$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa File: d32c3afa-e997-3493-8d64-a819e0e5c167.roa (raw, json) Hash identifier: +ERE6NWKqwu4sD3Fw+AFZiGheJIZEyN2JtSHBhvYm9I= Subject key identifier: E3:17:F9:FE:1A:C1:1F:B3:D4:A5:B5:C9:D4:64:19:0A:E8:68:6B:DC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA5556E8CE5B91DEE520C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:55:56:e8:ce:5b:91:de:e5:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=71724aba-8f83-43cd-8a0d-6d34685223fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:f6:d2:4b:04:8d:d8:5c:3a:95:a5:d7:89: d4:7e:b5:92:e9:f7:96:6a:cf:d4:ff:36:30:1c:f0: 91:25:4b:75:29:ba:9f:7e:78:49:27:76:fb:42:53: 6a:7f:63:ec:5d:1c:aa:b8:7c:83:49:94:a5:e0:70: a6:c9:52:9d:15:4f:cd:d0:05:ad:6e:4e:df:b0:2e: af:b2:d4:1a:b6:26:1e:3a:2b:5b:ae:db:84:3d:a9: 37:b6:cf:8e:0c:fc:e8:42:98:96:9d:4b:06:89:ce: d0:d0:46:7e:b8:9e:d9:0d:a8:0b:50:2b:e2:2e:1c: ae:ca:da:c2:ff:e3:d3:6e:de:44:36:31:bb:55:15: 06:f0:9d:0f:f2:d0:58:fa:26:ba:e8:20:2d:bf:40: f0:b3:46:bc:ad:67:93:e1:79:b7:c8:49:80:69:a8: fb:db:a0:e3:bd:86:6a:82:a4:51:22:12:77:ed:4a: ed:39:40:6a:6a:28:d3:4b:5f:a0:4d:c3:d3:b0:d7: 6a:56:ad:5d:32:9b:58:23:17:51:d5:b3:92:6c:3d: 94:78:29:b5:86:5f:96:51:52:a6:0e:96:1b:c6:02: 21:19:8c:80:30:6d:da:c1:5f:dd:af:76:79:4d:7e: 80:49:7f:53:d6:77:b1:b8:c6:d8:8a:d0:82:b7:30: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:F9:FE:1A:C1:1F:B3:D4:A5:B5:C9:D4:64:19:0A:E8:68:6B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:99:d1:af:84:2f:9b:f5:ef:34:33:5a:9a:c2:3c:ee:76:4f: 63:d1:f2:01:9c:a8:e4:4a:3e:69:b8:c5:90:91:b8:f3:34:7c: f7:96:24:48:42:37:97:b6:d7:2c:d3:50:5a:61:82:8a:79:83: 65:51:c5:03:ce:92:db:04:82:98:ce:35:18:da:be:0a:de:e0: 0d:2e:54:60:53:4e:eb:62:c5:61:a6:7c:72:fd:3d:9c:93:28: 7e:6e:da:8c:70:89:36:a5:68:32:a0:f5:ab:eb:4d:66:ba:5d: 72:74:c9:3b:1f:83:78:2e:ba:03:66:9f:b8:ad:67:08:4d:1a: 95:c3:8c:38:52:84:63:93:71:56:ab:28:71:a9:71:c5:c0:27: b5:a1:e7:d7:ef:27:9c:f2:02:26:55:bf:b0:2d:52:55:8f:35: 44:b6:40:41:15:1c:cc:9b:97:db:25:72:3c:6f:ec:5f:f4:12: f3:b7:59:40:0a:9c:b8:9d:eb:26:f4:8b:7e:64:00:85:37:40: 5d:ac:c2:d6:75:72:07:fa:f7:3d:ac:16:de:c0:57:1e:c8:be: 21:b1:d6:71:36:a0:3b:50:f7:aa:72:31:80:81:00:c4:35:ad: ae:55:60:25:18:4f:b4:91:33:dd:7b:72:53:b4:ee:c9:9c:e0: 41:de:fb:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlVW6M5bkd7lIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NzE3MjRhYmEtOGY4My00M2NkLThhMGQtNmQzNDY4NTIyM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtn20ksEjdhcOpWl14nUfrWS6feWas/U/zYw HPCRJUt1KbqffnhJJ3b7QlNqf2PsXRyquHyDSZSl4HCmyVKdFU/N0AWtbk7fsC6v stQatiYeOitbrtuEPak3ts+ODPzoQpiWnUsGic7Q0EZ+uJ7ZDagLUCviLhyuytrC /+PTbt5ENjG7VRUG8J0P8tBY+ia66CAtv0Dws0a8rWeT4Xm3yEmAaaj726DjvYZq gqRRIhJ37UrtOUBqaijTS1+gTcPTsNdqVq1dMptYIxdR1bOSbD2UeCm1hl+WUVKm DpYbxgIhGYyAMG3awV/dr3Z5TX6ASX9T1nexuMbYitCCtzAadwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMX+f4awR+z1KW1ydRkGQroaGvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDMyYzNhZmEtZTk5Ny0z NDkzLThkNjQtYTgxOWUwZTVjMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGZ0a+EL5v17zQzWprCPO52T2PR8gGcqORKPmm4xZCRuPM0fPeWJEhC N5e21yzTUFphgop5g2VRxQPOktsEgpjONRjavgre4A0uVGBTTutixWGmfHL9PZyT KH5u2oxwiTalaDKg9avrTWa6XXJ0yTsfg3guugNmn7itZwhNGpXDjDhShGOTcVar KHGpccXAJ7Wh59fvJ5zyAiZVv7AtUlWPNUS2QEEVHMybl9slcjxv7F/0EvO3WUAK nLid6yb0i35kAIU3QF2swtZ1cgf69z2sFt7AVx7IviGx1nE2oDtQ96pyMYCBAMQ1 ra5VYCUYT7SRM917clO07smc4EHe+4Q= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:09 2026 by rpki-client