$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa File: 36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa (raw, json) Hash identifier: rd9rDYRvK7/H4aayeVCmC7JFgsPH0HCF3DL0xq+6iyg= Subject key identifier: 85:ED:AB:73:61:A0:2B:11:F7:7B:6A:92:2E:DB:65:18:FB:ED:E0:BF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3C553861FB573EFF3BD0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.228.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3c:55:38:61:fb:57:3e:ff:3b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=8bc4de6e-afcb-4405-80b6-070ae9d5e8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ae:61:32:0e:05:00:04:d8:c0:90:c0:bf:c3: 4d:f1:46:b7:bf:9f:9f:60:13:56:7a:3d:dd:79:d7: 87:17:7e:87:e6:d8:fc:9e:1c:2c:21:90:14:68:3a: 8a:d9:ca:1a:a0:68:a5:8c:2b:96:ef:9c:c7:42:6b: 6c:83:ad:fa:83:67:e3:1f:60:49:9e:5b:a1:df:ea: 13:fa:06:66:b3:a8:19:86:72:93:20:3a:26:a3:03: a4:4e:ea:71:25:d9:a1:0e:da:30:c4:00:9f:70:fb: 18:62:bb:fe:05:21:e2:70:79:65:b4:1d:49:8a:5e: 9e:05:5a:3c:1e:2f:56:8d:3f:47:d9:f4:b1:f4:11: c4:87:c4:15:8f:74:12:e8:b3:77:34:69:0d:5b:2f: bd:ce:de:54:7b:e2:a1:4f:98:3e:0d:b9:87:be:41: 47:dc:8d:98:69:d3:a2:0e:86:e3:c9:b2:cc:4f:bb: cc:96:4a:5b:ce:c8:b4:a4:ba:d6:cc:1b:0c:0f:ea: 89:6f:eb:3c:9b:d3:33:ae:a3:12:4e:19:61:cf:48: 94:15:34:c1:f2:1f:c1:73:37:e7:5e:36:1a:b9:9d: 01:98:9e:a9:22:e2:d0:9f:2c:a4:ed:75:50:a9:33: 70:b1:47:81:19:60:f3:24:63:a2:2c:9b:ce:42:d0: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:AB:73:61:A0:2B:11:F7:7B:6A:92:2E:DB:65:18:FB:ED:E0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:af:74:2e:cc:2b:93:8c:63:b6:03:9a:1d:b7:a9:74:e1:0b: f7:64:64:a0:76:49:08:8d:d9:79:95:48:9e:c3:48:0d:88:af: 90:9d:fc:29:19:c7:2f:f7:68:18:71:9b:59:0a:13:97:ae:95: ad:4b:07:1f:59:c5:0e:52:de:7f:2c:6e:c2:a7:81:e7:d0:7c: af:b2:1e:22:c7:51:b3:39:9d:84:bd:ef:d4:63:73:9c:97:b7: 50:1e:2a:6d:41:cd:65:01:91:a4:b3:c5:ea:2e:33:a8:50:7a: 63:a5:d9:7f:49:78:d4:67:1c:fb:45:04:fd:ea:59:ca:1e:24: 5b:99:85:fc:5e:61:9c:00:8a:c0:0b:00:3f:ab:80:3d:80:ee: e8:cb:f1:48:02:21:7e:aa:22:34:a5:df:c8:07:58:88:44:6b: 1b:71:24:a5:2f:06:a5:3e:cb:27:c3:01:c7:05:e9:79:63:ac: b9:3e:e5:9a:6a:34:16:a5:4e:08:d2:39:40:a8:29:3f:18:cb: 4a:93:c9:c6:46:bc:a0:7f:43:0a:75:d5:5e:c3:84:a9:8e:31: 99:30:63:b6:ec:f2:1a:68:8b:42:c4:21:6a:cf:cb:f2:bc:aa: 44:01:20:4c:bc:0b:36:ae:99:08:d9:ff:54:94:73:58:c5:ce: e5:39:10:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjxVOGH7Vz7/O9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OGJjNGRlNmUtYWZjYi00NDA1LTgwYjYtMDcwYWU5ZDVlOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq5hMg4FAATYwJDAv8NN8Ua3v5+fYBNWej3d edeHF36H5tj8nhwsIZAUaDqK2coaoGiljCuW75zHQmtsg636g2fjH2BJnluh3+oT +gZms6gZhnKTIDomowOkTupxJdmhDtowxACfcPsYYrv+BSHicHlltB1Jil6eBVo8 Hi9WjT9H2fSx9BHEh8QVj3QS6LN3NGkNWy+9zt5Ue+KhT5g+DbmHvkFH3I2YadOi DobjybLMT7vMlkpbzsi0pLrWzBsMD+qJb+s8m9MzrqMSThlhz0iUFTTB8h/Bczfn XjYauZ0BmJ6pIuLQnyyk7XVQqTNwsUeBGWDzJGOiLJvOQtAoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXtq3NhoCsR93tqki7bZRj77eC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzZkZDJiNGUtMzVjNy0z ZWU0LThjN2ItZThlY2NkMzA1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+QgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqvdC7MK5OMY7YDmh23qXThC/dkZKB2SQiN2XmVSJ7DSA2Ir5Cd/CkZ xy/3aBhxm1kKE5eula1LBx9ZxQ5S3n8sbsKngefQfK+yHiLHUbM5nYS979Rjc5yX t1AeKm1BzWUBkaSzxeouM6hQemOl2X9JeNRnHPtFBP3qWcoeJFuZhfxeYZwAisAL AD+rgD2A7ujL8UgCIX6qIjSl38gHWIhEaxtxJKUvBqU+yyfDAccF6XljrLk+5Zpq NBalTgjSOUCoKT8Yy0qTycZGvKB/Qwp11V7DhKmOMZkwY7bs8hpoi0LEIWrPy/K8 qkQBIEy8CzaumQjZ/1SUc1jFzuU5EAs= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:12 2026 by rpki-client