$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa File: 214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa (raw, json) Hash identifier: tOrSN2huBWWrhh+uKlD0MM5RJ9d/ruTMRyPFlVuLAM0= Subject key identifier: F2:B9:48:FA:00:AC:27:B7:38:C3:40:BD:A6:8B:AC:DA:A5:F1:18:B8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AABD053F973A14A0441320 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.186.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:bd:05:3f:97:3a:14:a0:44:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e77d80d1-6343-4cfd-842d-c03adf1bda51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a4:96:08:16:59:f4:30:6c:de:bc:e0:d5:56: 52:6c:35:27:a8:ab:f0:71:d2:95:64:3a:f1:cb:ff: fd:84:5d:78:b9:cb:2a:e6:3d:b4:65:19:3d:ff:10: 39:41:26:c4:a1:a1:81:d4:cf:6a:27:fa:49:49:7a: 53:d3:ca:57:b4:14:f3:bb:9d:7f:3a:1f:ef:26:82: f0:a4:4c:53:06:e2:fd:74:03:9e:e9:bd:b5:1a:32: 79:4d:44:d8:f2:c8:c7:5c:01:b3:c9:09:10:50:5d: 94:f9:9b:63:08:6c:09:97:f7:f4:2a:38:1d:fb:86: 78:d0:18:b1:39:f1:30:c9:23:2c:e2:79:02:a4:a3: b0:21:5e:95:af:fd:d4:e7:b9:34:a7:5b:81:ba:68: 9c:17:4f:b4:95:d5:85:17:ed:4f:d0:4e:4b:b8:91: 5e:dd:69:5f:3e:05:52:99:4f:fc:57:46:cf:60:92: d0:cb:ec:3d:7d:bf:0c:d6:c1:a6:52:a0:bb:47:91: 9d:50:15:13:95:f4:69:cc:8e:27:2f:50:09:c5:2d: 7b:08:db:e3:d9:6a:cf:83:2e:89:c0:bf:ef:8f:c9: 9c:20:7c:3e:d1:68:0e:02:40:ba:b4:2f:35:3e:1a: 05:40:53:4f:2b:81:73:5f:20:54:6a:4d:c6:8e:f4: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B9:48:FA:00:AC:27:B7:38:C3:40:BD:A6:8B:AC:DA:A5:F1:18:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/214d71ce-f7c8-3cb3-9c94-23a6772318f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.186.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:10:61:4c:47:28:85:a9:9c:2e:f8:24:92:43:3a:3a:21:4f: 46:2b:32:be:a8:29:d0:2f:b4:84:5a:c5:a0:b2:0d:6d:83:ba: 6a:4f:81:10:a3:49:60:79:99:2c:e1:ed:1c:16:32:c0:86:68: 8d:ed:0e:d5:e8:39:a7:69:37:63:a2:a7:7c:04:37:53:e2:ae: d0:a3:b5:22:13:e6:3b:17:17:f1:1e:2a:b9:0f:7c:92:d4:fa: ea:84:97:a3:1f:36:e1:e1:f0:9d:b6:06:8f:47:6a:96:93:66: 66:f2:59:14:8c:5b:b8:b7:de:4d:93:b4:dd:f5:b9:c4:0c:04: c9:0d:87:dc:4e:c2:37:e5:d4:e9:42:77:6b:5b:4f:35:44:bc: 63:96:ba:29:27:7a:2e:d9:bd:43:94:46:d6:99:a8:3d:38:ad: 97:36:29:ea:67:a7:7f:de:86:a1:34:a9:ab:d9:1d:5b:3a:ed: 23:e5:be:17:53:73:ca:22:0d:90:25:20:d9:32:f5:c3:06:4e: f3:95:0d:9f:45:92:ba:2d:54:d2:14:36:e3:34:bb:39:01:03: 88:72:c2:60:ee:f8:4a:02:fa:38:6a:f5:1b:4a:57:0b:0f:c2: dc:24:3d:26:56:f0:e1:78:33:ba:13:b5:e1:d2:02:5a:8a:0c: ea:c9:b8:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqr0FP5c6FKBEEyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTc3ZDgwZDEtNjM0My00Y2ZkLTg0MmQtYzAzYWRmMWJkYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKSWCBZZ9DBs3rzg1VZSbDUnqKvwcdKVZDrx y//9hF14ucsq5j20ZRk9/xA5QSbEoaGB1M9qJ/pJSXpT08pXtBTzu51/Oh/vJoLw pExTBuL9dAOe6b21GjJ5TUTY8sjHXAGzyQkQUF2U+ZtjCGwJl/f0Kjgd+4Z40Bix OfEwySMs4nkCpKOwIV6Vr/3U57k0p1uBumicF0+0ldWFF+1P0E5LuJFe3WlfPgVS mU/8V0bPYJLQy+w9fb8M1sGmUqC7R5GdUBUTlfRpzI4nL1AJxS17CNvj2WrPgy6J wL/vj8mcIHw+0WgOAkC6tC81PhoFQFNPK4FzXyBUak3GjvS1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK5SPoArCe3OMNAvaaLrNql8Ri4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjE0ZDcxY2UtZjdjOC0z Y2IzLTljOTQtMjNhNjc3MjMxOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0QYUxHKIWpnC74JJJDOjohT0YrMr6oKdAvtIRaxaCyDW2DumpPgRCj SWB5mSzh7RwWMsCGaI3tDtXoOadpN2Oip3wEN1PirtCjtSIT5jsXF/EeKrkPfJLU +uqEl6MfNuHh8J22Bo9HapaTZmbyWRSMW7i33k2TtN31ucQMBMkNh9xOwjfl1OlC d2tbTzVEvGOWuiknei7ZvUOURtaZqD04rZc2Kepnp3/ehqE0qavZHVs67SPlvhdT c8oiDZAlINky9cMGTvOVDZ9FkrotVNIUNuM0uzkBA4hywmDu+EoC+jhq9RtKVwsP wtwkPSZW8OF4M7oTteHSAlqKDOrJuJk= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:11 2026 by rpki-client