$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa File: cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa (raw, json) Hash identifier: f9Pyc+mFOi66e2DcbnY5IFpGrqsCDL/zDhXX7dDg43g= Subject key identifier: 70:BB:03:4B:B9:6E:71:61:5C:EF:CC:FA:12:76:90:B9:A2:6F:E0:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E039C95EC5BDFCC3A9E200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.121.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:39:c9:5e:c5:bd:fc:c3:a9:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=919b2dee-ad31-4730-91e5-f51fe0421cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:0c:61:df:39:86:44:73:1b:81:10:f9:d2: 65:d2:d2:5d:7f:75:94:7c:d4:4f:c8:69:fb:85:78: 1b:4e:11:26:77:a6:78:06:ca:30:3c:bc:0e:0d:c7: 51:43:f9:8e:68:96:05:81:a2:32:f0:2b:09:48:fe: d6:0c:48:fe:1f:bc:88:6e:0c:66:61:95:ee:94:c3: f6:bb:a0:ad:60:4a:72:91:b4:92:92:dd:ac:13:a0: 43:ad:5f:ca:95:d3:12:60:cf:14:0e:cb:9d:ca:1d: 06:c9:a5:5f:5a:9d:c5:95:34:2e:86:ce:e2:8f:4c: 17:52:51:9c:65:92:40:76:40:c5:9b:2a:d6:21:e9: d9:f8:3d:44:7a:0c:91:89:ca:d0:49:b9:bd:73:0c: a5:cc:a6:f6:bb:97:08:5d:9a:67:04:7b:b9:bc:e0: fe:66:f7:db:81:3b:01:56:77:63:d5:90:e9:12:91: 4a:31:25:c2:e0:b4:95:5a:6a:72:a0:3f:a4:ec:66: d7:9f:49:52:ec:93:24:6a:ba:6e:de:27:fc:e1:f8: eb:e3:6e:13:74:ad:85:18:ac:dd:06:58:f6:cf:34: e8:a1:77:48:65:c7:77:0f:d0:22:00:c5:c5:e2:c8: 10:2b:21:bb:68:64:3c:8b:bf:c3:49:9b:f3:99:e8: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BB:03:4B:B9:6E:71:61:5C:EF:CC:FA:12:76:90:B9:A2:6F:E0:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f4:c5:d3:cf:1d:b8:f0:99:d0:9f:18:61:f4:79:c4:be:65: ac:86:2c:d9:a3:65:d2:b2:32:48:6f:cd:bf:7e:83:e4:2f:ee: 33:83:7b:57:5e:07:07:02:1a:49:cd:4a:57:6b:80:36:2b:da: 4b:e5:fa:95:18:9b:0e:d1:bd:77:5e:a2:fa:68:35:af:47:d6: 53:eb:75:58:92:72:75:53:14:04:b9:85:0a:40:67:da:54:ab: fd:3c:ef:bc:ea:6a:7c:76:d8:f9:30:2b:38:5f:7f:a8:aa:91: 9e:1e:9b:f6:cc:88:d1:2c:72:62:c1:a9:e3:8d:3a:ac:d5:7f: a5:25:b1:5c:5a:2e:56:8e:e8:4f:25:8f:7a:70:70:c3:fb:18: 9e:99:9a:28:19:9a:5b:73:78:7e:76:d0:1c:40:62:17:dd:f3: f0:16:54:97:0b:69:7a:36:79:a1:55:97:e6:17:0a:fa:e5:97: 91:27:f6:b1:34:55:5c:0e:d7:54:7a:76:ce:cd:d3:2e:9b:78: a5:c6:a2:43:7b:3c:44:a1:7d:10:2c:ed:9a:bb:69:36:0e:6e: 66:89:c2:a0:98:38:94:50:ef:71:77:6b:3c:e8:de:d5:d2:5c: 3b:f0:04:fa:3a:1a:f1:e6:79:a1:7c:33:51:93:a3:be:44:b4: 06:37:b6:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DnJXsW9/MOp4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTE5YjJkZWUtYWQzMS00NzMwLTkxZTUtZjUxZmUwNDIxY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVUMYd85hkRzG4EQ+dJl0tJdf3WUfNRPyGn7 hXgbThEmd6Z4BsowPLwODcdRQ/mOaJYFgaIy8CsJSP7WDEj+H7yIbgxmYZXulMP2 u6CtYEpykbSSkt2sE6BDrV/KldMSYM8UDsudyh0GyaVfWp3FlTQuhs7ij0wXUlGc ZZJAdkDFmyrWIenZ+D1EegyRicrQSbm9cwylzKb2u5cIXZpnBHu5vOD+ZvfbgTsB Vndj1ZDpEpFKMSXC4LSVWmpyoD+k7GbXn0lS7JMkarpu3if84fjr424TdK2FGKzd Blj2zzTooXdIZcd3D9AiAMXF4sgQKyG7aGQ8i7/DSZvzmeg+DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHC7A0u5bnFhXO/M+hJ2kLmib+DWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y4MmU5YzMtNTFiNS0z ZDNkLTg0ZDEtYzNlNDdjOTYwYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr0xdPPHbjwmdCfGGH0ecS+ZayGLNmjZdKyMkhvzb9+g+Qv7jODe1de BwcCGknNSldrgDYr2kvl+pUYmw7RvXdeovpoNa9H1lPrdViScnVTFAS5hQpAZ9pU q/0877zqanx22PkwKzhff6iqkZ4em/bMiNEscmLBqeONOqzVf6UlsVxaLlaO6E8l j3pwcMP7GJ6ZmigZmltzeH520BxAYhfd8/AWVJcLaXo2eaFVl+YXCvrll5En9rE0 VVwO11R6ds7N0y6beKXGokN7PEShfRAs7Zq7aTYObmaJwqCYOJRQ73F3azzo3tXS XDvwBPo6GvHmeaF8M1GTo75EtAY3tqA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:44 2026 by rpki-client