$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa File: 24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa (raw, json) Hash identifier: nEoGF8WRwFA2UjJsia8/btM8kunG3/KJ9o3tjlaJJeQ= Subject key identifier: 10:99:DE:4C:AA:4C:5A:5D:0E:20:1E:D9:F7:99:C3:7F:F1:CC:36:03 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA8E94774DB4528EC83280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.234.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:8e:94:77:4d:b4:52:8e:c8:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=88e6b189-1f7f-4cac-9914-b3d4ccb1ef17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:11:94:5d:b3:10:00:d2:6c:ed:67:60:84: e2:b7:0a:ba:38:a4:e9:24:e7:10:38:bb:8d:9d:d0: 98:b9:a4:ec:40:3b:1a:c6:01:90:2f:59:42:3c:61: 61:5b:e0:01:24:48:8e:9c:22:81:23:0f:9d:1b:b3: 78:fe:bf:05:91:bf:27:fd:47:ec:53:e1:3a:98:5d: 85:41:a5:19:55:65:16:0a:b3:3a:5b:89:37:da:8d: 5f:b5:03:9a:96:03:c2:26:c0:14:0c:e4:f5:53:1d: 83:27:84:37:55:04:55:67:98:67:73:f1:5e:0c:56: 9f:e3:0a:51:e4:19:40:db:12:79:39:ea:a3:84:1b: 5b:93:09:83:40:75:9c:41:88:1d:73:99:2e:8a:01: 3f:99:87:f9:ec:79:df:b9:b6:b4:c8:c5:4e:1f:95: 85:ed:f9:73:47:f1:e4:82:8e:6f:67:87:04:6e:4a: e7:eb:fe:2b:7a:8e:ab:7b:49:f1:a3:d5:03:9b:f4: 64:81:21:d4:46:10:62:ea:ea:54:05:18:a3:1f:a3: 9c:00:22:7a:9a:f2:7a:6a:4d:de:e2:69:15:2f:c5: 3a:67:98:ad:ae:c1:9d:3b:f9:e9:73:09:5f:1a:6c: 71:82:14:3e:d7:c6:6c:22:0f:5d:dc:fc:d2:88:20: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:99:DE:4C:AA:4C:5A:5D:0E:20:1E:D9:F7:99:C3:7F:F1:CC:36:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.234.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9d:93:73:ba:74:ab:41:3a:48:a2:70:dc:39:01:65:46:27: 96:bc:63:20:23:a7:0e:7c:c2:0f:b0:15:43:ec:8c:a9:ac:5b: f2:e3:6c:06:7a:b9:42:e5:5b:ea:d2:e5:66:b1:b0:a7:34:28: e8:97:81:1b:1e:0e:34:57:04:3b:f7:80:5c:d4:7e:26:82:8b: 93:9f:32:2a:35:b6:4d:0b:b3:31:1f:b7:94:d3:cd:d7:9b:04: d8:9c:53:2f:5c:fd:ae:70:53:ca:f2:a1:1d:51:71:c4:c8:3a: 64:b3:19:3f:d4:2c:3c:23:df:ae:25:fa:ea:88:e2:fa:0c:4a: ae:71:04:cd:b4:a8:67:8f:c1:d9:33:5c:6d:54:17:3d:cf:c0: f5:dc:07:ce:73:54:5f:fb:98:70:1f:fa:d6:2b:1a:b9:8f:36: 90:b1:99:8d:f1:83:49:10:71:f9:62:79:7e:17:d5:2e:8d:bf: a5:38:14:a3:2f:dd:11:33:90:9a:d5:7a:07:da:f9:41:14:de: a8:9f:cb:d3:c0:ce:0c:9c:06:88:24:e6:27:69:af:89:a4:ac: 0c:4e:a1:3a:c5:bd:31:a3:04:aa:e4:3f:b4:ab:bb:93:28:ed: 8c:1d:26:04:d5:ed:0a:bf:79:70:84:dd:62:5b:1f:fe:28:72: b4:4e:ce:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqo6Ud020Uo7IMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODhlNmIxODktMWY3Zi00Y2FjLTk5MTQtYjNkNGNjYjFlZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgcRlF2zEADSbO1nYITitwq6OKTpJOcQOLuN ndCYuaTsQDsaxgGQL1lCPGFhW+ABJEiOnCKBIw+dG7N4/r8Fkb8n/UfsU+E6mF2F QaUZVWUWCrM6W4k32o1ftQOalgPCJsAUDOT1Ux2DJ4Q3VQRVZ5hnc/FeDFaf4wpR 5BlA2xJ5OeqjhBtbkwmDQHWcQYgdc5kuigE/mYf57Hnfuba0yMVOH5WF7flzR/Hk go5vZ4cEbkrn6/4reo6re0nxo9UDm/RkgSHURhBi6upUBRijH6OcACJ6mvJ6ak3e 4mkVL8U6Z5itrsGdO/npcwlfGmxxghQ+18ZsIg9d3PzSiCC/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCZ3kyqTFpdDiAe2feZw3/xzDYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjRlOGMwYTMtOTRkNi0z MTIwLThjZjMtN2E2NmYxMWY0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI+pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGdk3O6dKtBOkiicNw5AWVGJ5a8YyAjpw58wg+wFUPsjKmsW/LjbAZ6 uULlW+rS5WaxsKc0KOiXgRseDjRXBDv3gFzUfiaCi5OfMio1tk0LszEft5TTzdeb BNicUy9c/a5wU8ryoR1RccTIOmSzGT/ULDwj364l+uqI4voMSq5xBM20qGePwdkz XG1UFz3PwPXcB85zVF/7mHAf+tYrGrmPNpCxmY3xg0kQcflieX4X1S6Nv6U4FKMv 3REzkJrVegfa+UEU3qify9PAzgycBogk5idpr4mkrAxOoTrFvTGjBKrkP7Sru5Mo 7YwdJgTV7Qq/eXCE3WJbH/4ocrROztA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:59 2026 by rpki-client