$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa File: c809be10-f019-3ce3-8366-95c1c2eec42b.roa (raw, json) Hash identifier: YEhw6IdrUa4LFTeGf4/X7AVggLiRYbYJ+VFwDTvP048= Subject key identifier: C9:25:A4:20:45:F1:F9:12:75:18:28:D2:9D:60:B3:30:1B:E3:0F:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0EE24AC7AE77AB4897780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.121.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ee:24:ac:7a:e7:7a:b4:89:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7b7348ae-5787-42e6-b8e5-8865da863343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:33:f7:11:71:ed:91:8a:6e:1d:c0:4b:40: d6:64:9a:44:db:3a:eb:82:06:9d:ef:31:d3:31:1a: 43:35:82:5e:85:47:85:6f:e2:b2:3d:82:7e:e6:ee: 9e:7c:c1:ef:26:c0:d3:b7:32:4a:ac:14:52:a0:88: f6:78:6c:e1:e4:a0:fc:e2:1a:d1:34:a5:cf:1d:aa: 73:df:20:ef:b3:18:3e:51:88:b5:36:b4:c4:7a:ab: af:e1:9c:71:08:a0:fb:64:68:96:ad:97:be:22:87: e2:50:c8:c2:fe:6b:40:14:db:69:fd:e7:d2:2d:e3: da:e8:d5:98:08:72:86:ed:82:d7:09:6d:2c:5f:a7: 3f:b7:0b:65:bf:f7:54:28:47:0a:21:ec:2b:90:64: 87:24:6c:84:01:92:7e:7a:e3:2a:14:8b:7e:49:f7: d2:9d:82:ef:80:05:82:23:9b:72:7e:d8:4f:53:cc: 90:c3:31:5b:77:5b:12:2b:60:ef:61:ec:e6:82:d2: f1:a2:5b:74:86:95:4c:e1:16:02:a9:00:30:f4:57: 99:31:77:93:b7:fb:cb:d8:aa:06:40:2b:ac:51:0a: c5:65:03:d7:71:9f:00:8b:4f:69:2a:df:d3:30:39: b2:f2:39:ad:45:38:73:8e:4e:ce:f8:18:76:be:5c: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:25:A4:20:45:F1:F9:12:75:18:28:D2:9D:60:B3:30:1B:E3:0F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:fc:31:fd:92:5b:37:8e:e7:e5:a1:01:4d:68:1b:ea:50:5a: c9:40:6e:2d:5e:c2:70:c6:d1:1f:14:a8:83:ea:58:95:3a:3b: 84:fc:2a:32:98:1b:59:fe:81:03:11:c9:c8:ec:d9:e7:3c:65: 31:bc:82:2b:e7:b4:3a:e2:00:b4:5a:7a:ce:a5:ec:1f:24:34: 5c:49:04:e4:56:d6:90:89:f8:cd:29:97:35:87:68:c0:57:b0: a2:71:5e:5c:67:62:46:d1:98:c3:1e:44:30:c9:cf:32:cf:1d: d1:13:d2:34:dc:04:da:93:51:a1:ed:fe:1b:30:07:a2:c6:db: 0d:e8:98:12:f0:e7:23:e6:3e:db:4e:09:62:4f:9f:cf:3b:ea: 14:1e:99:a0:df:8e:9c:21:69:04:af:40:cc:d9:1b:f1:a4:af: 60:cd:88:32:52:52:cd:8e:bc:db:bd:18:6c:76:ed:02:70:05: 08:fc:7a:34:b2:fb:34:ad:d4:fe:09:af:16:5b:67:36:c0:34: b9:97:05:05:ab:cf:db:42:b1:b7:8e:30:92:c4:d2:80:f7:1e: 80:01:7e:be:12:89:99:7b:6e:bd:6e:e2:c4:cd:88:56:ad:5e: b8:96:cb:d7:0e:30:fd:2a:2a:68:d9:01:5e:ad:32:d8:b8:2e: bb:ee:ca:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O4krHrnerSJd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2I3MzQ4YWUtNTc4Ny00MmU2LWI4ZTUtODg2NWRhODYzMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruoz9xFx7ZGKbh3AS0DWZJpE2zrrggad7zHT MRpDNYJehUeFb+KyPYJ+5u6efMHvJsDTtzJKrBRSoIj2eGzh5KD84hrRNKXPHapz 3yDvsxg+UYi1NrTEequv4ZxxCKD7ZGiWrZe+IofiUMjC/mtAFNtp/efSLePa6NWY CHKG7YLXCW0sX6c/twtlv/dUKEcKIewrkGSHJGyEAZJ+euMqFIt+SffSnYLvgAWC I5tyfthPU8yQwzFbd1sSK2DvYezmgtLxolt0hpVM4RYCqQAw9FeZMXeTt/vL2KoG QCusUQrFZQPXcZ8Ai09pKt/TMDmy8jmtRThzjk7O+Bh2vlwAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMklpCBF8fkSdRgo0p1gszAb4w+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzgwOWJlMTAtZjAxOS0z Y2UzLTgzNjYtOTVjMWMyZWVjNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn8Mf2SWzeO5+WhAU1oG+pQWslAbi1ewnDG0R8UqIPqWJU6O4T8KjKY G1n+gQMRycjs2ec8ZTG8givntDriALRaes6l7B8kNFxJBORW1pCJ+M0plzWHaMBX sKJxXlxnYkbRmMMeRDDJzzLPHdET0jTcBNqTUaHt/hswB6LG2w3omBLw5yPmPttO CWJPn8876hQemaDfjpwhaQSvQMzZG/Gkr2DNiDJSUs2OvNu9GGx27QJwBQj8ejSy +zSt1P4JrxZbZzbANLmXBQWrz9tCsbeOMJLE0oD3HoABfr4SiZl7br1u4sTNiFat XriWy9cOMP0qKmjZAV6tMti4LrvuyuE= -----END CERTIFICATE-----Generated at Thu Mar 19 01:50:14 2026 by rpki-client