$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5e5df5a-c54e-3a1d-9e15-6a337974cb24.roa File: d5e5df5a-c54e-3a1d-9e15-6a337974cb24.roa (raw, json) Hash identifier: KYCYEr55R7DK20e0vrZ8YjkN2dZo+YTRLbg/J/CLDh4= Subject key identifier: 4A:0F:AE:4E:D7:08:6E:3D:E5:D4:7A:63:7D:76:5E:A2:A5:A5:A6:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D316F798C0EF2B8A2F4C42700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5e5df5a-c54e-3a1d-9e15-6a337974cb24.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 396982 IP address blocks: 34.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:79:8c:0e:f2:b8:a2:f4:c4:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=201e7f8e-55e8-46a8-a42c-155b50a92e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:e6:5b:28:af:9a:0c:8d:1f:5f:ca:9b:c7: 3d:d4:b7:76:5f:6a:4b:50:c5:95:30:69:09:4f:16: 78:d8:7e:2a:90:e7:f8:fe:79:5f:d9:d0:e6:74:ae: 24:b8:47:5d:0c:a9:86:25:ed:7b:8b:fd:89:0e:f5: 23:39:57:c6:55:4b:1a:3d:08:cf:c0:b0:2c:0b:69: 3c:f1:cd:06:37:11:c1:24:68:44:4a:c9:88:25:34: 64:8c:4e:5c:1f:89:8f:b0:53:15:d9:67:43:73:97: aa:2d:45:84:80:4c:86:d4:5a:c1:2e:ae:18:51:0e: 5a:d3:1d:8f:69:f5:a2:25:d3:05:24:cf:a3:aa:f3: d4:a7:87:e7:db:be:90:f7:05:fe:82:f9:47:84:c1: f6:ba:a7:e4:66:87:49:7a:38:8b:e0:34:88:37:3a: 09:ab:df:09:23:a1:83:f9:65:b7:c8:7e:89:2f:fa: 62:48:a0:c9:31:32:11:98:9f:b4:ab:c5:01:82:f0: 5e:33:99:eb:00:f1:82:ea:50:7d:59:87:4b:af:eb: 09:4c:08:ed:42:1a:1d:d1:d7:01:ec:1e:04:1a:51: 0a:8c:85:30:73:d1:32:ba:80:f4:85:5b:b9:d5:ae: fd:09:5f:26:65:d2:50:f4:40:cc:9b:77:b9:07:d7: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0F:AE:4E:D7:08:6E:3D:E5:D4:7A:63:7D:76:5E:A2:A5:A5:A6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5e5df5a-c54e-3a1d-9e15-6a337974cb24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b8:c0:27:3b:be:0e:b7:3c:7b:83:a8:44:e2:60:52:f9:e9: c8:9a:46:b9:0a:b3:c5:cc:ff:1a:78:32:26:63:95:12:e4:12: 04:b9:6e:68:40:35:3f:8a:79:56:d4:d5:70:7e:b6:fe:2a:5a: c4:c1:e0:be:bd:e7:da:71:ce:ba:df:8d:8c:2e:10:36:91:16: eb:80:f3:83:81:54:ee:a1:b1:72:66:18:be:23:73:9e:10:2b: f6:c9:9b:24:c2:d8:56:9a:7c:da:6d:27:f3:8c:d0:c2:ee:85: 01:7e:13:bc:56:cc:08:be:29:37:0b:53:38:2f:4e:89:fc:f5: 41:00:f8:31:89:86:06:b2:73:a5:9d:e5:0f:b3:00:f8:22:c0: 2e:f4:df:e6:e6:6b:a2:13:bf:28:82:53:e6:14:53:3f:45:67: 5a:5e:5d:99:d6:09:7f:a3:fb:04:2e:26:60:ca:4d:9f:54:94: 59:da:5e:70:cf:ec:7d:90:92:42:9e:ed:1d:20:e6:cb:fd:92: b4:52:1a:73:51:4a:f7:e2:5e:d8:fe:56:df:96:30:d4:d4:8d: 5c:10:fb:55:c5:66:f9:79:1f:6e:e3:50:25:7f:fc:87:44:55: 9b:82:b8:eb:79:ff:c1:0b:3b:a0:30:71:ee:15:e1:cf:25:11: a0:0e:4d:68 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0xb3mMDvK4ovTEJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MjAxZTdmOGUtNTVlOC00NmE4LWE0MmMtMTU1YjUwYTkyZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuzmWyivmgyNH1/Km8c91Ld2X2pLUMWVMGkJ TxZ42H4qkOf4/nlf2dDmdK4kuEddDKmGJe17i/2JDvUjOVfGVUsaPQjPwLAsC2k8 8c0GNxHBJGhESsmIJTRkjE5cH4mPsFMV2WdDc5eqLUWEgEyG1FrBLq4YUQ5a0x2P afWiJdMFJM+jqvPUp4fn276Q9wX+gvlHhMH2uqfkZodJejiL4DSINzoJq98JI6GD +WW3yH6JL/piSKDJMTIRmJ+0q8UBgvBeM5nrAPGC6lB9WYdLr+sJTAjtQhod0dcB 7B4EGlEKjIUwc9EyuoD0hVu51a79CV8mZdJQ9EDMm3e5B9esTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEoPrk7XCG495dR6Y312XqKlpabZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDVlNWRmNWEtYzU0ZS0z YTFkLTllMTUtNmEzMzc5NzRjYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIoEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAErjAJzu+Drc8e4OoROJgUvnpyJpGuQqzxcz/GngyJmOVEuQSBLluaEA1 P4p5VtTVcH62/ipaxMHgvr3n2nHOut+NjC4QNpEW64Dzg4FU7qGxcmYYviNznhAr 9smbJMLYVpp82m0n84zQwu6FAX4TvFbMCL4pNwtTOC9Oifz1QQD4MYmGBrJzpZ3l D7MA+CLALvTf5uZrohO/KIJT5hRTP0VnWl5dmdYJf6P7BC4mYMpNn1SUWdpecM/s fZCSQp7tHSDmy/2StFIac1FK9+Je2P5W35Yw1NSNXBD7VcVm+XkfbuNQJX/8h0RV m4K463n/wQs7oDBx7hXhzyURoA5NaA== -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:13 2026 by rpki-client