$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa File: bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa (raw, json) Hash identifier: rNKoodrPEwhlVL8Hj3MoYMhn2W97ik7mtEyDhgAqfuo= Subject key identifier: 53:9C:AF:E5:4D:2F:CA:81:93:18:5D:88:B0:59:7C:BE:9A:76:84:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4871C9434778431BDE0F0000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.158.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:c9:43:47:78:43:1b:de:0f:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=4ce94a0e-ea59-45bd-944a-20cc39fd0f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:4a:03:f4:a0:11:31:f9:54:39:ae:ec:fc: 65:3c:d5:8e:5b:40:de:73:42:d8:e2:37:96:2d:39: 2d:26:e4:77:ee:2c:1d:5c:2a:8a:6d:78:5e:8e:e4: 59:2e:80:c8:53:06:93:94:b1:70:1d:9c:54:04:c6: c7:bf:b1:f6:46:48:bc:b4:64:a3:94:32:1f:bf:41: 70:58:d0:09:a9:c6:4a:06:da:86:60:12:ca:7d:04: 7b:3a:33:7b:5c:5d:cf:df:79:7a:41:ac:a7:c6:94: ba:eb:9d:94:18:91:6a:b0:d7:74:e6:90:09:14:4b: 26:3c:69:5a:a0:77:00:c5:e7:60:ff:78:8b:b4:e4: 93:c6:d8:61:3a:d1:34:c6:a6:c2:92:c2:2c:00:d7: bf:3f:9b:9c:0e:a7:16:b8:86:20:5d:14:ba:4f:16: b7:54:c2:f8:a2:db:93:2e:2f:19:0f:52:49:33:d2: 75:ae:f2:83:11:ca:f1:80:fe:2e:1f:1b:11:2b:a7: c5:33:be:a2:e5:c0:c6:76:9c:8c:bd:98:58:59:8b: 9b:62:a1:fa:fe:95:0c:44:f2:18:dc:1a:96:5d:68: 05:10:04:07:17:92:96:4d:e5:a5:6f:34:20:0f:18: e6:52:31:c1:d9:c4:b1:05:29:09:33:e1:f6:9c:c5: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9C:AF:E5:4D:2F:CA:81:93:18:5D:88:B0:59:7C:BE:9A:76:84:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.158.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b6:af:99:51:e2:62:66:ec:11:ae:3e:ae:29:c5:16:25:82: 0f:c7:7b:ce:55:d9:ef:2c:3a:f3:84:a5:21:a6:02:1c:7b:5c: e9:bc:85:ed:9b:12:2a:e1:78:cf:ca:2c:77:7d:f7:b6:e2:e4: 9c:9b:4b:5e:d8:cc:08:fc:2c:26:32:fb:8c:b0:b1:cb:6e:a1: ad:20:28:2e:77:b4:96:00:18:1f:3a:a3:a8:65:53:f2:07:49: 92:b3:dd:92:4e:cb:62:8c:90:51:e1:1b:2f:dd:25:56:1c:71: 66:f0:c2:39:6e:9b:60:e6:3f:9c:1d:d5:14:fa:2e:5c:0f:ed: 90:b5:9e:d5:8e:b5:cb:d0:c2:34:60:30:88:e5:41:ea:a4:06: 05:47:0b:f0:4b:02:e4:93:81:71:30:41:31:97:2b:81:8d:a8: fd:4d:a9:04:29:ce:ff:03:bf:5f:9e:97:9e:36:b1:54:8b:f0: 1f:e9:fa:f2:e5:2e:d5:3f:22:e9:3b:25:d3:a5:3a:c2:b6:71: 15:a3:62:31:80:23:a9:70:dc:90:92:5b:27:b0:f9:c1:e3:70: 76:a2:fa:6b:5e:a2:97:ff:90:68:51:db:a3:85:f3:6c:1a:87: c9:d4:3c:11:d8:e0:91:91:d2:38:41:b5:fd:88:c5:c1:13:9a: a4:00:7d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcclDR3hDG94PAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NGNlOTRhMGUtZWE1OS00NWJkLTk0NGEtMjBjYzM5ZmQwZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLhKA/SgETH5VDmu7PxlPNWOW0Dec0LY4jeW LTktJuR37iwdXCqKbXhejuRZLoDIUwaTlLFwHZxUBMbHv7H2Rki8tGSjlDIfv0Fw WNAJqcZKBtqGYBLKfQR7OjN7XF3P33l6QaynxpS6652UGJFqsNd05pAJFEsmPGla oHcAxedg/3iLtOSTxthhOtE0xqbCksIsANe/P5ucDqcWuIYgXRS6Txa3VML4otuT Li8ZD1JJM9J1rvKDEcrxgP4uHxsRK6fFM76i5cDGdpyMvZhYWYubYqH6/pUMRPIY 3BqWXWgFEAQHF5KWTeWlbzQgDxjmUjHB2cSxBSkJM+H2nMXEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOcr+VNL8qBkxhdiLBZfL6adoSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYwMjRhNjQtN2RjYS0z ZmQ0LWI5YjQtYzRkOTQ5NGZjMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIp78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK2r5lR4mJm7BGuPq4pxRYlgg/He85V2e8sOvOEpSGmAhx7XOm8he2b EirheM/KLHd997bi5JybS17YzAj8LCYy+4ywsctuoa0gKC53tJYAGB86o6hlU/IH SZKz3ZJOy2KMkFHhGy/dJVYccWbwwjlum2DmP5wd1RT6LlwP7ZC1ntWOtcvQwjRg MIjlQeqkBgVHC/BLAuSTgXEwQTGXK4GNqP1NqQQpzv8Dv1+el542sVSL8B/p+vLl LtU/Iuk7JdOlOsK2cRWjYjGAI6lw3JCSWyew+cHjcHai+mteopf/kGhR26OF82wa h8nUPBHY4JGR0jhBtf2IxcETmqQAffk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:05 2026 by rpki-client