$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29a3f091-2044-333b-b861-ab5b0c56ab88.roa File: 29a3f091-2044-333b-b861-ab5b0c56ab88.roa (raw, json) Hash identifier: qmRvzV4Lz7aau0JF8XMTT7z5jRqzia6CC3v5c21uMuk= Subject key identifier: B8:BA:8F:00:B3:F2:FB:51:17:96:54:99:EE:54:21:FD:67:4C:6D:B3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4D8008C8BDC000283120 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29a3f091-2044-333b-b861-ab5b0c56ab88.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 19527 IP address blocks: 35.217.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4d:80:08:c8:bd:c0:00:28:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=71147861-80f9-47f4-86bf-d8a82bfc4027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:40:97:ea:fe:50:15:38:40:72:22:6c:70: ff:2c:e8:03:62:cd:de:1d:c5:eb:21:f2:35:04:93: 3c:4e:25:8f:e8:85:89:84:ac:fa:72:53:04:5b:35: 93:a2:9a:f7:95:6f:8f:ae:5e:4b:0f:d2:4b:53:7c: a4:80:6c:17:e1:28:da:44:82:7d:29:95:2f:34:d2: b9:12:41:81:a2:46:77:66:0e:fe:9f:9a:83:be:5f: 99:a3:b7:99:f6:58:0f:b7:d4:13:7d:10:9b:6a:92: 85:03:d8:6e:b5:f0:3f:85:62:7f:f4:b4:b8:74:1a: 79:e3:9a:01:46:c6:a8:9a:3a:50:52:0f:7a:98:62: ab:bf:cd:69:89:fb:9f:e7:11:56:73:5e:20:ee:d6: ee:4b:24:cd:e5:d6:21:ba:a2:3e:30:9c:96:38:67: 1e:4f:03:54:c2:b4:c1:58:66:e1:bc:6f:4d:5a:57: 76:67:00:89:60:91:97:a6:06:37:c1:a8:17:60:48: 74:c9:d3:73:53:0e:e9:d3:2c:fe:26:09:15:04:f6: ea:dc:dc:d9:86:03:3e:ea:aa:ab:2c:cc:a0:88:b6: f9:0e:85:05:44:e2:a0:9b:06:a1:b7:b3:ec:ea:29: 67:ce:8b:94:15:86:9f:87:f5:20:7f:e4:bc:e3:bd: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:8F:00:B3:F2:FB:51:17:96:54:99:EE:54:21:FD:67:4C:6D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29a3f091-2044-333b-b861-ab5b0c56ab88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ae:ca:74:e2:c7:5c:f4:76:44:ba:79:3c:a1:f1:bc:c0:13: 9c:a5:e6:c2:9d:7a:12:c0:c7:ed:96:bb:dd:01:23:07:68:b2: 54:e2:83:52:46:5d:42:2b:03:71:26:75:53:ce:25:8e:42:3f: 66:40:8b:8d:4a:db:95:9d:49:38:d1:ea:bb:04:dd:70:0a:c2: 00:6d:99:5b:7e:cf:f5:29:cd:ca:e3:bf:0c:16:65:d6:1f:10: db:9b:42:d2:d7:14:b3:7f:2d:58:56:74:58:b9:3d:24:ca:d8: c2:cf:11:9f:26:9a:8c:03:bd:74:83:f6:95:6b:d7:a7:89:e3: 89:d5:e6:cd:f5:93:18:79:aa:cb:7e:6e:94:e7:25:e2:4f:55: 85:c8:ed:16:9d:72:7a:68:0a:3a:21:9e:7a:1b:6f:d7:c2:ec: 7d:13:e5:3d:34:bd:38:a4:58:a0:b2:d1:97:80:b7:11:f5:b5: c3:17:9c:a0:0c:02:61:a0:fb:d8:db:a1:80:96:d9:c8:c3:09: 12:bf:9b:f5:99:d2:e8:bc:ed:8e:54:37:e5:39:39:93:5a:a7: d1:ee:57:a9:66:86:c2:fd:c9:23:31:5a:fc:79:c2:71:cc:6a: 67:30:14:3a:79:b2:2c:b1:e2:66:5f:18:14:a4:6c:7a:d0:52: 0a:43:df:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqk2ACMi9wAAoMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NzExNDc4NjEtODBmOS00N2Y0LTg2YmYtZDhhODJiZmM0MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRVAl+r+UBU4QHIibHD/LOgDYs3eHcXrIfI1 BJM8TiWP6IWJhKz6clMEWzWTopr3lW+Prl5LD9JLU3ykgGwX4SjaRIJ9KZUvNNK5 EkGBokZ3Zg7+n5qDvl+Zo7eZ9lgPt9QTfRCbapKFA9hutfA/hWJ/9LS4dBp545oB RsaomjpQUg96mGKrv81pifuf5xFWc14g7tbuSyTN5dYhuqI+MJyWOGceTwNUwrTB WGbhvG9NWld2ZwCJYJGXpgY3wagXYEh0ydNzUw7p0yz+JgkVBPbq3NzZhgM+6qqr LMygiLb5DoUFROKgmwaht7Ps6ilnzouUFYafh/Ugf+S8472e4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi6jwCz8vtRF5ZUme5UIf1nTG2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjlhM2YwOTEtMjA0NC0z MzNiLWI4NjEtYWI1YjBjNTZhYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeuynTix1z0dkS6eTyh8bzAE5yl5sKdehLAx+2Wu90BIwdoslTig1JG XUIrA3EmdVPOJY5CP2ZAi41K25WdSTjR6rsE3XAKwgBtmVt+z/UpzcrjvwwWZdYf ENubQtLXFLN/LVhWdFi5PSTK2MLPEZ8mmowDvXSD9pVr16eJ44nV5s31kxh5qst+ bpTnJeJPVYXI7RadcnpoCjohnnobb9fC7H0T5T00vTikWKCy0ZeAtxH1tcMXnKAM AmGg+9jboYCW2cjDCRK/m/WZ0ui87Y5UN+U5OZNap9HuV6lmhsL9ySMxWvx5wnHM amcwFDp5siyx4mZfGBSkbHrQUgpD33A= -----END CERTIFICATE-----Generated at Thu Mar 19 01:50:05 2026 by rpki-client