$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa File: 139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa (raw, json) Hash identifier: 5yLZHl1XLivVSR6wFRBTU7p2vAi0HHUdeHOpzKB8OlY= Subject key identifier: CE:5C:35:C6:7C:F2:20:A5:D5:F4:69:79:79:DF:C4:5E:45:50:54:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA7CAAC979C7497E838A98 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.238.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:7c:aa:c9:79:c7:49:7e:83:8a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1fce9121-8f52-4578-b5c0-cf65e156c27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4e:4e:b2:12:fc:01:f9:50:46:4b:a6:7a:16: af:7e:25:53:79:d1:fd:1b:61:28:84:70:89:64:7f: 63:e7:23:93:dc:df:e2:01:8e:63:9a:dc:7a:35:47: 41:9e:37:83:0f:95:62:0c:72:4b:78:8d:e3:ba:3a: 9a:0e:be:52:7d:e6:da:cc:3f:74:70:ef:02:ca:40: 5a:b3:3c:1b:00:5f:fb:df:ef:f3:bc:17:ef:15:11: 3d:66:c7:86:cb:b9:21:96:7a:10:45:a6:04:91:09: 43:b0:07:88:ef:c2:59:b6:5f:a6:f0:c3:c3:70:20: 21:79:e7:b5:67:57:cd:2f:45:4c:18:93:bb:ef:4f: 9e:46:ab:b4:80:6d:e4:94:87:15:24:96:6b:ac:0b: 09:60:97:a1:7f:ae:7c:e5:fb:3e:02:cf:97:78:b7: 93:ab:a3:ce:7c:8e:f8:44:df:46:0c:82:49:5a:fc: e7:58:81:36:f5:d0:35:62:e5:5c:8b:43:e7:56:f9: 62:af:52:09:72:7a:68:cf:6a:8f:fc:3f:e6:07:5e: 49:0b:43:29:31:4f:69:4c:08:a0:52:1e:60:2d:e7: 15:b6:9d:18:92:48:81:b2:5d:49:53:fb:05:03:ee: 4a:c5:b0:65:ae:91:0a:d3:b3:f8:b1:f4:df:8a:00: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:35:C6:7C:F2:20:A5:D5:F4:69:79:79:DF:C4:5E:45:50:54:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:24:b1:3f:78:5d:14:83:13:c1:cb:92:4a:04:61:cf:be:05: 69:ae:a6:df:84:9c:a1:fc:91:fc:e7:a0:f8:86:b9:39:fd:21: 2b:25:90:bf:cf:1d:e7:78:a0:a1:06:7e:56:4d:6b:c0:54:c8: 73:26:30:1a:9d:11:0f:5c:de:aa:e4:7f:9e:71:59:50:b4:d1: 36:64:1d:84:1b:f2:39:0a:d4:0c:65:60:bd:12:8c:20:1d:58: 2a:1d:54:3e:d6:71:b8:26:95:b4:89:06:33:ad:ea:c9:2c:e1: 6d:58:64:42:ab:a3:b9:ed:57:5f:02:aa:7c:f4:71:53:96:ec: ed:f8:b5:5e:0c:a9:97:89:87:95:0a:cf:ab:0b:90:d5:7f:9f: 45:1c:99:71:44:5a:03:29:22:57:db:94:8e:94:68:e5:07:65: 93:07:56:ac:87:e7:79:3d:67:b8:d4:b0:6e:f0:34:f5:2b:25: 34:b3:30:6c:c0:5e:51:86:bf:0c:28:bb:19:8f:9e:1f:73:cd: 51:78:81:d9:a6:7f:7d:dc:fe:f8:ba:b1:02:8a:c7:de:c1:7d: 3a:fe:a9:52:e0:9c:2e:75:c0:89:f5:5f:64:5f:88:b6:71:fc: 4e:18:9d:49:29:31:75:31:90:90:05:62:51:0d:b7:13:a0:7b: 3e:38:72:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnyqyXnHSX6DipgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWZjZTkxMjEtOGY1Mi00NTc4LWI1YzAtY2Y2NWUxNTZjMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE5OshL8AflQRkumehavfiVTedH9G2EohHCJ ZH9j5yOT3N/iAY5jmtx6NUdBnjeDD5ViDHJLeI3jujqaDr5SfebazD90cO8CykBa szwbAF/73+/zvBfvFRE9ZseGy7khlnoQRaYEkQlDsAeI78JZtl+m8MPDcCAheee1 Z1fNL0VMGJO770+eRqu0gG3klIcVJJZrrAsJYJehf6585fs+As+XeLeTq6POfI74 RN9GDIJJWvznWIE29dA1YuVci0PnVvlir1IJcnpoz2qP/D/mB15JC0MpMU9pTAig Uh5gLecVtp0YkkiBsl1JU/sFA+5KxbBlrpEK07P4sfTfigAvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5cNcZ88iCl1fRpeXnfxF5FUFT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTM5ZGZkNTYtYWU2OC0z MjdhLWIxMWUtMDBhOTdmZTlhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8ksT94XRSDE8HLkkoEYc++BWmupt+EnKH8kfznoPiGuTn9ISslkL/P Hed4oKEGflZNa8BUyHMmMBqdEQ9c3qrkf55xWVC00TZkHYQb8jkK1AxlYL0SjCAd WCodVD7WcbgmlbSJBjOt6sks4W1YZEKro7ntV18Cqnz0cVOW7O34tV4MqZeJh5UK z6sLkNV/n0UcmXFEWgMpIlfblI6UaOUHZZMHVqyH53k9Z7jUsG7wNPUrJTSzMGzA XlGGvwwouxmPnh9zzVF4gdmmf33c/vi6sQKKx97BfTr+qVLgnC51wIn1X2RfiLZx /E4YnUkpMXUxkJAFYlENtxOgez44ctc= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:11 2026 by rpki-client