$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa File: ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa (raw, json) Hash identifier: sdfhLjL+ErHQ2WVBKiv59E/y8Mci5Uqcm932zi1AFHI= Subject key identifier: CB:22:EE:98:E3:47:8B:90:30:03:B4:48:4B:54:1A:D4:E1:4D:BF:8C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C48718E36C359AE15CC2F6B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 19527 IP address blocks: 34.3.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:8e:36:c3:59:ae:15:cc:2f:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=95486676-5980-4190-97fe-8dfe8eb80616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:06:ae:61:d5:08:77:9d:4d:87:00:af:1e: 3d:98:39:2c:6a:df:a1:1e:13:94:d5:24:43:9c:9b: ea:59:19:69:c3:e1:15:57:6e:b0:a9:c2:83:e1:a1: ca:8f:1e:a0:21:96:87:aa:ae:92:62:a4:ab:84:27: 1b:6d:a0:03:93:84:d7:13:ef:1e:60:71:6c:65:05: a1:55:d9:ad:36:ef:7d:c5:57:20:cb:7b:01:52:c4: af:32:bd:d6:2f:1a:fd:a8:e1:76:8b:86:f7:c3:84: 8a:ad:22:89:c9:02:60:a8:35:67:b8:41:b5:bc:e1: 1f:d5:de:9e:58:09:c1:07:2d:df:51:c4:70:3b:86: 34:f4:8e:3a:2f:72:9b:36:cf:60:ed:a4:98:e6:4f: 75:96:94:60:6d:87:fc:41:ba:e2:05:f5:70:6e:53: 28:d1:11:a7:b0:5b:d3:38:68:93:97:35:88:ae:0e: 27:77:2f:c9:24:6e:fe:97:1c:ef:81:08:3c:89:bc: 8a:27:1b:b0:f5:07:73:d5:a3:a8:22:51:22:97:bb: 0d:34:6d:b6:da:7a:8c:4d:f4:43:b0:e2:06:24:99: b8:2b:fd:0c:32:ab:e3:b5:f3:e4:4a:7d:1e:45:3b: 00:9e:4b:e6:68:96:82:19:30:5a:a3:6d:f5:29:83: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:22:EE:98:E3:47:8B:90:30:03:B4:48:4B:54:1A:D4:E1:4D:BF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:70:ca:73:3d:90:a4:7e:5a:f0:46:29:1d:10:33:d5:9e:b4: 34:22:5a:b3:cd:d0:1e:b4:38:91:25:d8:45:dc:61:93:42:71: 0e:ff:fe:f3:32:e7:2a:aa:b2:5f:40:90:fa:2c:58:ac:68:8e: df:0f:84:ee:62:48:fe:bc:df:97:b9:8d:1b:81:74:14:57:d8: 6f:de:7f:aa:0b:c6:5f:80:fb:7a:b4:c0:26:78:1a:1b:16:26: 93:e7:35:39:66:ca:49:47:1c:57:d1:5b:4a:75:6a:51:93:c7: a4:b9:27:c8:e6:0c:2c:e6:43:b6:ea:a7:86:e4:9c:44:a7:dd: 23:60:db:09:48:8d:a4:9e:90:3a:d5:ea:be:43:d7:c4:9e:ca: 8d:2d:17:f6:b1:21:72:58:3f:67:c8:a1:07:f6:52:23:f1:5e: 8b:5f:1e:40:37:a2:52:10:b0:8b:55:54:e8:e8:b8:24:cb:c5: 45:7e:79:a5:bb:a9:f2:34:5c:28:19:22:f1:76:25:e0:58:99: 33:92:5c:a3:8a:50:89:ef:57:83:8e:8d:04:e2:8f:6e:87:3b: 6e:9f:1e:c6:0c:c6:79:b5:97:66:59:e6:81:bc:eb:13:33:44: 9c:f1:e4:91:b2:ff:62:6a:64:ea:c2:9d:31:75:b4:c4:eb:98: 77:8f:04:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcY42w1muFcwva4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk OTU0ODY2NzYtNTk4MC00MTkwLTk3ZmUtOGRmZThlYjgwNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUIGrmHVCHedTYcArx49mDksat+hHhOU1SRD nJvqWRlpw+EVV26wqcKD4aHKjx6gIZaHqq6SYqSrhCcbbaADk4TXE+8eYHFsZQWh VdmtNu99xVcgy3sBUsSvMr3WLxr9qOF2i4b3w4SKrSKJyQJgqDVnuEG1vOEf1d6e WAnBBy3fUcRwO4Y09I46L3KbNs9g7aSY5k91lpRgbYf8QbriBfVwblMo0RGnsFvT OGiTlzWIrg4ndy/JJG7+lxzvgQg8ibyKJxuw9Qdz1aOoIlEil7sNNG222nqMTfRD sOIGJJm4K/0MMqvjtfPkSn0eRTsAnkvmaJaCGTBao231KYPuFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsi7pjjR4uQMAO0SEtUGtThTb+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmEyYTFhM2UtYmI5Ni0z NDhkLWE4MzMtZDc2ZmZkM2Q4MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5wynM9kKR+WvBGKR0QM9WetDQiWrPN0B60OJEl2EXcYZNCcQ7//vMy 5yqqsl9AkPosWKxojt8PhO5iSP6835e5jRuBdBRX2G/ef6oLxl+A+3q0wCZ4GhsW JpPnNTlmyklHHFfRW0p1alGTx6S5J8jmDCzmQ7bqp4bknESn3SNg2wlIjaSekDrV 6r5D18Seyo0tF/axIXJYP2fIoQf2UiPxXotfHkA3olIQsItVVOjouCTLxUV+eaW7 qfI0XCgZIvF2JeBYmTOSXKOKUInvV4OOjQTij26HO26fHsYMxnm1l2ZZ5oG86xMz RJzx5JGy/2JqZOrCnTF1tMTrmHePBFU= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:23 2026 by rpki-client