$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa File: 49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa (raw, json) Hash identifier: sXUs+QjQlMTUUaWhbpOMgKRYuAuazNdusIca1WmCm5I= Subject key identifier: 5F:74:65:09:08:BB:E3:36:AF:95:B7:55:69:35:AC:47:38:90:90:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA9047C51DD395FA242E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.238.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:90:47:c5:1d:d3:95:fa:24:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1efcbf3f-6ee9-4f51-aed0-5e4824d55668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5f:70:92:ca:be:10:77:5f:bb:4a:b0:8b:d3: 9f:ab:62:dc:18:ce:dd:b3:cf:9c:57:1d:0d:2d:7b: 33:b8:3e:05:7c:e9:c8:68:ac:51:bc:6c:f0:e0:71: dc:0c:08:d2:d8:64:2a:50:43:c0:1b:4a:48:dc:71: a8:71:9f:fd:ac:6b:bc:39:13:5b:03:5c:1d:47:89: 0a:23:c3:f1:86:f2:b7:3d:68:6c:05:23:79:f3:a2: b7:08:55:ed:b9:6d:88:6d:5a:97:ee:66:14:1f:34: cf:0f:bf:c0:b5:18:11:8d:25:08:92:2e:e5:80:52: ed:61:b4:3b:68:46:97:4d:49:77:17:1a:8d:23:8d: 5c:75:00:82:19:41:82:34:74:ae:19:b8:a3:bc:03: e7:df:72:79:28:69:05:bd:9f:7f:ec:00:9c:8f:3d: 96:c0:dc:95:58:2e:3f:d2:81:b8:ff:2c:44:3c:77: c6:9d:c0:c3:3e:56:d4:80:2b:69:00:79:4d:58:e1: d1:1a:6e:d0:b1:bb:33:86:72:d6:51:a9:49:ed:7e: dd:8e:ab:12:14:8c:3f:3c:6f:91:58:ec:8c:6e:1c: 58:78:cf:33:dd:41:4e:45:45:9b:b3:0d:b2:6a:87: 5f:13:06:be:d0:e2:25:93:fb:9f:f2:69:4d:69:d6: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:74:65:09:08:BB:E3:36:AF:95:B7:55:69:35:AC:47:38:90:90:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:44:c8:cb:a4:f4:fe:23:b2:f6:97:5c:69:16:18:50:f8:6f: 78:75:ec:5c:08:19:b3:1f:62:c7:8b:2d:06:a6:58:c4:92:81: 9f:75:91:51:fc:31:94:67:8a:6a:6d:00:96:cc:9c:45:a3:dc: 75:be:d1:85:8f:47:11:d6:97:11:c1:bf:8c:83:dc:41:ab:06: ff:0f:db:f3:6b:de:0c:bd:4e:18:87:91:20:f7:b8:d0:46:28: e4:49:0f:8f:06:c4:89:ce:0e:4c:03:cc:fe:43:7b:4a:97:ba: c4:b2:8b:e9:23:38:89:12:a5:70:f0:37:ee:67:f4:c9:0a:4a: 77:cd:94:c8:fd:4d:80:2a:6c:b0:99:55:5f:7f:d9:01:e4:94: 9e:f3:87:62:3e:cd:c1:6b:16:20:a2:48:59:15:06:6e:04:ce: 31:53:3c:f7:55:b2:11:b1:c1:73:0b:57:f8:39:c4:13:ba:c8: a0:10:ad:a9:ef:76:10:8b:01:6b:e0:95:02:08:b5:d6:d7:f3: e3:e3:23:1d:51:8e:e7:0f:ef:48:e5:ea:b6:11:3d:38:62:b1: 9c:0f:6a:ca:d5:b0:b4:15:74:9a:cb:1a:6d:f7:7c:d0:3c:b1: 8e:e9:9e:87:b7:45:c3:82:66:6b:ab:8b:d8:42:6a:88:5e:8b: 6b:74:73:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpBHxR3TlfokLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWVmY2JmM2YtNmVlOS00ZjUxLWFlZDAtNWU0ODI0ZDU1NjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg19wksq+EHdfu0qwi9Ofq2LcGM7ds8+cVx0N LXszuD4FfOnIaKxRvGzw4HHcDAjS2GQqUEPAG0pI3HGocZ/9rGu8ORNbA1wdR4kK I8PxhvK3PWhsBSN586K3CFXtuW2IbVqX7mYUHzTPD7/AtRgRjSUIki7lgFLtYbQ7 aEaXTUl3FxqNI41cdQCCGUGCNHSuGbijvAPn33J5KGkFvZ9/7ACcjz2WwNyVWC4/ 0oG4/yxEPHfGncDDPlbUgCtpAHlNWOHRGm7QsbszhnLWUalJ7X7djqsSFIw/PG+R WOyMbhxYeM8z3UFORUWbsw2yaodfEwa+0OIlk/uf8mlNadYXrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF90ZQkIu+M2r5W3VWk1rEc4kJC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDlmOGNiY2QtMzFiYS0z NWYxLWJlOWUtNTcyYWEyYzdhZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZEyMuk9P4jsvaXXGkWGFD4b3h17FwIGbMfYseLLQamWMSSgZ91kVH8 MZRnimptAJbMnEWj3HW+0YWPRxHWlxHBv4yD3EGrBv8P2/Nr3gy9ThiHkSD3uNBG KORJD48GxInODkwDzP5De0qXusSyi+kjOIkSpXDwN+5n9MkKSnfNlMj9TYAqbLCZ VV9/2QHklJ7zh2I+zcFrFiCiSFkVBm4EzjFTPPdVshGxwXMLV/g5xBO6yKAQranv dhCLAWvglQIItdbX8+PjIx1RjucP70jl6rYRPThisZwPasrVsLQVdJrLGm33fNA8 sY7pnoe3RcOCZmuri9hCaohei2t0cwk= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:34 2026 by rpki-client