$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf49cc68-2e09-3324-a031-269610ade03c.roa File: cf49cc68-2e09-3324-a031-269610ade03c.roa (raw, json) Hash identifier: VanV2V7KJWew138+8Sa4fLX7so9IkuXI04b8Yynfnm8= Subject key identifier: 97:E1:12:A7:0A:58:CC:25:46:65:A6:38:B0:C9:69:49:99:12:72:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA554736E47549158A5980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf49cc68-2e09-3324-a031-269610ade03c.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.151.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:55:47:36:e4:75:49:15:8a:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=61225ed1-afba-4f63-a3a5-70a160335c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:3f:f2:14:a2:37:ed:bb:e3:f1:9b:26:0e: d5:85:d2:5f:69:1d:b1:66:57:05:50:5a:23:eb:bb: 4b:27:2f:97:e1:8f:9c:de:45:48:b6:95:25:28:72: 0e:fd:8d:b0:6c:82:2f:97:ad:f1:a8:af:7e:05:ca: 5c:55:62:93:d2:03:f7:76:11:6b:28:45:ab:34:c6: 1c:b9:20:fa:b3:29:a7:72:92:92:10:ef:53:0d:c3: e7:e0:18:12:da:93:50:e8:58:9d:20:28:26:bf:36: 86:08:15:51:44:b2:15:d4:c4:89:0f:1d:8c:cc:c1: 48:e8:5d:6c:ef:b2:75:34:82:c6:e5:5b:52:52:a0: f2:69:46:d1:eb:06:b2:4b:38:25:7f:27:52:db:ae: 99:cc:26:84:84:61:5b:f4:12:16:49:e3:7d:37:21: ae:90:e7:0b:a0:33:77:d3:c9:dc:56:2c:0b:e0:dd: 2b:85:68:28:0b:b8:1b:42:69:5a:77:c7:02:93:ec: 7c:34:60:7e:c5:06:0e:f5:39:65:e3:d5:b4:bb:b3: 3f:fa:b2:ff:91:e7:59:18:a9:0f:48:a5:e4:c8:a9: d1:3c:94:f0:0a:c8:aa:79:97:e3:33:0d:b7:ab:e4: c5:68:62:29:51:02:38:52:f7:22:cf:bc:27:c5:db: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E1:12:A7:0A:58:CC:25:46:65:A6:38:B0:C9:69:49:99:12:72:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf49cc68-2e09-3324-a031-269610ade03c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:20:f4:d5:1b:b3:c3:cb:45:73:1a:40:52:aa:c8:7c:8e:46: 1a:f3:c3:0f:88:af:cc:47:ff:91:6f:37:51:a1:5b:58:30:18: 38:24:1c:8d:47:d1:10:dd:95:83:94:9c:b5:db:d2:40:4f:11: 2f:c8:98:a9:42:41:04:72:f9:11:53:90:76:3b:e2:70:9c:cf: 30:8d:71:d4:4f:96:5f:35:cf:0f:3a:81:12:a7:6f:ac:fa:91: 17:0a:f1:d3:23:00:d8:47:bb:b6:fc:bd:0c:8c:d3:56:79:29: 87:c4:36:4c:79:bc:3d:f5:03:8e:d1:40:8a:23:3e:58:53:eb: 10:93:5a:89:77:36:c6:a9:09:e1:fb:dd:9d:41:c8:15:df:f6: 54:2b:f8:23:e2:e7:02:c7:7b:9a:f3:30:d5:ec:e0:eb:8c:1a: 3c:84:72:50:57:6b:ef:11:f6:c0:1c:90:52:42:59:7b:37:96: e7:bb:83:a8:4f:a0:dd:0a:1a:6b:50:4e:56:d3:fa:d0:6f:8a: 0f:af:4e:8a:a0:24:ec:32:94:4f:63:57:3f:0a:43:06:30:5b: db:12:07:d2:b8:68:ce:2b:14:50:88:b4:1b:c0:f5:e5:c6:b7: c5:a5:39:a7:b5:02:f1:f5:6f:73:57:17:07:de:17:c0:b6:ca: f4:bc:e6:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlVHNuR1SRWKWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NjEyMjVlZDEtYWZiYS00ZjYzLWEzYTUtNzBhMTYwMzM1YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSI/8hSiN+274/GbJg7VhdJfaR2xZlcFUFoj 67tLJy+X4Y+c3kVItpUlKHIO/Y2wbIIvl63xqK9+BcpcVWKT0gP3dhFrKEWrNMYc uSD6symncpKSEO9TDcPn4BgS2pNQ6FidICgmvzaGCBVRRLIV1MSJDx2MzMFI6F1s 77J1NILG5VtSUqDyaUbR6waySzglfydS266ZzCaEhGFb9BIWSeN9NyGukOcLoDN3 08ncViwL4N0rhWgoC7gbQmlad8cCk+x8NGB+xQYO9Tll49W0u7M/+rL/kedZGKkP SKXkyKnRPJTwCsiqeZfjMw23q+TFaGIpUQI4Uvciz7wnxdvewwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfhEqcKWMwlRmWmOLDJaUmZEnLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y0OWNjNjgtMmUwOS0z MzI0LWEwMzEtMjY5NjEwYWRlMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMg9NUbs8PLRXMaQFKqyHyORhrzww+Ir8xH/5FvN1GhW1gwGDgkHI1H 0RDdlYOUnLXb0kBPES/ImKlCQQRy+RFTkHY74nCczzCNcdRPll81zw86gRKnb6z6 kRcK8dMjANhHu7b8vQyM01Z5KYfENkx5vD31A47RQIojPlhT6xCTWol3NsapCeH7 3Z1ByBXf9lQr+CPi5wLHe5rzMNXs4OuMGjyEclBXa+8R9sAckFJCWXs3lue7g6hP oN0KGmtQTlbT+tBvig+vToqgJOwylE9jVz8KQwYwW9sSB9K4aM4rFFCItBvA9eXG t8WlOae1AvH1b3NXFwfeF8C2yvS85tc= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:28 2026 by rpki-client