$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b9d98e-5a20-38ec-8922-03c1232b8568.roa File: 86b9d98e-5a20-38ec-8922-03c1232b8568.roa (raw, json) Hash identifier: 07Y63tNzffF3n6xTss5JieAYzynJJSwBbnOFi89NQt8= Subject key identifier: B6:A2:F6:0C:6A:E2:49:6E:AC:06:01:49:BD:D5:18:5A:50:0B:94:9D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3D97CD8673B4C1613300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b9d98e-5a20-38ec-8922-03c1232b8568.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.236.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3d:97:cd:86:73:b4:c1:61:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=84f837a7-b492-4661-aa25-46135e738227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:00:e6:57:f2:5d:86:76:6b:a9:58:c8:11: 8a:1c:5b:5e:2f:1f:61:ab:59:a7:09:16:b0:5f:a9: 41:55:19:1c:d7:58:a5:2a:b8:06:e5:0d:06:85:57: a9:bd:4d:5a:b8:04:a0:d5:fe:ab:0d:21:6b:b3:65: 57:0a:39:6f:e9:f7:6d:e9:1f:92:3a:50:ca:a8:17: 77:1f:c4:23:6e:da:4a:a2:c5:eb:84:26:7b:39:24: c9:4d:d4:07:f2:24:b5:29:d8:ea:16:ba:c6:07:44: 4b:c9:b5:a8:96:8d:0a:59:ed:27:22:7a:a3:63:54: 72:de:83:3c:a5:37:73:4e:14:28:04:15:da:1e:e2: 11:41:1c:d5:81:13:1c:89:14:23:2a:4e:cd:2b:7d: 49:67:53:3f:15:97:bf:fd:01:dc:21:e4:80:be:5f: 19:74:46:a8:d8:cc:23:8e:2a:18:60:ec:e4:1a:aa: 29:2b:85:ff:fc:77:0c:fc:b2:66:a4:d3:69:dc:b2: f6:e9:38:b5:d4:ca:05:d9:25:bb:6a:cd:7d:23:22: 05:df:ac:d3:5d:90:0c:a2:5b:4d:11:e7:70:71:2e: cc:7d:0f:fa:67:80:42:a4:b4:ff:34:a7:94:7d:be: 24:0d:35:05:47:10:16:68:ae:ba:5c:52:a3:38:08: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:F6:0C:6A:E2:49:6E:AC:06:01:49:BD:D5:18:5A:50:0B:94:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b9d98e-5a20-38ec-8922-03c1232b8568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6b:74:e0:4a:2d:b3:3a:69:40:ac:25:05:16:f1:8c:09:0d: 80:68:8d:d4:bd:4e:60:9c:66:0c:52:54:91:05:02:42:98:a9: 56:6e:3c:9d:dc:14:5a:d6:a4:d8:24:2a:d8:42:66:69:ba:95: ac:9b:bf:51:26:f4:d0:82:c7:2e:67:19:5d:5a:a5:0c:0b:97: 34:2f:86:5f:73:3f:8e:18:e3:fe:c0:f1:67:72:7f:3a:50:48: 84:cc:db:6d:be:dd:8b:e0:9b:d3:cd:e6:51:b5:39:13:37:3b: f2:63:6f:a3:55:5f:6e:13:4e:f5:c8:9a:92:50:47:4a:46:a6: 7c:3e:f1:cf:19:8f:05:9e:2b:70:1e:f8:80:8b:83:be:35:bc: bf:03:83:0a:d7:b5:1d:12:81:5c:fd:1a:c3:73:20:29:85:46: 46:e0:c2:d1:35:94:fb:68:c9:68:c7:6f:f7:d0:d2:34:77:e1: f9:fa:86:63:c7:f1:a0:e6:5f:f1:17:dd:90:7b:c0:16:46:69: c6:4f:b0:69:55:62:8b:d6:dc:fc:79:ef:0f:50:b3:8a:6e:d4: de:bb:70:de:dd:6e:b1:9c:50:ef:55:07:fc:85:6b:01:53:a7: bc:20:1a:63:43:ad:42:93:17:1d:b1:03:78:99:d3:52:41:a1: d5:cd:c6:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqj2XzYZztMFhMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODRmODM3YTctYjQ5Mi00NjYxLWFhMjUtNDYxMzVlNzM4MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfcA5lfyXYZ2a6lYyBGKHFteLx9hq1mnCRaw X6lBVRkc11ilKrgG5Q0GhVepvU1auASg1f6rDSFrs2VXCjlv6fdt6R+SOlDKqBd3 H8QjbtpKosXrhCZ7OSTJTdQH8iS1KdjqFrrGB0RLybWolo0KWe0nInqjY1Ry3oM8 pTdzThQoBBXaHuIRQRzVgRMciRQjKk7NK31JZ1M/FZe//QHcIeSAvl8ZdEao2Mwj jioYYOzkGqopK4X//HcM/LJmpNNp3LL26Ti11MoF2SW7as19IyIF36zTXZAMoltN EedwcS7MfQ/6Z4BCpLT/NKeUfb4kDTUFRxAWaK66XFKjOAjYHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLai9gxq4klurAYBSb3VGFpQC5SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZiOWQ5OGUtNWEyMC0z OGVjLTg5MjItMDNjMTIzMmI4NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBrdOBKLbM6aUCsJQUW8YwJDYBojdS9TmCcZgxSVJEFAkKYqVZuPJ3c FFrWpNgkKthCZmm6laybv1Em9NCCxy5nGV1apQwLlzQvhl9zP44Y4/7A8WdyfzpQ SITM222+3Yvgm9PN5lG1ORM3O/Jjb6NVX24TTvXImpJQR0pGpnw+8c8ZjwWeK3Ae +ICLg741vL8DgwrXtR0SgVz9GsNzICmFRkbgwtE1lPtoyWjHb/fQ0jR34fn6hmPH 8aDmX/EX3ZB7wBZGacZPsGlVYovW3Px57w9Qs4pu1N67cN7dbrGcUO9VB/yFawFT p7wgGmNDrUKTFx2xA3iZ01JBodXNxuI= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:01 2026 by rpki-client