$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa File: cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa (raw, json) Hash identifier: 78Z40yORQ5bZvndEetOkBwg2B6LdZ6pIzV47VXKMm8w= Subject key identifier: 51:A1:D3:5B:8A:EA:33:3D:DD:07:81:5E:29:98:79:4E:CB:4E:48:27 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AABA88D65F9D6CC33D4080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.74.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ba:88:d6:5f:9d:6c:c3:3d:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=067d5c29-90b8-4d70-a10d-45e8e8f3ea85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:02:69:fe:55:1f:fd:44:46:d5:33:de:b6: 8c:16:f9:0c:dd:b6:cc:06:b7:e8:d1:d8:20:ba:be: c6:cf:c5:ef:22:c3:c9:31:a4:45:ed:9c:51:fe:5a: 18:64:64:63:b8:eb:33:17:fe:ea:e9:0f:7c:5a:f5: b7:94:0a:2b:cb:35:a4:ba:54:8a:05:19:f3:86:8b: 08:19:1d:38:e4:6a:b2:4e:ca:65:97:9c:6f:55:c6: 2f:43:f7:6f:ae:c6:7c:d1:2c:4c:19:c9:62:87:50: d4:a4:bc:1d:21:d1:25:1b:05:23:3c:0e:29:ea:82: dc:12:b2:04:18:02:e2:57:72:64:9d:ad:a5:4f:01: e3:de:b1:a2:9e:25:f7:9f:6e:28:d6:30:73:3b:f8: 9a:7a:5d:95:54:d2:9a:d3:b6:2f:fb:6f:fa:12:59: 68:c9:a9:bd:75:90:20:f4:c5:cc:06:f8:80:3e:fd: f3:e5:42:9a:09:0e:77:a0:4e:60:8e:a2:de:f4:42: 41:e5:b6:81:ab:d5:0f:97:2b:46:44:49:8d:58:f0: 3a:2c:37:d4:f2:8d:bd:87:98:51:73:83:ce:34:d8: c4:3b:cb:7e:3e:55:25:9e:a5:f0:d8:f9:30:e8:3d: fd:03:77:7a:32:79:5d:49:0a:cc:79:e0:9f:b4:c6: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A1:D3:5B:8A:EA:33:3D:DD:07:81:5E:29:98:79:4E:CB:4E:48:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b0:87:a0:fb:bf:78:ff:e1:07:7d:96:c1:b5:b1:d0:a7:17: ae:cb:c8:30:89:6f:6e:79:6a:c2:72:c9:bf:71:b1:3a:cc:d6: d6:1b:5b:00:ac:99:5c:e8:2b:80:e6:30:6a:de:2c:da:d6:e2: 3b:8a:75:f2:6e:09:1c:04:d0:ba:0d:86:85:b6:5a:d9:02:5e: a9:5a:07:74:33:60:64:d8:36:0a:7b:a2:ac:5a:34:7f:60:4e: 25:35:5d:72:2f:5d:14:5a:19:21:4a:04:5f:cc:bb:24:a7:f8: 72:fe:01:fa:ae:92:e2:a0:f2:94:3a:76:ef:45:5b:c6:4b:0b: f7:4b:0d:49:32:e0:2b:c1:9c:ce:51:b4:8c:9e:31:ab:64:3b: f8:df:1f:a4:ae:b8:53:4e:70:ab:6c:d6:63:db:64:02:4e:3d: f9:85:7b:7e:cc:e1:fc:2d:f2:b7:18:05:db:1c:04:fa:22:01: df:95:d8:45:b3:2b:30:e7:f1:8c:b2:d0:ea:41:65:87:22:5c: 7b:76:b2:50:0c:7c:28:94:bd:06:33:c5:77:57:85:3e:68:44: 71:ec:f7:68:a6:e2:04:19:eb:8a:da:03:ad:0f:11:e6:1a:08: 3a:4b:a6:a0:de:60:70:1c:5a:94:a0:5b:4e:53:23:db:63:e1: 54:b3:d1:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrqI1l+dbMM9QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDY3ZDVjMjktOTBiOC00ZDcwLWExMGQtNDVlOGU4ZjNlYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss8Caf5VH/1ERtUz3raMFvkM3bbMBrfo0dgg ur7Gz8XvIsPJMaRF7ZxR/loYZGRjuOszF/7q6Q98WvW3lAoryzWkulSKBRnzhosI GR045GqyTspll5xvVcYvQ/dvrsZ80SxMGclih1DUpLwdIdElGwUjPA4p6oLcErIE GALiV3Jkna2lTwHj3rGiniX3n24o1jBzO/iael2VVNKa07Yv+2/6Elloyam9dZAg 9MXMBviAPv3z5UKaCQ53oE5gjqLe9EJB5baBq9UPlytGREmNWPA6LDfU8o29h5hR c4PONNjEO8t+PlUlnqXw2Pkw6D39A3d6MnldSQrMeeCftMZrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGh01uK6jM93QeBXimYeU7LTkgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZlZmY3YzItMTU3MS0z ZGUxLTliYzgtNWIyNDNmYjIzYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOwh6D7v3j/4Qd9lsG1sdCnF67LyDCJb255asJyyb9xsTrM1tYbWwCs mVzoK4DmMGreLNrW4juKdfJuCRwE0LoNhoW2WtkCXqlaB3QzYGTYNgp7oqxaNH9g TiU1XXIvXRRaGSFKBF/MuySn+HL+AfqukuKg8pQ6du9FW8ZLC/dLDUky4CvBnM5R tIyeMatkO/jfH6SuuFNOcKts1mPbZAJOPfmFe37M4fwt8rcYBdscBPoiAd+V2EWz KzDn8Yyy0OpBZYciXHt2slAMfCiUvQYzxXdXhT5oRHHs92im4gQZ64raA60PEeYa CDpLpqDeYHAcWpSgW05TI9tj4VSz0ZI= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:19 2026 by rpki-client