$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa File: d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa (raw, json) Hash identifier: nJC+4WF2SakpZb4W/UnrVW+tC9KQ/1koE/XNWPfA18s= Subject key identifier: 07:D0:53:58:8E:D0:EF:EC:5E:BC:7D:6D:4C:28:EB:86:30:CF:CD:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA664AFC2A7E6A9366EF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.128.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:66:4a:fc:2a:7e:6a:93:66:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=354a04e2-ccfb-4d5a-b1fa-288649f26d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:88:f6:20:3f:dc:a1:a9:ac:af:46:3b:d5:66: 73:02:7f:d2:99:68:cf:44:48:ee:aa:9f:bd:10:55: 81:50:8f:5c:14:df:b2:ce:4e:a9:ce:31:70:a6:bb: cf:1e:c6:a2:3f:be:ee:63:92:78:82:31:9f:ff:4d: 6a:75:e5:c3:bf:ff:f6:f7:ae:38:cb:58:b4:6e:ac: b7:92:20:26:08:1b:27:e4:12:47:1f:65:db:d0:db: 55:9a:f4:6b:1a:a3:d0:cc:29:91:98:ff:51:33:9a: ef:75:2f:a7:0b:91:e3:93:e2:7f:ac:75:a8:63:c9: a2:5c:d8:81:de:76:2e:35:8a:b9:fa:68:09:2b:d8: 4c:98:4f:7f:06:14:dd:53:09:93:c5:17:33:9b:f6: 5f:c9:8a:aa:da:62:fb:fb:28:83:97:1f:04:0c:f1: 3f:55:d5:4e:80:21:e0:a3:4a:44:46:e3:d1:19:dc: 01:e8:1e:23:5c:50:44:9d:85:05:51:a8:68:d5:af: f4:f0:cb:be:84:79:52:e8:bc:95:45:41:dd:fe:bc: b5:f1:22:4e:26:62:13:1d:4b:41:4e:1b:35:fa:db: e5:7f:63:a4:8d:3a:cd:ef:d0:67:ae:a2:49:56:ae: 83:bd:d2:11:c2:44:ce:65:6e:df:f6:3e:40:6d:dc: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D0:53:58:8E:D0:EF:EC:5E:BC:7D:6D:4C:28:EB:86:30:CF:CD:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a2:58:81:89:9b:cb:9f:7a:c6:b3:eb:fa:e2:ab:34:df:8f: 8e:d2:87:35:92:58:f2:e5:e1:43:9e:02:5f:35:b2:6d:46:1c: d1:80:2c:cd:3d:4f:7b:5b:bb:ee:b3:4a:fe:01:6b:f9:fe:0c: bf:95:6c:77:26:6a:c5:29:cf:5e:5a:a2:e1:3b:2c:da:0c:a3: 73:96:a8:8d:6a:4e:ab:1b:d9:3d:73:ba:9b:b7:8c:e3:b2:9b: 06:91:28:42:0e:aa:b7:a3:19:bc:73:ce:d1:3f:c5:90:e8:fb: ef:e2:5a:ad:75:3f:5f:28:12:76:d5:6f:dc:9c:59:f1:6a:b4: c2:b4:6e:80:56:83:44:c1:73:69:66:47:25:05:33:40:36:19: c1:bd:b2:59:3e:71:77:0c:0a:91:b0:13:1a:88:73:d2:d7:69: fd:67:86:94:17:b6:f9:23:5e:cc:64:71:b7:db:e8:6b:1f:a4: 20:0c:d5:9f:3e:80:a4:e0:28:ee:14:e4:2a:ed:6a:95:ad:6d: 36:7e:15:b2:cb:98:6c:f8:83:5e:f5:f0:73:48:ab:14:14:79: 52:b9:41:06:7f:23:e9:c4:ec:38:dd:86:e0:3b:3a:16:29:17: 0e:da:8f:51:bc:35:02:04:9b:11:5c:8f:a9:d5:fe:a4:39:77: c3:01:a7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmZK/Cp+apNm74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzU0YTA0ZTItY2NmYi00ZDVhLWIxZmEtMjg4NjQ5ZjI2ZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoj2ID/coamsr0Y71WZzAn/SmWjPREjuqp+9 EFWBUI9cFN+yzk6pzjFwprvPHsaiP77uY5J4gjGf/01qdeXDv//29644y1i0bqy3 kiAmCBsn5BJHH2Xb0NtVmvRrGqPQzCmRmP9RM5rvdS+nC5Hjk+J/rHWoY8miXNiB 3nYuNYq5+mgJK9hMmE9/BhTdUwmTxRczm/ZfyYqq2mL7+yiDlx8EDPE/VdVOgCHg o0pERuPRGdwB6B4jXFBEnYUFUaho1a/08Mu+hHlS6LyVRUHd/ry18SJOJmITHUtB Ths1+tvlf2OkjTrN79BnrqJJVq6DvdIRwkTOZW7f9j5AbdzJZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfQU1iO0O/sXrx9bUwo64Ywz81nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDVkYWMxNzMtOTE1OS0z YTI1LTgxMzctMGZkOGNmMWY2YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOiWIGJm8ufesaz6/riqzTfj47ShzWSWPLl4UOeAl81sm1GHNGALM09 T3tbu+6zSv4Ba/n+DL+VbHcmasUpz15aouE7LNoMo3OWqI1qTqsb2T1zupu3jOOy mwaRKEIOqrejGbxzztE/xZDo++/iWq11P18oEnbVb9ycWfFqtMK0boBWg0TBc2lm RyUFM0A2GcG9slk+cXcMCpGwExqIc9LXaf1nhpQXtvkjXsxkcbfb6GsfpCAM1Z8+ gKTgKO4U5CrtapWtbTZ+FbLLmGz4g1718HNIqxQUeVK5QQZ/I+nE7DjdhuA7OhYp Fw7aj1G8NQIEmxFcj6nV/qQ5d8MBp8k= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:01 2026 by rpki-client