$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa File: cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa (raw, json) Hash identifier: 9TerVfdxEnlmw+uT4MRkbJkv9bBYcA4CMfRtAqlV4kU= Subject key identifier: B8:50:9C:DB:85:32:77:AB:C6:8F:69:D9:BD:6E:E9:56:CE:22:D6:BA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C45A7457A6BD4C06F42C3D580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.121.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:45:7a:6b:d4:c0:6f:42:c3:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=9541af10-d07d-4878-8479-9298cb891e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:c4:f5:18:d1:5c:88:9e:cc:19:a8:0c:a8: 5e:e3:93:bb:ee:71:30:01:db:91:05:f8:53:0b:98: ed:31:c8:42:a6:9d:74:6e:31:7d:21:38:95:c1:ab: cc:d9:a7:e9:71:7e:2e:cf:4c:a3:7c:4e:d2:2a:f3: d5:18:14:8b:8e:a9:99:69:60:2c:b2:31:6f:59:b1: b1:70:a6:70:de:c4:9a:b8:74:69:7e:2e:e9:b5:a4: 47:02:d4:14:02:73:37:aa:84:f9:59:34:09:a7:bb: b3:40:9a:43:b0:6b:13:79:ca:ec:80:7a:87:2c:c9: 3b:f7:78:d4:f3:b1:fc:b1:8d:f7:59:c3:91:36:5a: 90:a6:95:67:31:c6:75:65:cf:c3:08:e8:9d:1d:7f: 97:17:11:0a:b9:8b:cf:bb:11:eb:ab:00:76:6d:e4: 1b:a3:e7:0b:6a:8b:00:a4:6e:e3:6a:22:d2:b7:22: 83:88:60:95:9f:91:1f:86:cf:c6:7e:8f:15:b7:35: 6f:dc:42:3d:a8:5c:72:38:11:db:46:34:6d:b4:6f: 74:01:56:b9:d0:8b:a2:52:dc:ab:80:7c:45:43:73: 81:19:63:15:db:79:08:a9:f3:84:08:50:10:89:20: 05:ba:77:07:b1:ba:0b:74:fa:a9:47:83:26:34:8c: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:50:9C:DB:85:32:77:AB:C6:8F:69:D9:BD:6E:E9:56:CE:22:D6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf82e9c3-51b5-3d3d-84d1-c3e47c960b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0f:2f:b3:da:df:32:08:8b:58:f0:37:bd:48:d7:48:ed:1e: c2:f5:ac:af:7f:62:19:3b:1c:06:99:31:4e:bc:0c:5b:87:f4: 7c:cc:9c:ce:c1:85:7e:1f:7a:d5:51:da:b8:8b:cf:87:13:31: 5a:23:8a:78:e1:86:ad:0f:18:e7:4b:c6:c2:98:27:f1:c3:dd: 33:5b:9e:96:68:f9:f9:1c:91:bd:7f:9a:c1:d2:6c:78:c7:dc: 84:17:db:03:e3:4d:27:5b:a3:db:58:80:9b:7c:0f:b9:3c:30: 5d:ee:c8:d8:a2:62:44:dd:d3:73:bb:e3:d4:65:13:0c:2c:40: 91:63:0b:77:21:44:8a:8c:58:8c:46:7a:c3:69:8c:5f:fb:4a: ac:9d:29:73:e8:6e:18:83:9e:3e:31:f0:51:39:0c:1d:b6:1e: 0d:39:93:67:f4:dd:40:44:6c:c8:ac:c8:79:6e:55:43:cc:79: 46:60:ab:f8:bb:2c:b4:87:26:2a:2a:d3:73:f6:48:22:f7:33: 2c:89:bc:a8:7a:8f:d9:55:12:e1:48:cc:30:8f:0b:42:2f:cd: 05:da:48:9c:d1:f8:c6:14:b5:79:0d:b3:ff:c2:95:d3:da:eb: d4:af:6b:36:8d:bb:65:00:5b:e9:a4:eb:a1:96:f6:64:8a:45: dd:78:49:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp0V6a9TAb0LD1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OTU0MWFmMTAtZDA3ZC00ODc4LTg0NzktOTI5OGNiODkxZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0HE9RjRXIiezBmoDKhe45O77nEwAduRBfhT C5jtMchCpp10bjF9ITiVwavM2afpcX4uz0yjfE7SKvPVGBSLjqmZaWAssjFvWbGx cKZw3sSauHRpfi7ptaRHAtQUAnM3qoT5WTQJp7uzQJpDsGsTecrsgHqHLMk793jU 87H8sY33WcORNlqQppVnMcZ1Zc/DCOidHX+XFxEKuYvPuxHrqwB2beQbo+cLaosA pG7jaiLStyKDiGCVn5Efhs/Gfo8VtzVv3EI9qFxyOBHbRjRttG90AVa50IuiUtyr gHxFQ3OBGWMV23kIqfOECFAQiSAFuncHsboLdPqpR4MmNIwgJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhQnNuFMnerxo9p2b1u6VbOIta6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y4MmU5YzMtNTFiNS0z ZDNkLTg0ZDEtYzNlNDdjOTYwYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcPL7Pa3zIIi1jwN71I10jtHsL1rK9/Yhk7HAaZMU68DFuH9HzMnM7B hX4fetVR2riLz4cTMVojinjhhq0PGOdLxsKYJ/HD3TNbnpZo+fkckb1/msHSbHjH 3IQX2wPjTSdbo9tYgJt8D7k8MF3uyNiiYkTd03O749RlEwwsQJFjC3chRIqMWIxG esNpjF/7SqydKXPobhiDnj4x8FE5DB22Hg05k2f03UBEbMisyHluVUPMeUZgq/i7 LLSHJioq03P2SCL3MyyJvKh6j9lVEuFIzDCPC0IvzQXaSJzR+MYUtXkNs//CldPa 69SvazaNu2UAW+mk66GW9mSKRd14SSo= -----END CERTIFICATE-----Generated at Mon Mar 2 08:38:52 2026 by rpki-client