$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa File: 436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa (raw, json) Hash identifier: GVm0CksFnNgIPnOPITYl1XkjslFd2e3w6jc/B4VJWK4= Subject key identifier: D5:5E:6F:27:C4:B8:7A:8D:A5:A1:3A:39:33:52:BC:CA:D3:49:CD:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA372031C8BFA8B3D2BA20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.187.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:37:20:31:c8:bf:a8:b3:d2:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a0bce54f-ff8e-4434-ae6c-e3b6df40c576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:8d:28:13:46:ea:68:20:25:50:88:a1:84: 62:ba:38:b8:2c:44:bd:95:58:43:a9:2f:e2:21:7a: df:c5:74:5e:03:e2:7c:95:99:6d:ac:d3:16:4f:f9: 3e:6f:94:43:54:3d:92:97:86:28:3b:ce:c5:ba:ff: 2d:ca:bd:04:89:1a:66:77:67:8e:5c:d3:b4:c0:fd: bc:d5:41:ce:48:b0:b5:3e:2d:46:4e:2b:1d:32:2e: fa:76:60:ee:1b:ac:cc:02:de:d3:ce:8e:d3:f3:a6: 80:be:81:12:c0:75:f8:a9:8d:2c:98:31:72:69:1c: 1c:e2:2f:a5:da:30:c0:a6:8d:ad:f5:5a:68:b0:73: cc:1b:e5:78:77:e9:86:62:02:96:91:62:e0:8b:04: 54:bd:fc:6b:05:cf:ac:b7:0b:23:74:c4:08:d0:80: c1:9a:26:a3:da:92:b0:df:a1:78:4f:b7:a5:fc:dc: 29:35:84:de:c7:3a:90:de:1a:0b:40:63:04:68:6a: 51:9c:68:d6:27:28:80:a1:87:00:49:5c:8a:6d:e4: 38:b2:62:f4:f7:9d:1d:73:46:d7:80:61:ff:fe:78: cf:5b:b1:7d:3d:57:09:7c:8f:5b:78:58:4f:ac:05: 36:9f:89:d2:0e:a4:f3:53:f2:ea:8d:7c:33:21:9c: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5E:6F:27:C4:B8:7A:8D:A5:A1:3A:39:33:52:BC:CA:D3:49:CD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a1:17:b5:c0:42:91:69:40:be:65:5d:00:90:99:6c:75:b2: 64:87:f0:25:5a:fd:da:4a:60:9e:ec:11:6b:99:07:e1:5d:2d: 7f:66:95:e7:2e:7b:0f:40:b4:b3:5e:6f:98:8e:00:b5:b6:4f: 52:02:ec:a3:bb:3b:74:06:e7:b6:f9:ff:2c:77:ce:a5:61:6a: 53:c6:be:20:a5:cb:3a:d3:f0:87:d6:bc:69:f4:b7:34:2e:80: c3:4f:45:fd:a8:6e:5f:3a:18:d3:3c:f8:fb:2d:9c:8d:8f:33: f7:a8:fe:e7:31:4c:b1:e3:3d:fd:cc:87:2c:e4:4b:6e:87:a5: 5b:56:51:fa:bc:a7:e6:7a:2b:41:c1:65:7b:5c:45:74:fd:60: 07:10:fa:f3:97:bb:ae:75:97:e4:3c:9e:5c:e3:e8:2a:2d:d6: d1:7d:3e:08:a2:ee:60:25:0b:4e:e9:33:42:8a:f3:90:2e:50: 79:6d:6b:83:9a:95:2f:76:e0:28:6a:0c:94:40:c0:10:de:5d: 1b:32:b4:23:5b:b1:82:7e:41:19:bd:4f:a0:f9:40:b1:c3:73: 54:f6:40:c5:ff:68:9e:ed:5b:49:1f:be:90:d0:71:80:ae:c0: 44:e1:7c:f1:31:ca:bf:f3:23:aa:b6:78:bb:60:88:48:7a:7b: f8:8b:4a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjcgMci/qLPSuiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YTBiY2U1NGYtZmY4ZS00NDM0LWFlNmMtZTNiNmRmNDBjNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUWNKBNG6mggJVCIoYRiuji4LES9lVhDqS/i IXrfxXReA+J8lZltrNMWT/k+b5RDVD2Sl4YoO87Fuv8tyr0EiRpmd2eOXNO0wP28 1UHOSLC1Pi1GTisdMi76dmDuG6zMAt7Tzo7T86aAvoESwHX4qY0smDFyaRwc4i+l 2jDApo2t9VposHPMG+V4d+mGYgKWkWLgiwRUvfxrBc+stwsjdMQI0IDBmiaj2pKw 36F4T7el/NwpNYTexzqQ3hoLQGMEaGpRnGjWJyiAoYcASVyKbeQ4smL0950dc0bX gGH//njPW7F9PVcJfI9beFhPrAU2n4nSDqTzU/LqjXwzIZxXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVebyfEuHqNpaE6OTNSvMrTSc2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM2YTkwYmMtMGYyZi0z ZDRhLWI3NWItYzcyZjExNzVkZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWhF7XAQpFpQL5lXQCQmWx1smSH8CVa/dpKYJ7sEWuZB+FdLX9mlecu ew9AtLNeb5iOALW2T1IC7KO7O3QG57b5/yx3zqVhalPGviClyzrT8IfWvGn0tzQu gMNPRf2obl86GNM8+PstnI2PM/eo/ucxTLHjPf3MhyzkS26HpVtWUfq8p+Z6K0HB ZXtcRXT9YAcQ+vOXu651l+Q8nlzj6Cot1tF9Pgii7mAlC07pM0KK85AuUHlta4Oa lS924ChqDJRAwBDeXRsytCNbsYJ+QRm9T6D5QLHDc1T2QMX/aJ7tW0kfvpDQcYCu wEThfPExyr/zI6q2eLtgiEh6e/iLSg4= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:25 2026 by rpki-client