$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa File: cf6e7b37-0772-32d7-9247-62099beb3cd5.roa (raw, json) Hash identifier: 6GekN2IjbKTQHXD8Df25Dbet+568FuMG90h7xyqQq0s= Subject key identifier: F1:65:59:7C:43:7D:EB:E6:E8:4D:8D:09:D9:17:06:6C:EF:EE:E5:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA370FED4E9FF49B21A2C8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.88.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:37:0f:ed:4e:9f:f4:9b:21:a2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=055f1a98-b408-4fa5-b919-8d5325bb2eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:d4:10:74:0e:e7:1f:bd:d6:31:94:60:ed: 59:e6:be:09:93:15:c8:01:35:a1:b4:45:b8:a4:7d: 68:df:1d:2a:df:b5:d9:12:48:d7:11:d8:7a:66:b7: 0e:94:b0:42:1b:ab:4a:4b:5c:6d:0d:18:c6:72:b7: 44:c7:07:c2:28:bb:b8:f6:55:98:f9:88:be:df:54: f8:4c:15:21:c9:68:d7:2c:bc:3f:9e:a2:a8:68:bd: 1a:65:e1:8d:0f:43:ee:5a:88:92:3e:97:9c:7f:0c: fb:be:77:5e:dc:3b:8f:9a:f3:10:5a:70:9f:88:70: 96:6c:6e:21:1b:5c:48:81:f4:76:7c:7f:70:af:58: 37:ea:80:0d:7e:b1:31:7f:96:91:dc:f1:b6:ab:02: 93:70:00:7f:c0:bb:62:46:51:c7:6d:4c:6f:24:f3: df:e9:3e:6d:8d:a2:90:47:18:d4:b8:83:fe:99:48: 0e:7b:c8:79:f3:18:2d:63:a1:79:81:99:d2:c9:19: ee:22:d3:52:5a:cc:9e:77:03:14:59:af:0c:e1:49: 2c:5a:d6:e2:66:3c:ec:a1:59:f5:1a:ff:44:90:70: c0:59:ee:6d:ad:27:31:19:e1:19:74:82:8c:c5:68: e1:c4:13:c4:6a:6a:20:f2:9a:50:ca:bb:0f:fb:32: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:59:7C:43:7D:EB:E6:E8:4D:8D:09:D9:17:06:6C:EF:EE:E5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:12:b8:c3:19:2a:46:09:e6:27:ec:21:67:73:95:bc:65:fa: 0d:d3:a5:02:47:a0:a0:a3:5e:dd:50:3f:3b:b4:cc:67:7a:31: ed:7f:ef:64:85:f3:fc:79:5a:bb:e1:36:f8:5e:17:ab:37:17: 75:c8:c0:bc:17:89:ce:16:d6:46:f5:5d:6b:64:6c:60:85:10: 26:9f:06:92:db:6e:c6:af:7c:7b:4a:73:1d:c7:ca:f1:5e:53: 27:49:83:ef:f6:5f:dd:28:cc:30:62:06:14:27:27:e7:20:e9: d7:c5:4d:61:fd:b6:5a:34:8e:3c:e8:cb:aa:68:9d:d8:a1:7b: 25:75:e9:d7:6a:c6:84:c2:3c:6e:4d:0a:22:20:90:47:b2:83: 21:6e:57:9f:96:61:83:48:d3:29:6b:b3:02:85:04:d7:10:8e: 50:ce:bd:c5:6f:ec:0b:6a:d4:dd:1f:79:af:18:45:bb:df:7b: 82:4e:5a:3f:0b:e3:d8:16:47:0a:cd:2e:8a:51:91:01:f9:de: ce:cb:70:94:18:e9:39:46:0b:72:d0:90:75:91:f9:72:6a:90: f0:ab:27:26:43:5c:73:4f:2b:9b:9d:30:13:eb:53:e7:ef:eb: 8f:18:b5:34:53:94:9b:35:41:c4:c6:96:bd:cc:9a:73:6d:23: c0:a9:6c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjcP7U6f9JshosgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDU1ZjFhOTgtYjQwOC00ZmE1LWI5MTktOGQ1MzI1YmIyZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+7UEHQO5x+91jGUYO1Z5r4JkxXIATWhtEW4 pH1o3x0q37XZEkjXEdh6ZrcOlLBCG6tKS1xtDRjGcrdExwfCKLu49lWY+Yi+31T4 TBUhyWjXLLw/nqKoaL0aZeGND0PuWoiSPpecfwz7vnde3DuPmvMQWnCfiHCWbG4h G1xIgfR2fH9wr1g36oANfrExf5aR3PG2qwKTcAB/wLtiRlHHbUxvJPPf6T5tjaKQ RxjUuIP+mUgOe8h58xgtY6F5gZnSyRnuItNSWsyedwMUWa8M4UksWtbiZjzsoVn1 Gv9EkHDAWe5trScxGeEZdIKMxWjhxBPEamog8ppQyrsP+zKcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFlWXxDfevm6E2NCdkXBmzv7uWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y2ZTdiMzctMDc3Mi0z MmQ3LTkyNDctNjIwOTliZWIzY2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIliwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8SuMMZKkYJ5ifsIWdzlbxl+g3TpQJHoKCjXt1QPzu0zGd6Me1/72SF 8/x5WrvhNvheF6s3F3XIwLwXic4W1kb1XWtkbGCFECafBpLbbsavfHtKcx3HyvFe UydJg+/2X90ozDBiBhQnJ+cg6dfFTWH9tlo0jjzoy6pondiheyV16ddqxoTCPG5N CiIgkEeygyFuV5+WYYNI0ylrswKFBNcQjlDOvcVv7Atq1N0fea8YRbvfe4JOWj8L 49gWRwrNLopRkQH53s7LcJQY6TlGC3LQkHWR+XJqkPCrJyZDXHNPK5udMBPrU+fv 648YtTRTlJs1QcTGlr3MmnNtI8CpbHY= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:51 2026 by rpki-client