$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa File: fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa (raw, json) Hash identifier: zgrC1M0Jx9reB+IIQfrOx9tj2pUbu4X6QSWP0Vm1tl8= Subject key identifier: B8:9F:50:23:32:34:54:5A:5E:DC:76:DD:A9:5E:75:45:09:BA:6E:00 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA9E397DD0328C70DB5140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.66.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:9e:39:7d:d0:32:8c:70:db:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=2eda93c6-7993-4be3-a366-2d2e919ce1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:bf:0f:61:4e:77:6e:ee:da:cc:08:f6:88: 23:b8:14:71:d2:d0:71:21:ef:35:58:8e:c4:06:32: 21:98:d5:6d:7b:7e:75:a0:60:09:02:a0:be:91:07: 11:12:f6:b7:6d:94:48:56:ee:3a:4f:47:88:cd:36: 71:bb:59:34:ac:dd:d0:cb:10:73:a4:5a:34:33:ca: 98:61:75:87:bf:43:9f:9a:a8:31:8c:75:b2:17:8b: b0:4b:61:f6:b4:03:95:da:39:55:23:c4:ff:4d:36: 32:e1:13:81:c0:eb:1f:10:c4:61:9a:97:f8:9a:33: c2:01:a0:bd:36:06:e1:27:19:5c:af:a0:80:4e:42: a3:74:b0:fd:f3:25:4b:d3:41:98:94:10:33:01:5e: 62:83:b9:c4:b8:96:d7:01:1d:76:73:c1:10:9c:f2: b2:0b:4a:a1:ec:31:f4:b4:08:24:89:0b:1c:1a:99: 84:f1:a2:72:db:41:a3:a7:5d:96:b9:3f:a4:8e:99: 7e:20:41:5d:f7:39:5f:22:96:73:c2:01:08:b9:ec: a6:5a:ce:4e:2c:95:59:65:c9:52:94:90:1f:86:82: 17:eb:a8:c3:1b:98:7a:48:6d:48:70:7a:6d:28:0c: c7:44:f3:40:cc:35:b0:27:91:df:e8:15:15:50:c7: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:50:23:32:34:54:5A:5E:DC:76:DD:A9:5E:75:45:09:BA:6E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:56:76:24:ed:aa:83:cc:21:2c:9d:97:0f:fe:29:1f:2d:2f: 4d:2d:6a:71:09:f0:3f:7c:ed:5e:7c:c7:cf:63:e8:b0:56:cd: 80:fa:8c:e3:a5:47:54:16:b8:73:2e:11:55:de:12:05:ff:a5: 52:01:5a:43:12:74:43:f3:13:06:82:ef:c2:ec:5a:cd:bf:06: 87:77:88:b4:ee:04:3c:9f:8b:96:88:0a:e6:26:35:b2:d7:a3: 9c:da:3c:35:a4:24:75:32:dc:43:0f:ef:86:a4:b2:e6:8e:6a: d2:22:4a:0d:8f:97:a9:f1:91:4d:ae:bf:1d:81:4a:ff:8b:46: fe:59:45:1c:2e:1a:86:fb:e5:e5:c2:40:fe:a5:cc:ac:3a:cc: 43:ce:a8:29:a3:75:f1:8f:eb:3e:b7:bb:1c:a0:d6:4c:17:58: 25:63:6c:52:e3:b0:3e:01:cb:26:ce:e1:d1:3e:66:fd:a6:9f: b5:ef:cb:de:98:74:3f:fc:e7:ae:16:87:37:48:a0:4f:5c:18: 53:36:fb:29:07:66:c5:6d:dc:3d:0b:dd:7b:f2:5b:cd:b4:c1: eb:b8:ce:0c:ac:ad:54:c7:1b:7a:2b:24:12:cc:fb:7a:e4:40: 63:be:98:61:2c:ab:03:26:0e:23:80:90:c8:75:77:af:07:7f: 4d:63:ce:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqp45fdAyjHDbUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MmVkYTkzYzYtNzk5My00YmUzLWEzNjYtMmQyZTkxOWNlMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/+/D2FOd27u2swI9ogjuBRx0tBxIe81WI7E BjIhmNVte351oGAJAqC+kQcREva3bZRIVu46T0eIzTZxu1k0rN3QyxBzpFo0M8qY YXWHv0OfmqgxjHWyF4uwS2H2tAOV2jlVI8T/TTYy4ROBwOsfEMRhmpf4mjPCAaC9 NgbhJxlcr6CATkKjdLD98yVL00GYlBAzAV5ig7nEuJbXAR12c8EQnPKyC0qh7DH0 tAgkiQscGpmE8aJy20Gjp12WuT+kjpl+IEFd9zlfIpZzwgEIueymWs5OLJVZZclS lJAfhoIX66jDG5h6SG1IcHptKAzHRPNAzDWwJ5Hf6BUVUMflyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLifUCMyNFRaXtx23aledUUJum4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmM4YzFmNWEtYzRlNi0z NTFiLThlN2YtZTE0OTc2MzlhM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9WdiTtqoPMISydlw/+KR8tL00tanEJ8D987V58x89j6LBWzYD6jOOl R1QWuHMuEVXeEgX/pVIBWkMSdEPzEwaC78LsWs2/Bod3iLTuBDyfi5aICuYmNbLX o5zaPDWkJHUy3EMP74aksuaOatIiSg2Pl6nxkU2uvx2BSv+LRv5ZRRwuGob75eXC QP6lzKw6zEPOqCmjdfGP6z63uxyg1kwXWCVjbFLjsD4ByybO4dE+Zv2mn7Xvy96Y dD/8564WhzdIoE9cGFM2+ykHZsVt3D0L3XvyW820weu4zgysrVTHG3orJBLM+3rk QGO+mGEsqwMmDiOAkMh1d68Hf01jznk= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:10 2026 by rpki-client