$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32fe5570-5f79-3254-942f-3f53a1504e9c.roa File: 32fe5570-5f79-3254-942f-3f53a1504e9c.roa (raw, json) Hash identifier: XBWycRWKPptQx5nR2Pr3dul/TmBqyZ1Rvf+WjISuSt4= Subject key identifier: 1D:F8:B4:B4:A2:99:AE:7F:99:EC:66:48:EC:CC:4F:13:5A:59:D1:BD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4871C3193015CC156F7FBF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32fe5570-5f79-3254-942f-3f53a1504e9c.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.122.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:c3:19:30:15:cc:15:6f:7f:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=c1f5dbed-c5fc-4af7-bdd0-8f6c054264e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:51:68:27:ee:bb:6c:52:d5:20:c3:20:a8: c5:54:9d:c2:33:88:4d:b6:2f:87:a5:d0:05:e4:61: d2:37:08:e6:50:28:c8:83:a6:43:d1:8d:ca:4c:e0: 4a:6e:8b:a9:aa:e7:58:28:db:76:ac:52:2e:ae:cd: a9:d1:57:c9:0c:ef:b6:7f:72:30:2c:24:fe:96:d7: 6b:f3:09:f6:67:2e:29:1c:b1:61:70:f4:49:a4:db: 32:bd:18:9e:e5:6e:7b:bc:37:71:53:a2:fa:6d:9a: 1b:24:24:00:f8:64:6a:7f:5f:97:39:ac:a8:71:a9: cc:bc:ff:dc:73:0e:2f:af:19:fd:08:ae:e0:45:ed: 76:db:65:8b:5b:af:aa:4f:cb:87:01:e5:82:be:d8: 4d:a9:13:19:d0:3f:0d:98:54:45:ac:39:86:ae:28: c2:a4:dd:66:94:11:4d:40:78:f8:55:24:96:93:c8: bf:22:5a:77:58:cb:ef:53:13:1c:79:62:f4:85:6b: 83:3a:25:ed:6f:16:0c:21:43:e7:9b:58:de:86:49: 63:bd:ab:0e:35:41:06:59:02:15:52:8e:eb:dd:f4: 06:6d:e3:ee:02:92:09:84:6b:af:4e:60:b3:78:47: 87:fe:a6:19:c1:18:76:32:d7:ed:89:aa:81:cc:92: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F8:B4:B4:A2:99:AE:7F:99:EC:66:48:EC:CC:4F:13:5A:59:D1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32fe5570-5f79-3254-942f-3f53a1504e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:65:db:3c:12:f3:36:1b:96:9f:82:66:a3:64:c5:89:38:65: ca:b9:d7:1e:60:12:29:56:a1:e4:f0:94:86:18:fc:b3:3c:30: 60:47:c9:72:b3:6c:d7:7d:d6:a1:4c:c2:fd:93:24:9b:85:a3: e1:f6:c5:bd:2b:63:60:bf:1e:7e:a8:1b:30:ec:ca:9d:5f:b1: 20:c9:bc:af:2d:48:24:0e:5b:10:7b:03:0b:dc:45:3b:9d:ca: a1:04:66:99:19:2d:0e:c7:e4:c2:88:86:99:a3:50:3a:1b:d5: db:52:32:0d:12:78:27:27:62:3b:75:a9:71:db:6e:62:ae:27: 23:be:1d:bb:b0:2c:07:6c:5b:d3:2a:c1:40:7d:2a:1f:c9:06: e0:1d:96:c5:9c:f1:bd:51:dc:f6:a3:6f:98:b4:29:81:df:13: ea:e4:01:ff:35:77:fa:b1:cf:7c:c6:de:47:4f:ba:96:62:0f: 6a:be:50:58:4f:bf:33:de:24:d6:61:12:83:9f:64:21:a6:38: 5e:03:5f:51:b7:54:16:85:c1:81:9f:8b:dd:9f:d9:9c:6f:3f: 19:d7:99:86:0e:1f:b6:c8:0e:08:dc:19:ee:d4:27:09:c5:f1: ea:3d:2c:94:ec:38:8c:dd:7a:af:92:51:9e:a9:67:8e:60:40: 77:8d:b0:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIccMZMBXMFW9/v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YzFmNWRiZWQtYzVmYy00YWY3LWJkZDAtOGY2YzA1NDI2NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndxRaCfuu2xS1SDDIKjFVJ3CM4hNti+HpdAF 5GHSNwjmUCjIg6ZD0Y3KTOBKboupqudYKNt2rFIurs2p0VfJDO+2f3IwLCT+ltdr 8wn2Zy4pHLFhcPRJpNsyvRie5W57vDdxU6L6bZobJCQA+GRqf1+XOayocanMvP/c cw4vrxn9CK7gRe1222WLW6+qT8uHAeWCvthNqRMZ0D8NmFRFrDmGrijCpN1mlBFN QHj4VSSWk8i/Ilp3WMvvUxMceWL0hWuDOiXtbxYMIUPnm1jehkljvasONUEGWQIV Uo7r3fQGbePuApIJhGuvTmCzeEeH/qYZwRh2MtftiaqBzJLUOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB34tLSima5/mexmSOzMTxNaWdG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzJmZTU1NzAtNWY3OS0z MjU0LTk0MmYtM2Y1M2ExNTA0ZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFl2zwS8zYblp+CZqNkxYk4Zcq51x5gEilWoeTwlIYY/LM8MGBHyXKz bNd91qFMwv2TJJuFo+H2xb0rY2C/Hn6oGzDsyp1fsSDJvK8tSCQOWxB7AwvcRTud yqEEZpkZLQ7H5MKIhpmjUDob1dtSMg0SeCcnYjt1qXHbbmKuJyO+HbuwLAdsW9Mq wUB9Kh/JBuAdlsWc8b1R3Pajb5i0KYHfE+rkAf81d/qxz3zG3kdPupZiD2q+UFhP vzPeJNZhEoOfZCGmOF4DX1G3VBaFwYGfi92f2ZxvPxnXmYYOH7bIDgjcGe7UJwnF 8eo9LJTsOIzdeq+SUZ6pZ45gQHeNsJI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:33 2026 by rpki-client