$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85baef20-0be8-35d2-8505-71d7c669389e.roa File: 85baef20-0be8-35d2-8505-71d7c669389e.roa (raw, json) Hash identifier: KfmDLNSl5q04cHAHF/WW19wx3uIcOJbGnHRkxWj4szc= Subject key identifier: 4F:FD:1E:92:C1:21:72:00:9F:02:F1:E7:14:08:8B:65:87:B3:81:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA96B7BEE045CD3262E700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85baef20-0be8-35d2-8505-71d7c669389e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.246.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:96:b7:be:e0:45:cd:32:62:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=cbb5871c-24f0-4a2b-a75e-47e0615e80dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:55:cd:3e:29:42:3c:7f:3d:16:a5:aa:b1: f5:d4:3f:d7:3a:4d:a4:7c:bb:1e:d8:3e:fe:31:9f: 95:29:6e:2b:6e:45:13:59:d0:8a:f3:30:bd:75:66: f6:8c:20:f7:cb:aa:85:7b:9f:75:1d:b8:47:5a:12: 14:e9:42:b6:56:95:f4:63:80:ea:28:cd:f8:80:0e: 47:a2:ea:26:8f:57:61:2c:26:49:d7:2a:4d:70:e6: d0:2f:10:8d:92:47:e9:fc:cd:2f:26:d2:d0:11:56: 10:9a:76:14:e8:e5:78:cc:9b:a2:1b:cd:b6:62:c0: 64:3e:12:73:31:90:c7:28:8f:bf:32:a4:17:f3:f4: fe:e6:41:d1:60:3c:37:7a:09:06:51:31:2e:6d:06: 32:00:85:b5:95:17:89:20:60:6b:22:f1:06:e2:59: 2a:54:33:9d:ca:59:d4:a0:b2:ac:ee:49:6c:d5:43: 20:b9:fc:0c:c3:50:6a:cc:81:30:11:ba:23:5c:c6: ca:c5:95:8d:55:89:2e:4c:a3:b2:94:25:67:77:74: 79:aa:d6:4b:5f:2e:f2:cc:0a:03:a0:a8:d1:10:4c: 9b:3f:2b:7f:e1:d7:20:c5:36:f8:7e:4a:f5:61:a3: 17:9f:bb:f3:e0:7f:8f:36:fe:a7:3c:5c:a4:3d:33: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FD:1E:92:C1:21:72:00:9F:02:F1:E7:14:08:8B:65:87:B3:81:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85baef20-0be8-35d2-8505-71d7c669389e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:62:09:d1:f3:84:8f:09:30:2b:6b:a1:64:ec:6f:39:11:09: 8b:20:21:db:22:b8:8d:c3:5c:5e:c3:e1:01:07:88:47:d8:ab: 77:1d:11:61:10:0e:0f:75:3b:70:35:7e:0c:36:3b:19:0b:b1: 3c:27:06:11:58:6c:9b:5d:83:28:0d:d6:e1:50:3b:78:88:73: 28:53:3c:b7:f9:42:18:b6:b7:3f:28:e4:67:d2:0d:fa:31:eb: 1a:85:b9:11:0d:fa:d2:ec:1f:10:3f:f6:6d:4c:4f:8e:0b:9c: 65:35:d8:e9:93:42:68:63:6b:55:93:30:60:57:27:f5:4e:f6: 9f:db:c4:1f:6d:1e:e4:f2:c0:51:1f:5d:55:2a:c2:6f:30:31: 0f:de:18:3b:04:db:fd:c6:a2:75:06:91:bb:3a:4b:f1:a1:ff: a6:ce:74:00:e1:20:b1:b7:d9:61:b1:28:ed:ac:aa:88:34:9b: cb:ba:e6:ab:0d:dd:eb:88:3a:ad:34:c0:b6:b0:11:73:48:4e: 21:32:27:d9:ac:2b:ce:44:83:ac:56:fe:cb:97:34:ae:90:ce: 54:1a:a5:a4:f3:f3:61:59:f4:7c:72:a3:aa:a7:e5:b3:da:c4: cf:6a:10:ef:96:10:bd:e1:e5:77:f9:d5:06:bb:c5:6c:5d:7d: 8a:94:7b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpa3vuBFzTJi5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2JiNTg3MWMtMjRmMC00YTJiLWE3NWUtNDdlMDYxNWU4MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMpVzT4pQjx/PRalqrH11D/XOk2kfLse2D7+ MZ+VKW4rbkUTWdCK8zC9dWb2jCD3y6qFe591HbhHWhIU6UK2VpX0Y4DqKM34gA5H ouomj1dhLCZJ1ypNcObQLxCNkkfp/M0vJtLQEVYQmnYU6OV4zJuiG822YsBkPhJz MZDHKI+/MqQX8/T+5kHRYDw3egkGUTEubQYyAIW1lReJIGBrIvEG4lkqVDOdylnU oLKs7kls1UMgufwMw1BqzIEwEbojXMbKxZWNVYkuTKOylCVnd3R5qtZLXy7yzAoD oKjREEybPyt/4dcgxTb4fkr1YaMXn7vz4H+PNv6nPFykPTNWrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/9HpLBIXIAnwLx5xQIi2WHs4E/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODViYWVmMjAtMGJlOC0z NWQyLTg1MDUtNzFkN2M2NjkzODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1iCdHzhI8JMCtroWTsbzkRCYsgIdsiuI3DXF7D4QEHiEfYq3cdEWEQ Dg91O3A1fgw2OxkLsTwnBhFYbJtdgygN1uFQO3iIcyhTPLf5Qhi2tz8o5GfSDfox 6xqFuREN+tLsHxA/9m1MT44LnGU12OmTQmhja1WTMGBXJ/VO9p/bxB9tHuTywFEf XVUqwm8wMQ/eGDsE2/3GonUGkbs6S/Gh/6bOdADhILG32WGxKO2sqog0m8u65qsN 3euIOq00wLawEXNITiEyJ9msK85Eg6xW/suXNK6QzlQapaTz82FZ9Hxyo6qn5bPa xM9qEO+WEL3h5Xf51Qa7xWxdfYqUe/g= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:58 2026 by rpki-client