$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/986c0943-7793-3613-a7cb-15fece42b747.roa File: 986c0943-7793-3613-a7cb-15fece42b747.roa (raw, json) Hash identifier: wOwpq+/rK6fRMsMAubegkhtbOzn1P8QJ1JX5KLK9DrI= Subject key identifier: A8:06:E7:96:79:46:04:5E:B0:69:7C:D4:F1:50:47:67:16:80:F2:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA5BD843E57276E659DB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/986c0943-7793-3613-a7cb-15fece42b747.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.199.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:5b:d8:43:e5:72:76:e6:59:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c24b2236-d97a-417c-bbe8-d5eaa5ef5669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1e:5d:76:ca:0b:c6:8c:a4:83:9d:a3:d2:16: 68:a1:eb:eb:19:62:01:c3:c3:a4:e4:e9:4d:f4:de: 49:6a:cc:64:79:75:13:df:8c:4d:1d:a7:d6:ef:46: 0a:02:e0:e1:0a:ab:e1:04:42:af:b7:b8:12:f9:96: f1:3d:a1:f0:aa:d7:62:4e:39:a3:4d:2a:83:77:5e: aa:75:8e:af:a1:48:f1:1d:c9:b1:7b:77:cd:02:71: f0:b2:2e:c7:66:84:6f:9d:7f:15:3c:a9:8d:94:27: b0:9d:3d:4e:f7:37:94:c8:02:58:c3:5d:5f:f5:4c: 06:af:79:2e:c6:b9:54:f5:f7:61:5c:40:b3:09:5c: e2:e7:93:f8:17:bd:e2:63:19:6b:65:de:a0:47:32: f9:6f:b1:ae:a8:4e:d5:fc:7c:fe:2d:11:f0:d8:d0: fa:30:22:b8:d7:19:89:d3:92:ef:a3:fd:ec:97:a2: 25:f3:77:bf:1c:4d:fa:eb:e7:d9:d3:3a:44:b1:c8: f2:cd:90:d4:f6:64:53:45:21:a9:0f:87:72:b3:8d: 22:e3:f7:a0:1d:71:64:ef:f9:af:bb:7a:e4:61:d6: b0:cd:17:65:0d:27:7a:c6:9e:1b:eb:24:26:ba:7c: ca:c9:a1:91:85:94:1b:5b:54:12:5c:e2:a0:1d:a6: c1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:E7:96:79:46:04:5E:B0:69:7C:D4:F1:50:47:67:16:80:F2:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/986c0943-7793-3613-a7cb-15fece42b747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4a:55:b9:0c:8e:de:c5:7d:84:95:07:c6:9b:00:07:65:c8: 7b:b6:29:ff:0e:d5:43:82:a6:17:a4:e1:9d:35:49:37:35:bd: b0:65:2e:24:7d:ef:92:5b:d6:4c:33:18:34:92:bc:98:fb:10: 4e:f8:9e:47:d4:e8:c5:84:85:e9:d7:dc:ae:5b:80:5a:42:99: 7f:13:81:de:3e:20:55:46:7e:1f:b6:de:49:81:f0:1f:7b:95: 1c:76:56:bd:77:73:a7:71:45:f5:76:73:95:c6:7f:c0:84:46: 97:44:6e:cc:19:6b:e5:6a:78:72:be:08:40:32:e3:33:1f:ad: f3:38:ab:c2:6c:70:c5:6c:fb:a6:a3:b9:45:93:e8:c9:11:02: 44:27:ab:8d:7b:1b:cf:fb:a4:bf:29:9b:22:b9:18:6f:01:71: 25:82:db:3b:8d:7f:f5:69:5d:23:4a:91:f0:39:66:6c:92:f7: e2:a9:7c:ac:00:16:87:3c:f8:07:5b:6c:b8:1b:57:59:ba:ea: 30:14:5d:c5:1b:84:1f:5c:3c:4d:00:98:05:f1:dc:f7:b0:4e: e3:66:c6:02:7a:9d:3c:1a:5e:43:43:64:f4:80:ee:bc:c4:84: 75:a7:8d:8c:ac:74:94:a1:3e:f6:d2:29:21:d7:5b:f4:52:fc: e6:a4:7b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlvYQ+VyduZZ24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzI0YjIyMzYtZDk3YS00MTdjLWJiZTgtZDVlYWE1ZWY1NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx5ddsoLxoykg52j0hZooevrGWIBw8Ok5OlN 9N5JasxkeXUT34xNHafW70YKAuDhCqvhBEKvt7gS+ZbxPaHwqtdiTjmjTSqDd16q dY6voUjxHcmxe3fNAnHwsi7HZoRvnX8VPKmNlCewnT1O9zeUyAJYw11f9UwGr3ku xrlU9fdhXECzCVzi55P4F73iYxlrZd6gRzL5b7GuqE7V/Hz+LRHw2ND6MCK41xmJ 05Lvo/3sl6Il83e/HE366+fZ0zpEscjyzZDU9mRTRSGpD4dys40i4/egHXFk7/mv u3rkYdawzRdlDSd6xp4b6yQmunzKyaGRhZQbW1QSXOKgHabBgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgG55Z5RgResGl81PFQR2cWgPI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTg2YzA5NDMtNzc5My0z NjEzLWE3Y2ItMTVmZWNlNDJiNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFKVbkMjt7FfYSVB8abAAdlyHu2Kf8O1UOCphek4Z01STc1vbBlLiR9 75Jb1kwzGDSSvJj7EE74nkfU6MWEhenX3K5bgFpCmX8Tgd4+IFVGfh+23kmB8B97 lRx2Vr13c6dxRfV2c5XGf8CERpdEbswZa+VqeHK+CEAy4zMfrfM4q8JscMVs+6aj uUWT6MkRAkQnq417G8/7pL8pmyK5GG8BcSWC2zuNf/VpXSNKkfA5ZmyS9+KpfKwA Foc8+AdbbLgbV1m66jAUXcUbhB9cPE0AmAXx3PewTuNmxgJ6nTwaXkNDZPSA7rzE hHWnjYysdJShPvbSKSHXW/RS/Oake/Y= -----END CERTIFICATE-----Generated at Thu Mar 19 01:50:13 2026 by rpki-client