$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa File: dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa (raw, json) Hash identifier: kwwkAFI0FBVJsFHBuBfcslDZ/kzHRyDTeOzIr/Oafxw= Subject key identifier: 19:5A:8F:F6:4F:68:15:F3:3F:36:52:A0:E5:4A:C1:B8:B0:69:98:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C48719D0CB477BA29D1939480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.140.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:9d:0c:b4:77:ba:29:d1:93:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=442d82cb-f618-4b99-8493-4738ae2b20bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:7e:9f:e4:49:d7:f3:cd:d2:ce:9c:fd:ab: 28:c9:84:d9:65:0b:2c:0e:c5:00:e3:08:4b:ed:3e: 27:76:d7:a4:57:2b:f1:c7:5f:c4:fa:1f:ab:ff:fb: 6c:41:ac:43:64:8d:e4:b6:36:f0:05:16:b1:c5:f0: 6f:78:5b:1f:13:11:bd:3f:41:95:0f:4d:df:73:63: ca:43:87:2c:ea:39:3a:52:17:df:e3:e7:aa:3a:b1: 48:5a:81:2a:85:35:12:74:c6:55:5b:33:ce:03:2a: 77:ce:4a:b1:d9:21:b3:5e:49:dc:43:61:f6:f8:d4: 8d:2b:35:c4:92:a1:f9:96:11:0e:61:7b:61:6d:e9: e4:cf:44:ab:90:44:fe:e4:6a:44:04:f2:18:ac:d8: 93:1d:33:63:06:d4:7b:53:18:bb:d9:e5:bd:47:e7: 30:eb:64:d4:e5:e6:3e:e5:c9:1b:7b:60:62:11:42: ff:9e:00:09:48:ca:d0:64:c3:a2:1d:55:e1:da:0d: f2:53:ec:de:29:19:c0:6b:1e:4d:34:c5:c7:7a:c0: 11:31:eb:1f:c4:42:3f:15:f1:8c:7a:2f:9b:b0:4d: c4:34:f8:74:0e:da:5c:81:61:03:ed:89:87:01:6f: fa:b2:bd:7e:42:0a:a0:ca:12:0e:8c:8e:fa:e5:30: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5A:8F:F6:4F:68:15:F3:3F:36:52:A0:E5:4A:C1:B8:B0:69:98:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e5:e6:39:bd:ab:71:5b:b0:70:eb:79:4e:9f:09:48:3f:1b: 02:16:20:39:24:3c:a9:ef:22:e3:5e:23:78:97:41:24:20:78: dd:ff:f0:c6:0c:82:14:61:37:ff:30:f4:f9:2f:2c:9b:05:09: 27:91:06:08:31:6a:e4:01:2f:0b:9e:b7:ab:a7:00:b8:d5:56: 5b:81:c9:bf:99:63:dd:e1:23:16:c1:ed:e9:06:83:1e:f3:19: c3:e1:27:16:1a:21:6b:f0:e0:de:fc:ea:80:dd:35:b7:14:df: a6:38:a2:25:d4:b2:37:dd:eb:e0:7b:d7:80:e6:e9:9e:28:76: d7:26:bf:50:ab:8c:d5:0d:d0:69:46:0a:0d:d2:f5:ed:7f:ca: 85:2a:44:75:a2:59:98:fd:93:7c:a6:55:20:ea:ab:d9:f3:a7: d6:79:29:b0:a4:2f:c1:6e:4f:af:e7:88:4f:fb:a3:d0:b6:fb: c8:4a:9b:95:48:77:ca:07:4f:8b:65:10:42:9e:15:a0:cb:b0: 59:06:80:37:07:51:1f:ce:1b:3b:13:a0:88:f8:1b:5a:86:e4: d8:af:6c:35:52:7e:b7:29:95:2c:7b:d2:7f:48:c9:1a:09:1d: cb:4f:5e:51:2a:1e:0f:a9:1e:c7:72:84:6e:9d:06:10:52:29: 1b:3c:cc:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcZ0MtHe6KdGTlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NDQyZDgyY2ItZjYxOC00Yjk5LTg0OTMtNDczOGFlMmIyMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YZ+n+RJ1/PN0s6c/asoyYTZZQssDsUA4whL 7T4ndtekVyvxx1/E+h+r//tsQaxDZI3ktjbwBRaxxfBveFsfExG9P0GVD03fc2PK Q4cs6jk6Uhff4+eqOrFIWoEqhTUSdMZVWzPOAyp3zkqx2SGzXkncQ2H2+NSNKzXE kqH5lhEOYXthbenkz0SrkET+5GpEBPIYrNiTHTNjBtR7Uxi72eW9R+cw62TU5eY+ 5ckbe2BiEUL/ngAJSMrQZMOiHVXh2g3yU+zeKRnAax5NNMXHesARMesfxEI/FfGM ei+bsE3ENPh0DtpcgWED7YmHAW/6sr1+QgqgyhIOjI765TBLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlaj/ZPaBXzPzZSoOVKwbiwaZiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGM4YzMzYmQtNWE1MS0z YjZiLTljOWMtZWU4YjJjYTE4YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzl5jm9q3FbsHDreU6fCUg/GwIWIDkkPKnvIuNeI3iXQSQgeN3/8MYM ghRhN/8w9PkvLJsFCSeRBggxauQBLwuet6unALjVVluByb+ZY93hIxbB7ekGgx7z GcPhJxYaIWvw4N786oDdNbcU36Y4oiXUsjfd6+B714Dm6Z4odtcmv1CrjNUN0GlG Cg3S9e1/yoUqRHWiWZj9k3ymVSDqq9nzp9Z5KbCkL8FuT6/niE/7o9C2+8hKm5VI d8oHT4tlEEKeFaDLsFkGgDcHUR/OGzsToIj4G1qG5NivbDVSfrcplSx70n9IyRoJ HctPXlEqHg+pHsdyhG6dBhBSKRs8zHM= -----END CERTIFICATE-----Generated at Mon Mar 2 15:10:44 2026 by rpki-client