$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa File: 3cf55895-668b-3307-b6c4-4999da4a3b04.roa (raw, json) Hash identifier: TxdyTylkBRHE/Aqqlm5sR/64rONfNdIe9IN9KBHYgKA= Subject key identifier: D9:C2:96:CC:8C:14:7C:81:C4:A8:63:EF:BC:5A:7D:31:60:C0:65:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA5535DBE4100114622C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.222.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:55:35:db:e4:10:01:14:62:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9bba30f6-154d-4308-9894-210b2193c752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:e4:b4:20:c3:ee:e7:89:d1:ff:e2:5c:0e: 12:c1:1a:74:0b:3f:58:c9:f5:17:4f:f8:76:33:47: 2e:79:3c:6e:ee:2a:c7:ff:d5:e2:e0:df:7e:5d:be: a5:3f:d8:5f:45:04:4d:1a:4d:52:c4:07:bd:8c:ce: 00:54:d1:89:18:b0:23:31:de:f9:5c:2f:fb:02:fb: 24:28:49:6a:fb:d6:1a:8c:42:a4:20:6a:c4:44:a0: ff:96:89:f8:49:ba:fe:df:8d:7f:d5:64:90:e7:10: d7:1b:a9:23:cd:4b:aa:16:4e:08:8c:75:18:1c:f1: d9:aa:ca:d0:c0:1b:36:3d:93:23:4c:e7:d9:62:34: a0:1b:96:9b:27:8e:20:58:bb:6d:4e:e3:b8:ed:89: 8c:36:5c:a5:b0:f4:16:5a:15:e1:4b:60:f7:a0:11: 39:1c:88:09:86:97:f3:52:46:60:c7:87:eb:57:36: c8:22:e7:9b:db:f6:0d:40:f2:63:32:1a:20:1c:9f: bf:e8:03:34:74:d2:1f:de:d7:4b:d6:5b:88:47:5e: 68:45:20:1d:bf:1e:ca:96:94:8a:d6:7b:df:a1:8f: ec:c2:b9:f1:34:77:97:26:a4:72:70:9c:13:ec:ca: a9:f6:dc:0e:95:91:00:6c:44:29:a5:bd:8c:5e:10: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:96:CC:8C:14:7C:81:C4:A8:63:EF:BC:5A:7D:31:60:C0:65:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1c:94:98:42:8e:ed:50:c0:be:23:84:95:e7:3c:ad:96:a5: bd:ca:06:f0:fa:c3:79:22:2f:70:b2:2d:5f:26:27:1c:f5:0a: ad:b8:79:95:b1:d0:15:f5:b7:de:e8:4e:83:8e:c5:dd:10:e2: ce:64:1b:a2:8c:5e:19:64:cd:2a:d7:29:d0:a6:47:fe:da:63: a1:d7:07:d0:f3:b3:66:1a:3f:a1:64:19:e6:e9:b6:b3:44:9b: c5:e9:17:ae:81:1f:e2:fc:7b:81:86:2a:bd:18:a5:5a:a9:64: 03:1e:41:a0:59:5d:c3:a6:8d:63:e6:ff:5a:ac:e2:2a:99:1e: fc:50:cd:1a:9d:00:69:a9:ca:60:04:e3:1a:be:a7:72:f4:11: 83:99:2f:24:b8:61:77:6e:c9:b4:cb:26:d9:39:83:a3:5f:46: ad:e5:19:a5:ad:9b:b3:65:c5:c2:99:84:3a:be:29:45:71:e4: 59:31:1c:29:35:97:3f:4a:0c:db:d0:12:f6:a5:49:02:37:60: 0b:3c:66:b7:d2:0d:50:5e:1a:cd:af:e1:b7:1b:c8:57:e4:bd: bf:d7:a8:26:56:84:2b:d3:9b:dd:d8:54:24:36:58:ee:ae:65: 04:d3:2f:2d:ea:77:d0:a2:3c:64:e6:93:7e:60:63:6a:53:e3: a2:be:bb:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlU12+QQARRiLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OWJiYTMwZjYtMTU0ZC00MzA4LTk4OTQtMjEwYjIxOTNjNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZHktCDD7ueJ0f/iXA4SwRp0Cz9YyfUXT/h2 M0cueTxu7irH/9Xi4N9+Xb6lP9hfRQRNGk1SxAe9jM4AVNGJGLAjMd75XC/7Avsk KElq+9YajEKkIGrERKD/lon4Sbr+341/1WSQ5xDXG6kjzUuqFk4IjHUYHPHZqsrQ wBs2PZMjTOfZYjSgG5abJ44gWLttTuO47YmMNlylsPQWWhXhS2D3oBE5HIgJhpfz UkZgx4frVzbIIueb2/YNQPJjMhogHJ+/6AM0dNIf3tdL1luIR15oRSAdvx7KlpSK 1nvfoY/swrnxNHeXJqRycJwT7Mqp9twOlZEAbEQppb2MXhDPBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnClsyMFHyBxKhj77xafTFgwGWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NmNTU4OTUtNjY4Yi0z MzA3LWI2YzQtNDk5OWRhNGEzYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsclJhCju1QwL4jhJXnPK2Wpb3KBvD6w3kiL3CyLV8mJxz1Cq24eZWx 0BX1t97oToOOxd0Q4s5kG6KMXhlkzSrXKdCmR/7aY6HXB9Dzs2YaP6FkGebptrNE m8XpF66BH+L8e4GGKr0YpVqpZAMeQaBZXcOmjWPm/1qs4iqZHvxQzRqdAGmpymAE 4xq+p3L0EYOZLyS4YXduybTLJtk5g6NfRq3lGaWtm7NlxcKZhDq+KUVx5FkxHCk1 lz9KDNvQEvalSQI3YAs8ZrfSDVBeGs2v4bcbyFfkvb/XqCZWhCvTm93YVCQ2WO6u ZQTTLy3qd9CiPGTmk35gY2pT46K+uxk= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:00 2026 by rpki-client