$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa File: 4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa (raw, json) Hash identifier: wHa+SxAnN47pJQm+uqtu1ZRXI3JhM7pDaArdiUY23aw= Subject key identifier: 64:D8:AD:5D:3C:7F:62:8F:AF:90:76:22:5F:E6:7D:F2:FB:D6:6A:C5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA553257A39F828D3F340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.243.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a5:53:25:7a:39:f8:28:d3:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1dc6255b-76b9-47cd-bd79-fb7d3e1f572b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:06:58:ef:5d:3e:79:b6:74:78:45:fb:e1: 2d:ec:4c:f3:b5:04:be:81:d2:94:eb:7e:5c:b2:2a: 09:85:36:b0:71:6e:6f:23:cd:dc:69:be:81:8c:ad: 5a:86:72:04:ae:28:04:46:d1:1c:dd:4d:ee:90:32: 5a:2e:23:5d:10:a9:b0:18:7e:f6:b2:5e:7a:7a:7d: 7d:60:af:3b:30:23:10:5a:8e:01:22:6d:40:0b:2b: d3:ba:37:79:06:63:e0:48:73:63:32:bc:dd:e0:08: 13:1a:47:0c:8c:85:95:7b:24:d6:d5:d2:d4:85:d1: 37:0d:e1:c5:4c:ec:5e:2a:76:ea:85:86:30:34:0b: 61:fb:41:89:e2:a7:e3:9d:44:d2:cb:94:7c:fe:66: d7:51:6a:58:c2:ee:c6:22:99:3f:d6:a6:5e:8d:5d: 3e:5d:66:49:70:f1:5e:b6:f2:a5:ef:bc:00:6c:b8: b8:e6:60:2c:21:13:66:14:d1:0e:08:e4:53:f6:dc: f5:5f:d7:fd:db:b4:22:2b:c7:0b:31:d6:d9:85:bd: 6a:38:da:f7:a3:c3:7c:16:64:ca:48:f6:9a:ec:04: dc:d3:f8:51:ef:22:08:5d:0d:59:34:f7:61:59:bd: 08:49:13:32:67:c8:b2:df:90:9e:90:1d:1c:d5:32: d8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:AD:5D:3C:7F:62:8F:AF:90:76:22:5F:E6:7D:F2:FB:D6:6A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:88:3a:3b:0f:f1:c2:1b:35:6e:c5:1c:d1:4c:af:e2:58:65: aa:90:02:dd:1a:7b:35:3a:33:dd:0c:4c:1b:b4:db:c4:ec:d4: bb:1b:76:bf:c6:81:d9:c0:9e:01:7d:71:ed:4c:6e:09:8b:20: ec:47:dc:d9:02:58:dd:66:2a:67:9d:8a:ae:e3:13:a9:cf:e4: 51:76:9c:97:ff:ae:87:b0:0f:97:76:1f:81:3a:92:64:94:ef: 79:d1:8d:07:46:6a:61:ba:0e:7a:b8:ec:88:b9:c2:2a:ec:cb: b9:4f:c8:ef:04:3f:4b:8b:80:3b:fb:59:dc:cc:fd:39:92:2d: 4a:07:99:3c:41:82:11:ec:be:c5:0b:ea:b2:97:06:f8:06:1d: 2b:55:a7:14:19:86:fd:90:fd:b3:ee:57:b1:19:b3:ae:24:3b: 6c:70:4d:c5:4c:fa:b3:2b:48:bc:ef:28:e2:d6:23:13:b8:f2: ed:e6:06:75:23:b7:d9:08:b1:83:e1:93:ac:b5:2c:44:ce:e4: 8a:dc:24:d1:2f:9e:a3:d2:ca:b6:e7:b4:08:5f:d6:7b:e7:f9: ec:f8:90:a2:5e:71:d8:cd:8d:e6:f3:c3:a5:54:7c:5b:f9:8b: a7:09:24:11:c3:e2:6b:cd:37:3a:74:3e:88:93:29:99:e8:67: 17:80:df:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqVTJXo5+CjT80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWRjNjI1NWItNzZiOS00N2NkLWJkNzktZmI3ZDNlMWY1NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDgGWO9dPnm2dHhF++Et7EzztQS+gdKU635c sioJhTawcW5vI83cab6BjK1ahnIErigERtEc3U3ukDJaLiNdEKmwGH72sl56en19 YK87MCMQWo4BIm1ACyvTujd5BmPgSHNjMrzd4AgTGkcMjIWVeyTW1dLUhdE3DeHF TOxeKnbqhYYwNAth+0GJ4qfjnUTSy5R8/mbXUWpYwu7GIpk/1qZejV0+XWZJcPFe tvKl77wAbLi45mAsIRNmFNEOCORT9tz1X9f927QiK8cLMdbZhb1qONr3o8N8FmTK SPaa7ATc0/hR7yIIXQ1ZNPdhWb0ISRMyZ8iy35CekB0c1TLYUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTYrV08f2KPr5B2Il/mffL71mrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDAxNGJkZTMtYThlOC0z NzNiLTgzOTMtMmMzZmY4Y2Y0ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKIOjsP8cIbNW7FHNFMr+JYZaqQAt0aezU6M90MTBu028Ts1Lsbdr/G gdnAngF9ce1MbgmLIOxH3NkCWN1mKmediq7jE6nP5FF2nJf/roewD5d2H4E6kmSU 73nRjQdGamG6Dnq47Ii5wirsy7lPyO8EP0uLgDv7WdzM/TmSLUoHmTxBghHsvsUL 6rKXBvgGHStVpxQZhv2Q/bPuV7EZs64kO2xwTcVM+rMrSLzvKOLWIxO48u3mBnUj t9kIsYPhk6y1LETO5IrcJNEvnqPSyrbntAhf1nvn+ez4kKJecdjNjebzw6VUfFv5 i6cJJBHD4mvNNzp0PoiTKZnoZxeA38o= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:16 2026 by rpki-client