$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d594a34-84bb-37cf-9b9c-86df3d65aa66.roa File: 1d594a34-84bb-37cf-9b9c-86df3d65aa66.roa (raw, json) Hash identifier: GTdlFiqSS1q3M8KJ4vyjK2BryYew1OBdi6AdztdQcVY= Subject key identifier: 3C:AA:2D:46:02:96:B0:8E:CE:E5:E3:82:ED:34:C0:49:28:FF:CF:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4B3BC78BE1614E595FFF0A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d594a34-84bb-37cf-9b9c-86df3d65aa66.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 19527 IP address blocks: 34.3.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:c7:8b:e1:61:4e:59:5f:ff:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=b0f62efe-fd3b-4f5c-b3a7-943263705add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:51:68:85:3d:ae:d4:f4:ba:44:9f:5f:42:28: 6b:16:1c:e4:44:af:58:eb:32:cc:9a:9d:8e:2c:f4: cc:dd:f7:d9:6c:42:75:03:c9:0c:39:80:02:0a:0e: 65:13:c7:d2:02:ac:12:59:51:52:2d:0c:0a:70:c3: 15:4a:c3:50:7a:5d:95:32:80:b9:07:ad:56:dd:df: 61:21:64:fe:e5:4f:61:bf:8c:18:be:b5:7e:f2:56: 9d:59:93:db:b4:40:e4:ca:a1:bb:18:dd:0f:d5:26: 6d:5c:8c:d3:d9:8e:dd:79:76:2b:08:71:66:a0:49: ee:8d:a3:ea:db:01:a9:22:71:8c:c8:1d:6c:99:5b: 09:3a:22:db:e9:c1:2b:43:6d:c5:f7:64:9d:98:f4: 96:8d:cc:4a:ac:ac:b2:26:2f:6c:f9:a2:0f:26:6f: d2:fc:ac:8c:79:d3:6b:5d:76:8c:f0:d9:d9:af:30: fc:28:06:96:95:b8:34:2d:d7:e6:3b:2c:d7:02:93: 79:36:a2:92:7e:b4:dd:86:68:5f:b9:c9:98:9e:ac: 62:d1:76:c0:d7:7e:c3:a7:47:c6:d4:51:3b:fc:df: 85:04:6d:dc:02:2d:c8:c8:22:be:69:84:45:55:24: 8d:bf:4a:e2:36:6a:01:c8:b4:7c:14:ca:68:7c:e3: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:2D:46:02:96:B0:8E:CE:E5:E3:82:ED:34:C0:49:28:FF:CF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d594a34-84bb-37cf-9b9c-86df3d65aa66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:51:cb:aa:71:bc:de:47:e2:a9:37:ab:6f:67:a0:52:db:4b: f0:60:13:55:8a:52:2d:e0:5f:7d:63:d2:31:de:f7:fe:16:ae: d4:e1:dc:c2:c4:92:3e:34:cc:27:00:f9:e9:80:f0:86:bc:9b: 06:ad:60:f5:38:9b:2a:c8:a9:d1:67:af:a2:52:0c:17:e4:01: 32:d0:73:a1:25:0b:5a:f2:42:66:ed:49:64:62:b1:3d:bc:3e: 98:65:7d:38:8a:09:45:a0:c4:80:f5:2b:98:65:89:59:bb:cc: 51:bd:4d:6e:0a:6e:e8:69:98:d0:4c:ed:af:96:18:7d:85:d0: ef:8e:16:d1:97:06:de:53:9d:30:5a:a6:90:dd:1e:5f:a0:ca: 1f:b7:a9:fd:0d:c8:8f:67:d1:0c:95:de:3c:72:4b:85:c3:05: 8e:97:94:39:fd:7e:3c:18:82:9f:6c:5b:85:bf:ec:ca:8b:71: d3:21:25:e3:b1:f1:03:73:4a:ef:22:fa:55:98:a1:de:af:15: 77:b1:58:2d:15:27:85:5e:f3:b2:79:13:ea:e8:51:9a:c1:ff: cb:49:5b:42:4a:85:a9:15:59:6c:fe:97:2e:21:db:09:b4:58: 48:32:8b:2b:d1:b3:f5:6c:83:91:6d:ba:88:03:28:d1:76:9a: de:6e:03:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExLO8eL4WFOWV//CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk YjBmNjJlZmUtZmQzYi00ZjVjLWIzYTctOTQzMjYzNzA1YWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1FohT2u1PS6RJ9fQihrFhzkRK9Y6zLMmp2O LPTM3ffZbEJ1A8kMOYACCg5lE8fSAqwSWVFSLQwKcMMVSsNQel2VMoC5B61W3d9h IWT+5U9hv4wYvrV+8ladWZPbtEDkyqG7GN0P1SZtXIzT2Y7deXYrCHFmoEnujaPq 2wGpInGMyB1smVsJOiLb6cErQ23F92SdmPSWjcxKrKyyJi9s+aIPJm/S/KyMedNr XXaM8NnZrzD8KAaWlbg0LdfmOyzXApN5NqKSfrTdhmhfucmYnqxi0XbA137Dp0fG 1FE7/N+FBG3cAi3IyCK+aYRFVSSNv0riNmoByLR8FMpofOM1vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyqLUYClrCOzuXjgu00wEko/8+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ1OTRhMzQtODRiYi0z N2NmLTliOWMtODZkZjNkNjVhYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVRy6pxvN5H4qk3q29noFLbS/BgE1WKUi3gX31j0jHe9/4WrtTh3MLE kj40zCcA+emA8Ia8mwatYPU4myrIqdFnr6JSDBfkATLQc6ElC1ryQmbtSWRisT28 PphlfTiKCUWgxID1K5hliVm7zFG9TW4KbuhpmNBM7a+WGH2F0O+OFtGXBt5TnTBa ppDdHl+gyh+3qf0NyI9n0QyV3jxyS4XDBY6XlDn9fjwYgp9sW4W/7MqLcdMhJeOx 8QNzSu8i+lWYod6vFXexWC0VJ4Ve87J5E+roUZrB/8tJW0JKhakVWWz+ly4h2wm0 WEgyiyvRs/Vsg5FtuogDKNF2mt5uA/4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:24 2026 by rpki-client