$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa File: f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa (raw, json) Hash identifier: Zf1R82n3lNCq25IPq6LYMkAWuHop9WADwZx2/7RWi1Y= Subject key identifier: AA:36:50:F2:B3:9C:60:67:05:2F:5C:14:7C:8D:07:21:66:CD:BF:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3DB1C9E641BE49F6F1E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.66.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3d:b1:c9:e6:41:be:49:f6:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=adf27369-b2c0-4c78-8bd0-f5ba1b298090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:56:15:09:a4:d4:d5:40:0e:c5:56:61:74:f1: 1b:4c:44:58:b0:4f:bd:64:cc:da:93:f9:d5:4f:02: a3:19:6a:83:24:93:1c:f6:3e:a1:e1:d7:76:d9:3e: ef:cf:66:2f:1e:51:b9:b4:0e:7e:91:81:a9:f2:4e: b4:53:30:18:31:5d:f4:8a:4d:19:1e:fc:33:98:8a: 8a:91:d4:ed:32:0c:3e:79:22:2b:76:26:b7:2f:a1: 14:19:03:4c:23:a8:b4:fb:c9:c2:f4:7b:30:b2:6f: 08:14:1c:a3:a5:50:24:b4:65:64:3d:f4:d2:ed:77: 12:12:ba:71:88:17:48:77:b6:3e:61:03:83:ec:6a: c2:03:eb:dd:ba:4a:7b:23:36:9c:60:75:e9:cc:a0: 7b:18:c3:49:84:95:96:83:db:dc:30:f6:88:ba:51: e0:a1:70:93:fc:72:b5:7d:f9:65:29:e9:cb:bc:e3: 70:8c:9d:39:2e:70:5e:b5:44:93:4c:8b:10:0b:1b: 37:fa:24:a0:ae:cf:d7:3f:13:8f:c1:8d:e0:d8:c0: 43:30:63:45:0e:30:56:5a:ff:e6:eb:7f:b7:80:8e: af:9e:9d:c5:49:95:0a:47:92:8b:40:d8:a4:9d:21: 7a:95:11:9e:c7:da:42:35:6e:49:17:1b:9f:1d:5b: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:50:F2:B3:9C:60:67:05:2F:5C:14:7C:8D:07:21:66:CD:BF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:bc:7d:05:98:0c:4e:ed:2e:f0:cf:c4:a5:1c:d2:cf:18:ae: 36:ba:09:aa:bd:06:1c:b6:df:3f:eb:03:36:17:9e:a6:0a:2b: ae:2a:a2:fc:d0:b7:c9:5f:54:17:4c:1f:55:b1:dd:61:38:c6: 7c:e9:4a:6e:d6:aa:39:c5:13:76:d7:ff:c0:c3:ef:b2:1c:07: 4a:49:11:a6:32:15:a3:ac:64:d5:84:84:06:ef:b5:d6:bd:40: 32:c5:db:27:94:f6:75:63:98:d8:3b:99:a4:19:ac:81:8e:e3: c7:65:83:43:cd:3f:35:d1:01:fb:07:e5:9a:c3:f4:9f:98:f3: f1:e4:17:b2:16:eb:a9:37:96:aa:c0:7b:09:55:83:b3:6b:49: 81:12:08:6e:29:0e:97:f9:d0:4e:fb:17:55:12:6c:52:4b:04: e8:14:26:c3:6a:77:f9:4c:f2:67:3d:6b:b5:b4:6c:a2:a7:eb: f7:82:66:21:09:81:5b:8d:f1:1d:ff:34:fa:a6:e0:4a:1c:37: 97:c1:95:17:72:6c:80:16:ed:87:e9:08:b4:f0:b4:06:3b:e5: 0c:ef:be:39:d7:12:6d:ba:d8:ca:ef:2d:b2:b3:9d:4f:d4:54: 95:bd:4f:c8:ab:62:18:6a:a2:67:62:d1:94:ce:b4:c2:21:e5: cb:5b:01:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqj2xyeZBvkn28eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YWRmMjczNjktYjJjMC00Yzc4LThiZDAtZjViYTFiMjk4MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFYVCaTU1UAOxVZhdPEbTERYsE+9ZMzak/nV TwKjGWqDJJMc9j6h4dd22T7vz2YvHlG5tA5+kYGp8k60UzAYMV30ik0ZHvwzmIqK kdTtMgw+eSIrdia3L6EUGQNMI6i0+8nC9Hswsm8IFByjpVAktGVkPfTS7XcSErpx iBdId7Y+YQOD7GrCA+vdukp7IzacYHXpzKB7GMNJhJWWg9vcMPaIulHgoXCT/HK1 ffllKenLvONwjJ05LnBetUSTTIsQCxs3+iSgrs/XPxOPwY3g2MBDMGNFDjBWWv/m 63+3gI6vnp3FSZUKR5KLQNiknSF6lRGex9pCNW5JFxufHVszswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo2UPKznGBnBS9cFHyNByFmzb8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjg5MjVjNjUtNjA3NS0z ZmU5LWE4OWItZDJiYjI1MGM3ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC8fQWYDE7tLvDPxKUc0s8Yrja6Caq9Bhy23z/rAzYXnqYKK64qovzQ t8lfVBdMH1Wx3WE4xnzpSm7WqjnFE3bX/8DD77IcB0pJEaYyFaOsZNWEhAbvtda9 QDLF2yeU9nVjmNg7maQZrIGO48dlg0PNPzXRAfsH5ZrD9J+Y8/HkF7IW66k3lqrA ewlVg7NrSYESCG4pDpf50E77F1USbFJLBOgUJsNqd/lM8mc9a7W0bKKn6/eCZiEJ gVuN8R3/NPqm4EocN5fBlRdybIAW7YfpCLTwtAY75QzvvjnXEm262MrvLbKznU/U VJW9T8irYhhqomdi0ZTOtMIh5ctbAdY= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:27 2026 by rpki-client