$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b50938cb-9f50-364b-8769-74d96745db1a.roa File: b50938cb-9f50-364b-8769-74d96745db1a.roa (raw, json) Hash identifier: 1pkoDz6pyFfwgRdswu6SMXJo1taKpBEql8UpdvQ3NDM= Subject key identifier: D0:DE:C2:3E:7F:80:C0:A7:0A:49:59:FE:77:88:99:CD:19:89:97:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA88A155E2B637BA66580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b50938cb-9f50-364b-8769-74d96745db1a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.204.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a8:8a:15:5e:2b:63:7b:a6:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=7bdef5fb-ebf2-4fb8-bfec-0d4bc0b3366e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:1e:46:08:17:9d:ec:9e:7f:a6:b4:d7:ca: 1f:c0:8d:9e:65:b2:33:e0:5d:0a:a1:d0:79:78:68: c7:6e:0b:a9:ac:8d:61:be:ab:62:9f:a3:d4:98:21: eb:01:27:d3:34:10:80:68:fa:07:08:19:2f:2a:38: df:75:92:75:7b:01:38:eb:94:bd:b8:83:bf:16:31: 57:9e:be:34:d3:b0:8a:78:e0:22:8b:75:1b:fc:ec: 34:86:c3:a4:f1:f3:e6:11:3c:ce:35:50:19:1e:53: a6:b4:70:d8:6a:e9:f7:22:3c:bc:50:dc:c8:a0:09: f1:f3:83:0a:9e:01:4d:e1:b6:b8:b3:ec:58:95:5e: 3d:da:ae:65:81:e1:eb:3e:12:11:03:77:df:29:8a: 7a:65:a8:08:c9:d6:91:44:3d:36:d3:6d:e7:48:b2: 02:e1:49:16:5e:00:cb:3c:b0:99:7b:39:ef:99:69: dd:6a:f3:10:7e:f6:ee:9c:0a:52:fa:05:3b:7c:ee: ff:de:3e:54:a4:65:45:16:c3:5a:17:bc:13:cc:82: 12:77:52:1d:ba:34:c1:51:3c:f9:c5:28:dd:c0:05: 2a:c9:36:7c:33:2a:cb:6e:c1:e7:82:fa:76:e6:98: a0:21:34:83:ba:80:18:a9:83:42:36:37:1f:68:79: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DE:C2:3E:7F:80:C0:A7:0A:49:59:FE:77:88:99:CD:19:89:97:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b50938cb-9f50-364b-8769-74d96745db1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a3:f7:27:cf:67:8a:73:a5:ac:40:c9:a8:25:3a:a6:96:aa: cf:d2:cf:ec:ac:0a:c1:5e:e5:ce:84:74:f1:b2:29:96:88:2d: 2c:73:2c:f4:3b:b8:81:fe:d2:77:ff:27:76:b8:41:63:ef:a3: c4:1e:45:ea:b7:80:23:58:fe:4b:f6:0d:bc:c4:aa:fb:2d:97: 95:27:5c:2c:de:42:68:68:1f:36:ba:cf:82:b2:4c:23:ba:24: 79:91:97:85:87:5b:be:2b:89:27:92:55:ea:70:1c:1c:75:8e: 99:e3:cd:fd:12:21:5c:d8:c5:f4:63:29:bc:21:2c:37:47:f8: 41:dd:89:0a:b9:f1:ff:1b:88:74:56:70:60:74:f7:96:ba:8f: 02:9e:11:a4:a6:b6:c6:33:31:44:a3:52:b4:44:19:39:e0:98: e7:f7:ab:63:ee:71:28:75:8a:16:d0:7a:81:f8:52:61:d4:8a: 41:9f:46:15:ac:76:e7:c9:21:66:54:c8:f6:84:2d:f0:a9:0d: bf:85:1d:ba:b6:5d:f4:85:9d:31:82:c6:06:c5:74:f9:b9:aa: 66:03:f1:ef:a5:70:d2:77:f5:9d:dc:b9:ec:e3:1c:fc:2a:45: 82:84:44:86:10:c6:60:39:ac:e0:fd:21:a6:e0:a7:ab:05:b3: 11:a9:b2:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqiKFV4rY3umZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk N2JkZWY1ZmItZWJmMi00ZmI4LWJmZWMtMGQ0YmMwYjMzNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY4eRggXneyef6a018ofwI2eZbIz4F0KodB5 eGjHbguprI1hvqtin6PUmCHrASfTNBCAaPoHCBkvKjjfdZJ1ewE465S9uIO/FjFX nr4007CKeOAii3Ub/Ow0hsOk8fPmETzONVAZHlOmtHDYaun3Ijy8UNzIoAnx84MK ngFN4ba4s+xYlV492q5lgeHrPhIRA3ffKYp6ZagIydaRRD02023nSLIC4UkWXgDL PLCZeznvmWndavMQfvbunApS+gU7fO7/3j5UpGVFFsNaF7wTzIISd1IdujTBUTz5 xSjdwAUqyTZ8MyrLbsHngvp25pigITSDuoAYqYNCNjcfaHkO9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDewj5/gMCnCklZ/neImc0ZiZc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjUwOTM4Y2ItOWY1MC0z NjRiLTg3NjktNzRkOTY3NDVkYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWj9yfPZ4pzpaxAyaglOqaWqs/Sz+ysCsFe5c6EdPGyKZaILSxzLPQ7 uIH+0nf/J3a4QWPvo8QeReq3gCNY/kv2DbzEqvstl5UnXCzeQmhoHza6z4KyTCO6 JHmRl4WHW74riSeSVepwHBx1jpnjzf0SIVzYxfRjKbwhLDdH+EHdiQq58f8biHRW cGB095a6jwKeEaSmtsYzMUSjUrREGTngmOf3q2PucSh1ihbQeoH4UmHUikGfRhWs dufJIWZUyPaELfCpDb+FHbq2XfSFnTGCxgbFdPm5qmYD8e+lcNJ39Z3cuezjHPwq RYKERIYQxmA5rOD9Iabgp6sFsxGpslI= -----END CERTIFICATE-----Generated at Thu Mar 19 01:50:06 2026 by rpki-client