$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f0844c-6bd4-3c78-be76-589addff6c05.roa File: e5f0844c-6bd4-3c78-be76-589addff6c05.roa (raw, json) Hash identifier: gvXCrMXP5QEcqmjdtFUH7gM8DVlZ4Io6eUkQE1l6NbE= Subject key identifier: 1F:B3:AF:25:0C:D7:9B:96:79:66:2E:48:F2:94:A2:51:7C:E5:6E:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA833E8F3ABA3199122EA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f0844c-6bd4-3c78-be76-589addff6c05.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.127.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:83:3e:8f:3a:ba:31:99:12:2e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4c200f6b-4f85-4990-a35b-03755d6175fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:e7:56:91:f6:c6:1b:76:87:61:f7:fc:c6: e4:14:3d:1d:2d:8d:ae:74:63:5e:06:22:2a:58:41: 80:0e:c7:9b:23:d1:95:41:08:66:2f:ca:a5:19:0f: 22:46:2d:cd:35:82:94:db:6c:ca:6d:3a:9e:79:08: 83:ff:cf:78:1d:73:28:1c:28:73:ae:93:93:40:08: 61:d4:f2:7a:dd:59:f6:1a:a8:0a:7b:9f:98:7a:cc: c2:53:76:17:56:f3:99:33:01:5b:82:99:9f:89:8c: 6f:7b:06:04:eb:1b:5b:12:95:9a:d3:49:a6:00:a1: 31:a7:39:3a:ce:8c:e0:30:fd:78:ff:84:4c:f3:48: a7:27:f3:cb:9a:00:15:47:82:9d:4d:6a:9e:d3:51: 5b:c1:5d:4f:19:3f:1c:45:8e:67:71:98:7a:2b:c2: d9:63:8f:6a:f2:07:ae:84:64:00:bc:3f:29:5d:dd: 0d:c6:e7:e2:5c:44:f3:fe:5b:72:49:1f:e1:2f:d4: a9:f6:d0:f9:78:35:91:36:43:c1:3c:bb:05:72:4c: ba:96:16:37:11:ae:4a:91:44:40:5e:1c:29:65:da: b4:bf:ec:36:59:6b:d6:18:0d:30:1f:d6:61:4e:01: 2c:da:b7:30:cc:4a:77:c9:52:88:07:81:a3:6f:d3: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B3:AF:25:0C:D7:9B:96:79:66:2E:48:F2:94:A2:51:7C:E5:6E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f0844c-6bd4-3c78-be76-589addff6c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.127.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:bf:b0:d6:de:c4:10:21:60:a4:97:4c:0b:80:62:6f:46:2e: 3e:ff:8f:48:2b:7c:08:f6:65:9d:03:e9:03:b4:cd:f5:e0:70: 14:00:2e:e9:75:a8:e6:0d:e1:8f:2b:75:27:71:5a:1f:84:4b: ca:8d:2a:71:96:bb:51:d2:d1:b2:b6:ef:74:11:6a:84:64:20: c7:1c:34:50:3c:bc:12:65:28:70:e9:c5:8c:d0:33:e5:a0:ab: 21:8b:64:7c:3a:10:59:8f:fc:eb:2b:9e:44:e6:61:d4:b0:03: 83:83:63:46:d6:f6:e2:99:c3:5f:e9:81:10:36:2c:4c:56:7d: e7:1b:55:ab:3d:fc:96:0a:1a:8a:f1:44:7f:24:a3:31:f5:64: 67:3b:2f:40:91:58:e4:77:86:e9:6d:ac:88:95:ee:c0:6a:c3: 5e:ee:91:27:b8:f8:ce:c1:a8:a7:92:b7:3e:5c:aa:80:7a:3e: c6:f0:e6:4e:d2:65:30:f3:cd:12:b3:e2:01:2d:e7:95:c6:da: 95:e0:bf:a6:b8:9c:ee:aa:9d:c2:74:46:49:81:d5:51:7a:85: 71:21:4c:7f:07:a9:bc:c0:fb:74:a3:61:ba:b6:8a:29:c6:d4: 29:fc:d5:36:6a:3a:b3:77:44:67:6f:d8:d0:99:e5:d4:49:eb: 34:86:80:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoM+jzq6MZkSLqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NGMyMDBmNmItNGY4NS00OTkwLWEzNWItMDM3NTVkNjE3NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9TnVpH2xht2h2H3/MbkFD0dLY2udGNeBiIq WEGADsebI9GVQQhmL8qlGQ8iRi3NNYKU22zKbTqeeQiD/894HXMoHChzrpOTQAhh 1PJ63Vn2GqgKe5+YeszCU3YXVvOZMwFbgpmfiYxvewYE6xtbEpWa00mmAKExpzk6 zozgMP14/4RM80inJ/PLmgAVR4KdTWqe01FbwV1PGT8cRY5ncZh6K8LZY49q8geu hGQAvD8pXd0NxufiXETz/ltySR/hL9Sp9tD5eDWRNkPBPLsFcky6lhY3Ea5KkURA XhwpZdq0v+w2WWvWGA0wH9ZhTgEs2rcwzEp3yVKIB4Gjb9PRCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+zryUM15uWeWYuSPKUolF85W5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTVmMDg0NGMtNmJkNC0z Yzc4LWJlNzYtNTg5YWRkZmY2YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa/sNbexBAhYKSXTAuAYm9GLj7/j0grfAj2ZZ0D6QO0zfXgcBQALul1 qOYN4Y8rdSdxWh+ES8qNKnGWu1HS0bK273QRaoRkIMccNFA8vBJlKHDpxYzQM+Wg qyGLZHw6EFmP/OsrnkTmYdSwA4ODY0bW9uKZw1/pgRA2LExWfecbVas9/JYKGorx RH8kozH1ZGc7L0CRWOR3hultrIiV7sBqw17ukSe4+M7BqKeStz5cqoB6Psbw5k7S ZTDzzRKz4gEt55XG2pXgv6a4nO6qncJ0RkmB1VF6hXEhTH8HqbzA+3SjYbq2iinG 1Cn81TZqOrN3RGdv2NCZ5dRJ6zSGgBo= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:02 2026 by rpki-client