$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa File: da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa (raw, json) Hash identifier: cSvlDcv3F9VKBbQrd7cZCcc4KMg3D209sLEWR7dpgmM= Subject key identifier: 44:30:32:FE:06:34:93:01:20:10:49:87:97:30:B7:24:09:60:D0:CC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAB0BEB7F0071C160A3C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.67.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b0:be:b7:f0:07:1c:16:0a:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1ed27ce3-ee92-4f8b-9f32-a5bc808b50ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:e1:d0:18:ae:41:5a:5a:95:5c:68:62:0d: 55:98:79:55:a4:68:3d:c1:c5:a1:24:0f:66:67:56: 2b:50:f2:74:e4:a6:db:a0:13:ed:bb:bc:75:9e:f4: e6:bd:09:ea:5a:fb:92:8d:26:7d:e8:07:51:43:6f: 2e:d0:93:8c:34:95:f3:f9:ab:f4:09:50:1d:fe:9d: a3:05:e4:89:4f:b1:31:93:9e:7e:a7:5d:36:af:0b: c5:79:5e:77:5d:8c:e7:63:b9:48:bc:be:d0:49:53: 2b:86:a8:7c:0c:e6:f2:ae:93:e5:23:a5:c4:f1:a0: d4:5e:b9:3e:1d:20:0e:97:a9:06:d9:20:c7:98:2a: 6a:c1:75:e6:75:e9:3e:ab:f3:2e:94:33:2d:be:36: 5b:16:b3:c9:91:e9:3f:fd:1a:7e:83:b4:fa:d8:95: 6b:5b:c4:e1:85:dc:db:97:21:1a:71:f1:e4:2e:97: c6:3c:37:d1:c9:90:7b:a0:d8:68:2e:59:e3:8f:97: 7c:7a:89:f3:20:ed:27:6b:47:8d:a7:05:43:3e:02: 28:23:1a:c6:71:21:e3:38:64:f6:f9:de:c5:5d:34: f2:3b:86:d0:92:37:79:75:ee:b0:91:c5:11:36:2a: 44:61:be:aa:a1:21:3c:c8:3b:ff:a3:ed:58:6e:71: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:30:32:FE:06:34:93:01:20:10:49:87:97:30:B7:24:09:60:D0:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da25f6d9-6c92-3d3c-88bc-7b6349062f25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:16:a5:74:5d:75:2b:d0:1c:f6:52:19:60:87:78:eb:99:03: 25:8c:86:25:5f:45:18:88:2f:39:02:69:59:63:c3:af:f7:5e: 6c:11:e8:bb:6e:d7:84:69:01:36:5b:31:ae:6b:65:4b:0a:f7: f7:a6:da:8d:5e:62:e3:5b:23:37:e5:37:d0:b4:39:f6:ca:9e: 1c:0a:df:a2:f7:4f:6b:35:e4:56:00:99:38:05:1c:55:15:4c: fe:5e:65:8a:2f:27:25:6d:09:a5:83:fd:bb:31:8f:8f:e4:88: 0c:18:65:85:a3:ed:93:cc:b2:05:15:45:fd:86:9f:93:63:42: af:b4:9c:63:91:46:16:d1:7a:33:37:8b:0d:a8:ba:d0:21:11: 24:7b:eb:02:39:a0:3d:f8:e9:6a:f7:94:23:a1:00:b9:da:4e: a7:64:e8:e3:a4:86:5d:a1:69:dc:06:a6:39:45:0d:9a:5a:dd: ff:d7:f6:71:b2:0a:9a:bb:58:d1:11:ea:de:b7:6a:f7:25:be: 35:7d:fb:bf:fa:16:bd:07:22:e2:56:42:9e:8a:ba:b1:65:42: 8e:b5:f4:c8:90:00:50:05:99:90:be:e7:4e:41:dd:d7:1d:27: 20:1b:1b:b1:85:d5:4f:77:24:21:9a:b2:6e:76:fe:b6:c5:bf: 3d:54:67:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrC+t/AHHBYKPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWVkMjdjZTMtZWU5Mi00ZjhiLTlmMzItYTViYzgwOGI1MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEzh0BiuQVpalVxoYg1VmHlVpGg9wcWhJA9m Z1YrUPJ05KbboBPtu7x1nvTmvQnqWvuSjSZ96AdRQ28u0JOMNJXz+av0CVAd/p2j BeSJT7Exk55+p102rwvFeV53XYznY7lIvL7QSVMrhqh8DObyrpPlI6XE8aDUXrk+ HSAOl6kG2SDHmCpqwXXmdek+q/MulDMtvjZbFrPJkek//Rp+g7T62JVrW8Thhdzb lyEacfHkLpfGPDfRyZB7oNhoLlnjj5d8eonzIO0na0eNpwVDPgIoIxrGcSHjOGT2 +d7FXTTyO4bQkjd5de6wkcURNipEYb6qoSE8yDv/o+1YbnEWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQwMv4GNJMBIBBJh5cwtyQJYNDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGEyNWY2ZDktNmM5Mi0z ZDNjLTg4YmMtN2I2MzQ5MDYyZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMWpXRddSvQHPZSGWCHeOuZAyWMhiVfRRiILzkCaVljw6/3XmwR6Ltu 14RpATZbMa5rZUsK9/em2o1eYuNbIzflN9C0OfbKnhwK36L3T2s15FYAmTgFHFUV TP5eZYovJyVtCaWD/bsxj4/kiAwYZYWj7ZPMsgUVRf2Gn5NjQq+0nGORRhbRejM3 iw2outAhESR76wI5oD346Wr3lCOhALnaTqdk6OOkhl2hadwGpjlFDZpa3f/X9nGy Cpq7WNER6t63avclvjV9+7/6Fr0HIuJWQp6KurFlQo619MiQAFAFmZC+505B3dcd JyAbG7GF1U93JCGasm52/rbFvz1UZ0c= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:16 2026 by rpki-client