03:79:80: 34:61:0f:c1:60:0b:38:4b:9f:a7:b0:b0:5f:f6:a2: 77:a1:ea:b1:de:ca:85:36:20:df:14:c0:e6:42:89: da:56:8c:70:d1:3e:71:7b:82:95:1b:2b:60:02:e0: 73:94:f5:12:6b:00:7f:4e:f0:f2:08:66:4b:49:cf: d8:fb:c8:ca:76:a1:46:da:a3:96:77:db:44:85:4f: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D7:03:49:47:A4:D6:C0:0E:BE:CC:A4:63:54:75:0F:92:06:E8:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7516985-a159-3fae-a251-2e707beebc79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6b:8c:6d:6b:e8:9d:51:5b:c9:8f:ff:b7:dd:cf:cc:ea:bd: 83:11:03:37:3b:3d:8f:88:cb:be:93:b2:1e:9b:51:3e:82:83: 79:76:01:60:4e:d5:ee:4a:23:16:7c:31:91:4e:33:c7:a7:f4: c9:44:31:73:58:2d:57:10:e6:3f:0f:d0:07:50:90:01:d9:85: e0:27:e0:a8:eb:7d:8a:ab:a2:07:61:d4:b2:ff:5a:3f:e2:b9: 2b:3e:44:3c:ba:aa:f2:6f:58:e8:17:e3:4c:74:18:84:e9:23: 01:21:1c:cf:5a:96:8b:a5:a5:56:82:6c:d1:2f:e9:08:04:88: de:59:f8:79:72:2c:51:ba:19:37:3c:ba:17:2f:6d:be:3d:a7: 3e:91:69:45:55:ef:a7:50:ef:12:41:64:4e:78:f7:df:21:3a: 15:bc:6f:72:84:8c:2c:46:b5:73:d3:03:44:7b:2e:7b:23:7d: 25:d3:fc:aa:9d:c0:c6:ae:2e:d5:cc:5c:43:af:53:e4:fa:4b: eb:93:25:14:64:c7:aa:10:46:56:ad:ec:19:66:85:19:ca:f2: b8:f7:1b:2a:fd:41:cb:0c:3d:72:64:74:56:a8:19:aa:d8:cc: c4:b2:cd:18:ae:02:d4:0b:9d:12:9e:bd:37:01:29:31:c5:1a: f9:a3:25:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkp3NR1brWjVUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NTU1YTJmNDMtMjNkOC00OGFjLTlkZjgtODEzYTdhMDRlZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPGuKbOL+jVLoaoKaPVhLgXVQMSI/qvAAElb eKDJWX8dUK+pAk2ginM6FzvhgU4jOIfJYly4hIsuY6kEGDDJW/a+ANeUDxi5FdEI 3H4h1f1LSdKawWLQHIaiPd4AsS/rPYXTR8kC+TTcRf8jGo4eBIfs7+jBZw7czFFG FsQLPt6iheXoozb9rgN23qGjtgHxmHdANb4dvIaJmr+GZ24MQGnuDUlX+p1/WZxK KisdglcDeYA0YQ/BYAs4S5+nsLBf9qJ3oeqx3sqFNiDfFMDmQonaVoxw0T5xe4KV GytgAuBzlPUSawB/TvDyCGZLSc/Y+8jKdqFG2qOWd9tEhU8McQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7XA0lHpNbADr7MpGNUdQ+SBui1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzc1MTY5ODUtYTE1OS0z ZmFlLWEyNTEtMmU3MDdiZWViYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJrjG1r6J1RW8mP/7fdz8zqvYMRAzc7PY+Iy76Tsh6bUT6Cg3l2AWBO 1e5KIxZ8MZFOM8en9MlEMXNYLVcQ5j8P0AdQkAHZheAn4KjrfYqrogdh1LL/Wj/i uSs+RDy6qvJvWOgX40x0GITpIwEhHM9aloulpVaCbNEv6QgEiN5Z+HlyLFG6GTc8 uhcvbb49pz6RaUVV76dQ7xJBZE54998hOhW8b3KEjCxGtXPTA0R7LnsjfSXT/Kqd wMauLtXMXEOvU+T6S+uTJRRkx6oQRlat7BlmhRnK8rj3Gyr9QcsMPXJkdFaoGarY zMSyzRiuAtQLnRKevTcBKTHFGvmjJXw= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:24 2026 by rpki-client