$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a18f866b-1148-3b97-ae9c-6d4448308ca3.roa File: a18f866b-1148-3b97-ae9c-6d4448308ca3.roa (raw, json) Hash identifier: 17dRh9UWCHjFWFWn/mmVr+u6iDAnYYOYNrC+iE0GTHw= Subject key identifier: 13:AF:06:C3:F2:53:1C:44:13:73:27:F5:8A:C3:83:8B:03:32:DB:03 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4D6E2D2A05AE33100F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a18f866b-1148-3b97-ae9c-6d4448308ca3.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.188.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4d:6e:2d:2a:05:ae:33:10:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=5a5a8efd-db0c-413c-b2ba-8ffc0353c02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ad:3b:f1:36:03:07:3a:e7:89:e6:95:d1:c3: cc:d3:c2:9f:0f:d3:f6:51:8c:13:4e:eb:bc:36:17: 55:51:cd:b6:6a:51:80:61:55:32:74:56:12:15:e1: bd:57:24:b7:45:91:0e:50:6e:be:40:88:c1:06:81: 65:93:c3:f8:00:c4:70:1b:a2:94:40:7c:f9:e3:44: b5:1d:98:e5:35:1b:c8:52:77:e8:69:b3:ae:55:a9: 4b:89:56:c5:39:68:a8:2d:14:62:ed:e5:5b:cb:17: 45:60:9c:b9:71:09:20:4a:66:90:64:37:59:d6:c7: 99:aa:93:a3:52:0f:ff:8b:21:e5:ea:c2:60:b3:8d: fe:82:b3:57:34:22:c4:f0:4d:34:d1:31:1d:ce:35: ee:b3:3d:51:12:d3:a6:f8:59:05:65:ba:d3:2a:ce: 67:80:b5:51:24:e4:bf:1d:85:14:78:29:64:1d:90: f7:5c:82:62:20:3c:39:fe:d2:3f:d4:2b:38:fd:d8: 8b:3e:27:1c:e7:c7:dc:df:94:a7:98:b7:66:89:0a: d2:23:e2:76:2f:db:3e:eb:19:2c:bd:9d:e3:92:65: 55:57:4c:6c:94:39:a2:a6:9e:7c:0a:41:90:17:d3: 97:7c:0f:1a:88:84:ce:e2:19:ad:5d:a4:a8:34:3b: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:06:C3:F2:53:1C:44:13:73:27:F5:8A:C3:83:8B:03:32:DB:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a18f866b-1148-3b97-ae9c-6d4448308ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a9:c4:c4:7c:5e:b3:36:cc:37:8e:fc:e7:76:a7:fc:27:f8: 62:2f:75:de:b9:12:a6:d4:a7:00:87:d3:46:b0:e3:6f:25:a1: ef:8d:4c:6e:e4:bd:65:09:23:da:a3:52:4e:1f:3e:42:df:57: 1c:af:cd:97:42:c3:a7:13:96:3c:7f:c1:7a:bd:ee:1b:69:ed: b3:02:9e:dd:a6:2f:38:7f:1a:29:5a:71:28:b0:ca:04:53:1e: f8:e4:58:00:6f:7a:70:42:e5:53:95:39:98:57:12:7a:bb:ba: d0:7a:ef:1c:0d:9a:43:63:da:dc:17:e4:4a:cb:0d:bf:1a:b5: 1f:b8:23:4d:cd:42:d9:ba:b9:d5:84:2a:d5:ed:37:82:5d:84: 84:b1:1e:76:4f:f1:59:ac:d2:62:30:55:57:53:16:c0:ac:7f: 9f:a0:1d:b3:04:7a:29:f4:96:c8:07:c0:b5:75:4d:db:43:cb: ef:86:3a:da:58:c0:35:cd:bf:9c:0d:6b:6f:c2:6c:81:ff:07: cf:9b:16:56:35:2e:22:e0:00:20:6b:97:3d:95:b2:c3:cc:36: 6a:ae:cf:16:21:81:b2:8f:86:00:c4:6a:a8:74:25:14:69:b9: d5:bd:2a:16:68:81:b4:4c:1b:e8:43:2f:84:2c:de:87:53:c2: 5c:68:8d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqk1uLSoFrjMQDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NWE1YThlZmQtZGIwYy00MTNjLWIyYmEtOGZmYzAzNTNjMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia078TYDBzrnieaV0cPM08KfD9P2UYwTTuu8 NhdVUc22alGAYVUydFYSFeG9VyS3RZEOUG6+QIjBBoFlk8P4AMRwG6KUQHz540S1 HZjlNRvIUnfoabOuValLiVbFOWioLRRi7eVbyxdFYJy5cQkgSmaQZDdZ1seZqpOj Ug//iyHl6sJgs43+grNXNCLE8E000TEdzjXusz1REtOm+FkFZbrTKs5ngLVRJOS/ HYUUeClkHZD3XIJiIDw5/tI/1Cs4/diLPicc58fc35SnmLdmiQrSI+J2L9s+6xks vZ3jkmVVV0xslDmipp58CkGQF9OXfA8aiITO4hmtXaSoNDvI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOvBsPyUxxEE3Mn9YrDg4sDMtsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTE4Zjg2NmItMTE0OC0z Yjk3LWFlOWMtNmQ0NDQ4MzA4Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+pxMR8XrM2zDeO/Od2p/wn+GIvdd65EqbUpwCH00aw428loe+NTG7k vWUJI9qjUk4fPkLfVxyvzZdCw6cTljx/wXq97htp7bMCnt2mLzh/GilacSiwygRT HvjkWABvenBC5VOVOZhXEnq7utB67xwNmkNj2twX5ErLDb8atR+4I03NQtm6udWE KtXtN4JdhISxHnZP8Vms0mIwVVdTFsCsf5+gHbMEein0lsgHwLV1TdtDy++GOtpY wDXNv5wNa2/CbIH/B8+bFlY1LiLgACBrlz2VssPMNmquzxYhgbKPhgDEaqh0JRRp udW9KhZogbRMG+hDL4Qs3odTwlxojUU= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:08 2026 by rpki-client