$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dffa6a3c-db63-3677-aacf-fb370f210400.roa File: dffa6a3c-db63-3677-aacf-fb370f210400.roa (raw, json) Hash identifier: R+87j8Ppr15usVmwJUJEaD+0sBSPVud2WiMCb9lmrKw= Subject key identifier: F9:26:80:41:3C:90:D3:BD:79:05:3B:C6:13:B7:53:1B:7E:55:6E:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA457180A46C25AFB9480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dffa6a3c-db63-3677-aacf-fb370f210400.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.75.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a4:57:18:0a:46:c2:5a:fb:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3c9d695d-49da-47fa-9a2c-0951d2a60f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:c4:ea:cf:c2:c6:6a:46:ca:be:b0:b7:0f: 0e:a9:7f:12:7c:54:8e:42:8e:e5:e8:a7:ca:7b:b9: cb:91:19:b0:33:56:ac:bc:90:89:35:a4:88:3a:1e: 7d:d2:5d:f0:b7:d6:65:74:3d:3a:e1:29:88:69:5d: 3a:4f:5c:2b:03:ed:c5:9d:b4:fe:1e:8f:5c:8d:0e: b5:33:98:00:a3:6f:1f:9a:fa:31:d3:ee:1a:55:b2: 1b:d4:2d:6c:7b:04:5a:40:89:47:92:dc:60:0e:03: a6:b8:8a:b8:d8:b9:24:68:27:f2:54:1d:34:9c:ee: 42:45:c2:6c:6d:13:d5:c8:e5:7e:dc:71:de:48:61: 97:c2:15:2c:43:52:d3:f3:9c:0e:4c:2f:b8:76:bc: f9:65:4d:74:30:5e:40:5f:e8:71:7d:81:44:9a:fa: 47:77:71:41:d4:8e:51:fc:0d:93:20:04:61:64:a6: 5b:5d:d5:0b:94:ca:13:44:12:00:6c:4b:6d:5f:03: 55:da:36:da:24:65:49:23:37:82:a2:1a:d9:ca:32: e5:68:d7:78:ce:68:fb:d0:c6:e2:a1:bf:d1:37:6c: 15:ca:84:8e:0d:44:2a:57:d6:42:42:58:c8:0f:4b: 42:8c:c0:f5:07:2c:13:72:7c:1d:fe:0a:1a:dd:1d: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:80:41:3C:90:D3:BD:79:05:3B:C6:13:B7:53:1B:7E:55:6E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dffa6a3c-db63-3677-aacf-fb370f210400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.75.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:15:7a:62:7d:6e:29:8a:65:dd:3b:1d:47:e6:35:77:21:f6: 1e:cc:29:76:25:5e:2f:ba:6c:61:96:e7:e9:86:a8:6f:eb:2b: e9:f7:a9:e6:8f:af:22:da:8f:d7:7e:ac:2c:94:32:f8:9b:76: ae:8f:20:82:92:d1:29:79:ed:44:ea:e4:2f:31:df:b2:e3:dc: 6e:00:62:43:c0:ca:eb:0a:af:a0:24:1a:4b:4a:76:d2:49:dd: 85:29:49:d1:7b:14:ac:88:25:95:9c:aa:78:1c:f9:28:96:e6: 8a:3a:f1:7b:1e:4d:9b:fe:c3:cc:8f:32:2d:2e:f5:57:68:f9: 6b:27:6d:f1:d4:24:81:df:11:ad:d4:41:7f:d8:18:b3:5e:c4: db:ff:9c:9d:8b:b4:45:67:d9:94:3d:51:99:a1:52:ea:3b:79: f2:c2:65:c2:80:37:df:2e:7f:d9:7f:fd:d9:27:49:69:8f:2c: dc:b0:f0:1a:5f:6e:e7:aa:27:94:ab:45:bf:69:0a:d4:03:64: 90:5a:b4:cf:a9:2f:0d:f1:50:39:6b:4e:93:75:f8:ce:7a:ad: 4c:c1:c9:0b:38:73:1e:9e:09:85:18:7f:e1:2f:d5:af:ba:6c: e7:16:4e:cf:fb:81:a1:1d:80:a9:b9:24:a9:ec:51:35:7c:7b: d0:70:43:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqRXGApGwlr7lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk M2M5ZDY5NWQtNDlkYS00N2ZhLTlhMmMtMDk1MWQyYTYwZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrXE6s/CxmpGyr6wtw8OqX8SfFSOQo7l6KfK e7nLkRmwM1asvJCJNaSIOh590l3wt9ZldD064SmIaV06T1wrA+3FnbT+Ho9cjQ61 M5gAo28fmvox0+4aVbIb1C1sewRaQIlHktxgDgOmuIq42LkkaCfyVB00nO5CRcJs bRPVyOV+3HHeSGGXwhUsQ1LT85wOTC+4drz5ZU10MF5AX+hxfYFEmvpHd3FB1I5R /A2TIARhZKZbXdULlMoTRBIAbEttXwNV2jbaJGVJIzeCohrZyjLlaNd4zmj70Mbi ob/RN2wVyoSODUQqV9ZCQljID0tCjMD1BywTcnwd/goa3R2lAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkmgEE8kNO9eQU7xhO3Uxt+VW5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGZmYTZhM2MtZGI2My0z Njc3LWFhY2YtZmIzNzBmMjEwNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgVemJ9bimKZd07HUfmNXch9h7MKXYlXi+6bGGW5+mGqG/rK+n3qeaP ryLaj9d+rCyUMvibdq6PIIKS0Sl57UTq5C8x37Lj3G4AYkPAyusKr6AkGktKdtJJ 3YUpSdF7FKyIJZWcqngc+SiW5oo68XseTZv+w8yPMi0u9Vdo+WsnbfHUJIHfEa3U QX/YGLNexNv/nJ2LtEVn2ZQ9UZmhUuo7efLCZcKAN98uf9l//dknSWmPLNyw8Bpf bueqJ5SrRb9pCtQDZJBatM+pLw3xUDlrTpN1+M56rUzByQs4cx6eCYUYf+Ev1a+6 bOcWTs/7gaEdgKm5JKnsUTV8e9BwQ9E= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:17 2026 by rpki-client