$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa File: a1f65c37-2173-3530-83d3-e99277d5c356.roa (raw, json) Hash identifier: kGQ9kkQF3uNDQwasicyXiP51eoWa5sCdm0B7WBHaJXg= Subject key identifier: A0:1B:CD:19:FF:55:06:D7:2F:97:B6:F1:25:C5:51:7C:09:D4:16:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D1F4A56FA5728B24130927B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 104.155.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:56:fa:57:28:b2:41:30:92:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=04a14f71-fd51-4ed1-8588-3ba82d565bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:05:82:ca:fc:9b:5b:b9:4a:76:0c:cd:be:de: db:b7:e7:aa:c9:67:41:3d:15:15:bc:2b:4a:b1:27: 4e:c3:dd:29:e2:16:34:0f:cd:5a:38:9a:8e:72:d8: f4:48:dd:db:97:a7:f4:f1:b0:a6:ca:86:3d:51:0f: 11:77:74:fe:87:f5:1a:2d:c7:0e:ba:7e:c8:72:11: ae:c1:32:bd:c4:79:f9:68:0f:bb:6b:40:43:17:de: 60:96:5b:0a:0e:25:7e:67:f3:75:e9:fb:45:e6:cf: 1f:c3:7b:e8:65:22:1e:5b:c5:67:8d:8f:49:bb:a0: 2c:84:ee:60:58:73:aa:ed:2f:33:7d:7a:b3:f6:9e: 99:f8:c9:22:04:ed:11:74:41:77:64:32:c6:1d:54: 24:1f:f8:97:95:24:b1:4b:2a:96:7e:00:84:8e:68: 7d:bf:79:db:e0:2e:41:e7:2d:4a:20:7e:df:b7:04: 1a:0e:8a:c9:42:67:f8:9b:5d:06:1b:4a:b2:da:41: 11:1a:33:38:bd:48:86:e1:1e:d5:46:92:63:8b:0a: 18:85:48:bb:13:12:da:a7:87:30:8c:6b:a1:55:80: 13:a1:49:62:d5:f0:c1:a5:3e:85:f2:21:60:dc:66: a7:03:46:01:53:c4:5c:0d:77:b5:44:46:d0:c2:46: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1B:CD:19:FF:55:06:D7:2F:97:B6:F1:25:C5:51:7C:09:D4:16:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.155.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c1:c4:90:c8:31:9a:1f:90:78:ca:1d:1f:4c:68:47:69:49: eb:2d:5d:f2:bb:77:06:20:35:b0:be:26:e0:e4:64:1a:39:47: 14:7a:f4:b3:b0:66:6f:7a:5c:b1:cd:30:80:be:66:fc:ab:1a: 38:81:fe:ce:de:52:86:87:4f:25:f1:27:ee:20:39:b8:81:fe: 4a:13:72:f8:b7:1b:55:59:74:c0:de:5e:bd:f3:da:25:48:1b: 9b:17:96:96:d1:53:f1:02:53:57:9b:24:a6:41:75:76:82:bd: 0e:ad:c8:3c:8f:e9:cc:f8:60:f7:07:75:18:b1:43:99:aa:06: c7:59:dd:c0:4d:85:27:dd:00:5f:20:03:aa:4d:48:a9:95:b8: 31:a4:96:91:4c:fa:77:d5:a2:29:43:50:e9:ce:96:75:47:7d: 7b:cf:7a:ff:79:20:30:81:19:6e:f2:5e:b3:5b:bb:4f:63:a6: 9c:73:7e:d3:96:62:b3:19:03:0d:a1:15:60:a2:8c:c4:d3:2f: 88:b6:52:b2:89:86:0e:7a:d4:7a:23:6b:6c:f2:82:8f:ad:fa: 55:cf:c0:da:06:41:c2:48:95:d6:08:ec:5e:28:12:c1:9a:8f: bb:4b:51:05:9a:6a:6b:60:c6:4b:c9:0b:cf:b6:00:87:10:61: 58:10:3c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlb6VyiyQTCSe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MDRhMTRmNzEtZmQ1MS00ZWQxLTg1ODgtM2JhODJkNTY1YmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgWCyvybW7lKdgzNvt7bt+eqyWdBPRUVvCtK sSdOw90p4hY0D81aOJqOctj0SN3bl6f08bCmyoY9UQ8Rd3T+h/UaLccOun7IchGu wTK9xHn5aA+7a0BDF95gllsKDiV+Z/N16ftF5s8fw3voZSIeW8VnjY9Ju6AshO5g WHOq7S8zfXqz9p6Z+MkiBO0RdEF3ZDLGHVQkH/iXlSSxSyqWfgCEjmh9v3nb4C5B 5y1KIH7ftwQaDorJQmf4m10GG0qy2kERGjM4vUiG4R7VRpJjiwoYhUi7ExLap4cw jGuhVYAToUli1fDBpT6F8iFg3GanA0YBU8RcDXe1REbQwkanZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAbzRn/VQbXL5e28SXFUXwJ1BaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTFmNjVjMzctMjE3My0z NTMwLTgzZDMtZTk5Mjc3ZDVjMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrBxJDIMZofkHjKHR9MaEdpSestXfK7dwYgNbC+JuDkZBo5RxR69LOw Zm96XLHNMIC+ZvyrGjiB/s7eUoaHTyXxJ+4gObiB/koTcvi3G1VZdMDeXr3z2iVI G5sXlpbRU/ECU1ebJKZBdXaCvQ6tyDyP6cz4YPcHdRixQ5mqBsdZ3cBNhSfdAF8g A6pNSKmVuDGklpFM+nfVoilDUOnOlnVHfXvPev95IDCBGW7yXrNbu09jppxzftOW YrMZAw2hFWCijMTTL4i2UrKJhg561Hoja2zygo+t+lXPwNoGQcJIldYI7F4oEsGa j7tLUQWaamtgxkvJC8+2AIcQYVgQPGk= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:39 2026 by rpki-client