$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa File: 5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa (raw, json) Hash identifier: 3RiJMiDyxqDZZYfrTkNCYFXIaXGfupPJJ4t3gthxHJw= Subject key identifier: 09:36:83:A5:79:57:96:54:F0:60:92:04:90:C8:71:67:79:16:22:C0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA69FBD656DA2E038AF980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.202.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:69:fb:d6:56:da:2e:03:8a:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c2a56697-95ce-4b1c-8d4e-383a28e4a6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:50:71:0e:8f:9c:63:f8:31:b9:c2:0d:0f: 6d:80:7d:24:f7:79:03:c8:67:d9:37:1d:03:e8:33: 1c:08:2e:68:c7:7c:aa:6a:e4:9e:3a:67:8a:21:d3: 83:11:98:f8:b9:23:10:f1:01:90:82:5c:b6:68:fa: 42:fb:1a:64:1e:57:de:60:30:51:07:d3:aa:5e:b1: b9:11:1d:83:46:34:4f:96:99:ae:bb:ed:24:98:0f: c4:fd:62:13:24:2b:13:86:95:67:eb:4b:e8:c2:6f: fc:9c:50:53:a1:da:a8:ee:4f:e1:b8:d1:94:e3:3f: cd:8b:14:38:98:7d:89:bb:cd:22:fc:d7:13:34:48: ee:d8:22:7b:81:0e:0d:39:64:72:c7:7a:9e:55:f6: 97:65:e7:00:c9:56:77:e0:77:96:19:b9:f9:b1:f6: 32:07:9b:f2:91:71:2f:29:0c:4f:b5:e9:ee:d6:67: ce:56:98:2d:98:d4:14:d3:d2:19:36:2f:d2:56:64: 09:66:b2:1e:43:da:fd:5c:f4:ea:e3:24:76:bb:64: df:a5:c3:1c:85:59:65:5b:7a:e0:6e:11:8c:06:d5: 30:bd:d3:3d:29:f2:d2:9f:10:30:21:b5:0e:8d:9c: a4:51:64:62:fd:ac:68:c7:dd:9f:5d:99:d4:b5:c7: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:36:83:A5:79:57:96:54:F0:60:92:04:90:C8:71:67:79:16:22:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ce:0f:55:58:e8:33:dd:de:7c:35:9d:58:ee:a5:6a:50:6c: c1:62:81:ba:97:40:aa:ff:da:42:ef:22:f1:d4:fe:51:3f:3d: b9:78:e4:5d:fd:6a:aa:fd:55:77:8b:f5:63:33:95:f3:a1:01: 19:20:ac:5a:39:43:41:87:7c:e4:b7:3b:fa:a9:05:ac:a1:50: 8e:90:70:79:2c:11:78:57:30:e1:51:a1:1c:5a:21:27:b9:61: 3b:52:3e:57:dc:9c:20:12:c5:a8:40:9f:78:75:95:7b:c6:d2: 90:ca:42:ef:53:60:16:71:d6:ab:ff:02:06:ad:97:70:83:82: c0:98:e5:6a:6d:a9:47:a5:53:58:09:cb:a7:a2:21:d0:d5:82: 04:c6:b3:bc:45:05:8b:b4:05:15:a1:15:d9:29:f2:34:24:79: 32:2c:b6:2b:63:bf:a3:7c:83:c2:fb:32:7b:56:ce:18:6e:72: 54:7a:bf:f4:fb:28:54:d2:e0:22:dd:5c:74:ac:74:1d:5b:31: 20:29:87:45:b6:a1:10:25:2c:4a:f9:56:00:98:6f:54:db:e6: 7d:76:5c:e3:99:75:70:2f:20:0a:77:51:ff:64:ee:a5:41:54: d9:fa:44:1d:41:ff:3f:f6:69:d7:f8:5e:9c:dd:b9:14:97:44: 57:57:0b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmn71lbaLgOK+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzJhNTY2OTctOTVjZS00YjFjLThkNGUtMzgzYTI4ZTRhNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunVQcQ6PnGP4MbnCDQ9tgH0k93kDyGfZNx0D 6DMcCC5ox3yqauSeOmeKIdODEZj4uSMQ8QGQgly2aPpC+xpkHlfeYDBRB9OqXrG5 ER2DRjRPlpmuu+0kmA/E/WITJCsThpVn60vowm/8nFBTodqo7k/huNGU4z/NixQ4 mH2Ju80i/NcTNEju2CJ7gQ4NOWRyx3qeVfaXZecAyVZ34HeWGbn5sfYyB5vykXEv KQxPtenu1mfOVpgtmNQU09IZNi/SVmQJZrIeQ9r9XPTq4yR2u2TfpcMchVllW3rg bhGMBtUwvdM9KfLSnxAwIbUOjZykUWRi/axox92fXZnUtcdHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk2g6V5V5ZU8GCSBJDIcWd5FiLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFmYTFlZTQtNGI4ZS0z ZTdkLWFlODQtNWMzMWEyNDE4MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/OD1VY6DPd3nw1nVjupWpQbMFigbqXQKr/2kLvIvHU/lE/Pbl45F39 aqr9VXeL9WMzlfOhARkgrFo5Q0GHfOS3O/qpBayhUI6QcHksEXhXMOFRoRxaISe5 YTtSPlfcnCASxahAn3h1lXvG0pDKQu9TYBZx1qv/Agatl3CDgsCY5WptqUelU1gJ y6eiIdDVggTGs7xFBYu0BRWhFdkp8jQkeTIstitjv6N8g8L7MntWzhhuclR6v/T7 KFTS4CLdXHSsdB1bMSAph0W2oRAlLEr5VgCYb1Tb5n12XOOZdXAvIAp3Uf9k7qVB VNn6RB1B/z/2adf4XpzduRSXRFdXC4Q= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:20 2026 by rpki-client