$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2398c708-2979-35ba-8043-e39b190d97dd.roa File: 2398c708-2979-35ba-8043-e39b190d97dd.roa (raw, json) Hash identifier: qO6LaxOnTvHBrlpbmNZgPb6+9QMhzSQ27BOI+KtSflM= Subject key identifier: 5A:A1:4E:27:DA:45:03:50:C0:D1:20:15:97:22:56:C0:DE:AD:C1:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA039C83547519D3F8580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2398c708-2979-35ba-8043-e39b190d97dd.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.189.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a0:39:c8:35:47:51:9d:3f:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=b7be25f6-cf0d-49a3-bb1a-97db9e8d9e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:1a:27:09:a5:8a:fc:4a:cf:bd:b5:01:b8: 70:26:1f:82:f0:a5:d8:06:8a:39:0b:da:13:20:91: a4:f9:1b:86:b3:c9:cd:0a:dc:be:99:15:66:f3:d5: 20:08:84:e9:7c:0c:8c:cd:b3:52:10:1a:cb:84:be: d4:02:49:af:0e:19:6a:f3:0d:09:d7:a6:85:2a:f8: fb:26:66:a6:fc:ff:f2:eb:29:19:fc:a5:09:a1:6a: fd:71:d1:b8:9e:2f:62:28:22:73:03:b1:43:c1:ec: e4:12:20:0b:e5:8f:cb:1d:87:4f:fe:84:f4:d0:b1: 8c:5f:72:74:d3:54:84:64:96:a9:ff:d6:62:ac:74: 47:cd:e1:54:f5:38:fa:ef:00:ff:3c:a1:24:9a:c3: 70:20:fb:48:c7:14:35:5e:40:8c:52:4b:4d:3a:95: 09:18:84:1e:e8:00:c2:c5:0f:c3:4d:e2:79:20:12: 76:e5:c5:10:8d:f5:0a:d6:b5:46:4b:3c:c8:a0:e8: 85:7e:27:73:5f:bb:09:96:bb:ac:bb:b2:eb:c0:cf: 5b:84:a0:d9:26:e4:56:8a:29:c8:ad:d9:26:3b:76: ea:85:ea:30:e5:9c:68:76:b3:22:44:4c:d2:d1:4a: 4c:35:e5:fa:c5:9d:35:ca:1f:a6:a1:c5:93:1f:63: 45:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:4E:27:DA:45:03:50:C0:D1:20:15:97:22:56:C0:DE:AD:C1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2398c708-2979-35ba-8043-e39b190d97dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8e:e4:bd:0c:76:48:fd:c0:91:e7:9f:2e:f0:e1:33:60:87: 4f:ad:96:44:76:dc:07:17:a7:c8:06:02:c6:e9:48:54:7d:86: 17:5e:f5:91:8a:52:1f:1a:57:73:da:6e:1e:51:e3:cd:62:d1: d6:3c:55:7b:21:b7:69:99:85:5b:e6:cd:62:0d:b7:71:3f:13: 65:4f:41:11:23:f5:6e:8b:00:f0:9d:48:5e:33:dd:18:91:91: 6c:cd:00:81:5c:57:92:bd:c5:43:9e:73:16:26:95:20:c0:ba: ac:8e:93:0b:19:0a:04:f9:90:ac:5f:4e:1a:51:bb:37:88:6a: 20:fa:a2:0d:06:f7:72:6c:a1:2c:11:4f:18:16:4a:02:f0:d9: 43:4e:c8:59:30:25:f9:9e:33:10:3e:13:2d:f1:f4:25:cc:a5: 76:6c:fc:3b:c3:39:e8:a8:3f:b1:2c:56:51:f5:b5:e7:1d:c0: 2f:49:3d:c3:4d:ea:7e:8d:4f:3e:30:49:c0:70:fe:fa:26:d3: 8f:24:27:79:64:f8:65:0a:4f:23:7b:77:33:98:b9:b1:9d:a0: ca:b5:cf:dd:a7:2e:a3:aa:6e:11:89:27:12:46:af:b3:a7:c3: 19:44:2e:3c:69:07:53:e1:12:7e:fb:d8:2b:67:54:2e:fc:4e: 26:2f:eb:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqA5yDVHUZ0/hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YjdiZTI1ZjYtY2YwZC00OWEzLWJiMWEtOTdkYjllOGQ5ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqAaJwmlivxKz721AbhwJh+C8KXYBoo5C9oT IJGk+RuGs8nNCty+mRVm89UgCITpfAyMzbNSEBrLhL7UAkmvDhlq8w0J16aFKvj7 Jmam/P/y6ykZ/KUJoWr9cdG4ni9iKCJzA7FDwezkEiAL5Y/LHYdP/oT00LGMX3J0 01SEZJap/9ZirHRHzeFU9Tj67wD/PKEkmsNwIPtIxxQ1XkCMUktNOpUJGIQe6ADC xQ/DTeJ5IBJ25cUQjfUK1rVGSzzIoOiFfidzX7sJlrusu7LrwM9bhKDZJuRWiinI rdkmO3bqheow5ZxodrMiREzS0UpMNeX6xZ01yh+mocWTH2NFywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqhTifaRQNQwNEgFZciVsDercFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM5OGM3MDgtMjk3OS0z NWJhLTgwNDMtZTM5YjE5MGQ5N2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6O5L0Mdkj9wJHnny7w4TNgh0+tlkR23AcXp8gGAsbpSFR9hhde9ZGK Uh8aV3Pabh5R481i0dY8VXsht2mZhVvmzWINt3E/E2VPQREj9W6LAPCdSF4z3RiR kWzNAIFcV5K9xUOecxYmlSDAuqyOkwsZCgT5kKxfThpRuzeIaiD6og0G93JsoSwR TxgWSgLw2UNOyFkwJfmeMxA+Ey3x9CXMpXZs/DvDOeioP7EsVlH1tecdwC9JPcNN 6n6NTz4wScBw/vom048kJ3lk+GUKTyN7dzOYubGdoMq1z92nLqOqbhGJJxJGr7On wxlELjxpB1PhEn772CtnVC78TiYv6x0= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:41 2026 by rpki-client