$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91ec3823-56e5-31a1-aa66-0ab975dea16d.roa File: 91ec3823-56e5-31a1-aa66-0ab975dea16d.roa (raw, json) Hash identifier: k0JNlF52VyotWXxz/779HQHJ+8vZPhDxhXva2Yr9uMQ= Subject key identifier: A8:B7:B7:CC:3F:79:9A:8E:DD:C1:84:4F:7F:E7:23:C2:E0:93:28:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D316F6B3D158960ACB9D6D900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91ec3823-56e5-31a1-aa66-0ab975dea16d.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 396982 IP address blocks: 35.189.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6b:3d:15:89:60:ac:b9:d6:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=bdacd0fb-ce8e-42d7-b31b-a6fad4e5754d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:38:bf:0a:71:70:2a:72:2d:45:f1:36:c0: 11:1f:a3:e7:34:fe:31:aa:b4:96:6a:5b:b7:d9:c7: 6d:89:96:d3:ff:8a:5c:a2:4d:83:ee:9c:78:c6:01: 8d:5b:44:8b:fa:68:1b:d7:4d:a2:de:78:9f:70:5a: 33:3e:24:09:bb:fd:f8:dc:45:8f:f8:de:13:09:f1: de:72:f3:82:35:68:2f:49:95:55:13:74:fa:33:45: 10:7b:03:79:1b:e0:2c:04:6b:63:c9:fa:1c:ab:ec: e1:89:05:76:64:6a:97:57:34:2b:0d:bb:41:6f:0c: 9e:40:ee:e1:15:15:09:5a:1d:06:36:01:dc:09:e4: 88:c2:c6:ed:b8:d8:e0:83:76:fb:35:59:76:d5:7d: 4b:25:48:56:ff:bb:a0:11:12:6c:99:45:b9:d9:30: ba:2f:ec:a4:3f:d3:a6:3a:8b:17:57:8b:94:93:8b: fb:ee:8e:a0:51:c8:1e:63:64:65:2f:b7:37:5a:9f: 43:a9:ae:db:c3:71:e6:9c:f5:85:30:4c:f6:b9:6b: 1d:e8:d3:7d:19:e5:f9:e5:08:9a:fc:7f:e5:b4:73: 01:07:56:9e:ff:08:f7:0a:6a:85:0e:7d:6d:3f:e2: 6f:b1:a0:bb:0e:7f:b4:98:91:c3:9e:11:bf:af:7f: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B7:B7:CC:3F:79:9A:8E:DD:C1:84:4F:7F:E7:23:C2:E0:93:28:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91ec3823-56e5-31a1-aa66-0ab975dea16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:eb:7a:05:6c:48:f0:49:f9:c4:7d:d7:d9:5f:1a:bf:8c:71: 68:80:ed:ad:79:68:a2:e8:61:90:bf:5f:55:29:db:ca:b5:04: 5b:62:5b:97:c1:71:1d:0c:47:a5:23:b2:7c:e9:fb:ab:08:55: 26:26:78:95:bb:e3:c2:14:03:bd:f6:4f:a1:63:fa:70:48:2c: 0f:19:79:2e:f8:d3:a4:03:0d:02:74:bf:6c:97:3d:dc:e3:85: fa:cb:04:6b:de:f1:0f:1e:e4:57:4c:4b:be:71:2b:49:a3:0f: 2a:26:d6:df:fe:73:33:e5:a7:4e:4b:ac:b2:b1:c8:71:03:9d: f0:61:7f:e5:7c:d7:0c:e8:1d:4d:8b:cb:ba:46:c8:98:43:82: 8e:f3:df:4d:1d:b3:b8:32:4c:48:76:e8:16:6f:4e:6b:66:9f: 52:ea:bc:9e:60:91:fd:ee:43:c2:f1:4c:9b:22:4c:fc:ce:09: fe:70:f1:d3:de:3d:49:d2:8a:f0:af:a1:b1:3e:64:a6:78:5c: c8:12:56:41:87:86:c7:1d:42:18:1b:f8:07:8e:e2:80:91:c3: d6:4e:72:46:72:42:2f:e2:e8:25:91:ab:75:e6:1a:b2:ed:7e: e9:f8:fe:43:ad:f3:a8:f3:be:84:1c:0c:37:8f:52:5c:cf:13: a5:73:ce:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2s9FYlgrLnW2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk YmRhY2QwZmItY2U4ZS00MmQ3LWIzMWItYTZmYWQ0ZTU3NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5w4vwpxcCpyLUXxNsARH6PnNP4xqrSWalu3 2cdtiZbT/4pcok2D7px4xgGNW0SL+mgb102i3nifcFozPiQJu/343EWP+N4TCfHe cvOCNWgvSZVVE3T6M0UQewN5G+AsBGtjyfocq+zhiQV2ZGqXVzQrDbtBbwyeQO7h FRUJWh0GNgHcCeSIwsbtuNjgg3b7NVl21X1LJUhW/7ugERJsmUW52TC6L+ykP9Om OosXV4uUk4v77o6gUcgeY2RlL7c3Wp9Dqa7bw3HmnPWFMEz2uWsd6NN9GeX55Qia /H/ltHMBB1ae/wj3CmqFDn1tP+JvsaC7Dn+0mJHDnhG/r3/DWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi3t8w/eZqO3cGET3/nI8Lgkyg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFlYzM4MjMtNTZlNS0z MWExLWFhNjYtMGFiOTc1ZGVhMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI72AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7regVsSPBJ+cR919lfGr+McWiA7a15aKLoYZC/X1Up28q1BFtiW5fB cR0MR6Ujsnzp+6sIVSYmeJW748IUA732T6Fj+nBILA8ZeS7406QDDQJ0v2yXPdzj hfrLBGve8Q8e5FdMS75xK0mjDyom1t/+czPlp05LrLKxyHEDnfBhf+V81wzoHU2L y7pGyJhDgo7z300ds7gyTEh26BZvTmtmn1LqvJ5gkf3uQ8LxTJsiTPzOCf5w8dPe PUnSivCvobE+ZKZ4XMgSVkGHhscdQhgb+AeO4oCRw9ZOckZyQi/i6CWRq3XmGrLt fun4/kOt86jzvoQcDDePUlzPE6Vzzpw= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:01 2026 by rpki-client