$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa File: ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa (raw, json) Hash identifier: 1IZwroDgoa0GZ1N7Lvmz+Up7UvoqeAcQchw+S30kA1E= Subject key identifier: 3D:46:17:EC:F6:0D:0D:B3:E4:CE:3F:93:AC:2C:E0:62:0B:C9:9A:22 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA93EBA3D80E415C3F6D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.96.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:93:eb:a3:d8:0e:41:5c:3f:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a3025a0c-a9b8-45ce-9ab5-91097d2dd774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:b5:89:20:44:13:3d:48:df:a9:c9:2e:bc: a9:55:12:ba:32:7a:86:c0:c2:45:10:25:c8:34:87: 7d:3b:a3:88:26:b8:c8:4e:aa:1d:3b:a9:a4:44:f7: 7b:0e:1a:54:fe:dd:79:53:4e:2b:e2:0f:db:dc:3a: e9:ac:b2:9a:3e:15:11:1b:be:3b:35:d9:02:53:27: 7c:96:65:ab:ec:39:ef:5a:91:a8:54:c0:e0:d3:18: 74:e9:1e:22:66:03:a0:d7:51:3a:61:12:ff:cd:7d: 91:1e:81:4b:85:e8:ea:46:dd:78:ea:52:ee:72:00: d0:89:ef:f6:51:60:5c:8c:cb:51:21:78:27:87:5b: 4a:b9:9f:3c:c7:a3:d1:73:db:41:fe:05:99:ab:4f: b2:15:29:ef:81:a8:f7:70:93:3f:8b:1c:93:17:2c: 21:a8:0d:8e:b6:56:90:cb:71:ab:66:fa:e7:c0:a5: 35:0f:fb:b8:eb:82:74:f6:c9:b4:ac:40:fc:94:a0: 1b:4f:24:93:9b:a0:80:46:ce:ab:92:4b:33:ab:d4: 33:ff:85:7b:4c:36:48:7a:10:62:df:91:09:ea:17: b2:04:a2:ab:b8:35:49:13:a1:8c:eb:01:2f:89:96: 75:b2:16:78:49:13:27:11:2d:c2:45:94:d3:b9:47: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:46:17:EC:F6:0D:0D:B3:E4:CE:3F:93:AC:2C:E0:62:0B:C9:9A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:26:cf:b5:78:37:14:89:64:d2:c9:89:60:08:55:6f:db:35: a9:36:f9:6e:f0:f1:03:4f:e7:3e:a0:66:83:85:b1:bb:07:99: 65:2e:25:49:14:a7:06:b4:a1:30:ca:35:fd:29:20:a1:4c:a9: 2e:db:fd:ab:9c:0f:d3:12:3d:c1:c2:b9:bf:96:7f:aa:b6:11: 75:23:50:0c:e3:22:87:2b:67:66:08:d9:fc:08:09:69:a1:3d: 54:c1:5a:a4:de:3f:af:30:ef:ba:c1:67:93:6c:a4:70:0c:1a: 88:12:5f:9f:d6:04:3a:7e:c5:e0:c9:35:62:43:51:ab:52:54: 93:43:fd:ea:e0:da:e6:a2:23:af:15:81:8a:93:73:da:00:50: ae:6d:3b:fe:f6:71:07:30:9b:33:db:cc:01:c3:1b:db:08:b2: 02:e8:e9:3f:f1:d0:fc:b3:2a:f2:77:1a:6f:99:b5:bc:64:f8: ef:8c:14:b6:1d:84:c1:67:d9:29:b9:95:b9:b4:00:bd:44:ef: 08:6c:92:0b:08:12:64:77:2c:a0:05:c4:c2:a2:54:3b:ec:0f: 89:d5:5d:93:3b:57:d9:b2:49:d2:64:3e:d4:e2:be:bc:59:80: 29:76:a6:ff:aa:95:2a:69:0d:e7:1b:fd:00:87:1d:ec:83:93: 53:2d:fe:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpPro9gOQVw/bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YTMwMjVhMGMtYTliOC00NWNlLTlhYjUtOTEwOTdkMmRkNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1u1iSBEEz1I36nJLrypVRK6MnqGwMJFECXI NId9O6OIJrjITqodO6mkRPd7DhpU/t15U04r4g/b3DrprLKaPhURG747NdkCUyd8 lmWr7DnvWpGoVMDg0xh06R4iZgOg11E6YRL/zX2RHoFLhejqRt146lLucgDQie/2 UWBcjMtRIXgnh1tKuZ88x6PRc9tB/gWZq0+yFSnvgaj3cJM/ixyTFywhqA2OtlaQ y3GrZvrnwKU1D/u464J09sm0rED8lKAbTySTm6CARs6rkkszq9Qz/4V7TDZIehBi 35EJ6heyBKKruDVJE6GM6wEviZZ1shZ4SRMnES3CRZTTuUd+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1GF+z2DQ2z5M4/k6ws4GILyZoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E1YzY1YmItMDc4YS0z YmM0LTkwYzQtZDdjYWI1YTY3NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFImz7V4NxSJZNLJiWAIVW/bNak2+W7w8QNP5z6gZoOFsbsHmWUuJUkU pwa0oTDKNf0pIKFMqS7b/aucD9MSPcHCub+Wf6q2EXUjUAzjIocrZ2YI2fwICWmh PVTBWqTeP68w77rBZ5NspHAMGogSX5/WBDp+xeDJNWJDUatSVJND/erg2uaiI68V gYqTc9oAUK5tO/72cQcwmzPbzAHDG9sIsgLo6T/x0PyzKvJ3Gm+Ztbxk+O+MFLYd hMFn2Sm5lbm0AL1E7whskgsIEmR3LKAFxMKiVDvsD4nVXZM7V9mySdJkPtTivrxZ gCl2pv+qlSppDecb/QCHHeyDk1Mt/hQ= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:17 2026 by rpki-client