$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba901b0f-8189-3408-8e2f-d9d6a6006520.roa File: ba901b0f-8189-3408-8e2f-d9d6a6006520.roa (raw, json) Hash identifier: FURSwb4b2IAtyh+jR8ZMXhmrwzsfmh20G6VlCl66wl0= Subject key identifier: 49:F4:A4:2B:2F:D5:F8:3F:FB:03:8B:94:30:56:4F:1D:EF:46:74:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA95C11884D5D3F63B7900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba901b0f-8189-3408-8e2f-d9d6a6006520.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.240.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:95:c1:18:84:d5:d3:f6:3b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=8ed5cf36-8786-4953-a73d-7c339531263d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:22:8b:42:4c:ea:1e:eb:11:4a:bb:94:ea: ab:9f:0e:d6:78:87:00:a6:25:aa:29:9d:82:fb:82: 76:d3:3d:98:86:7f:eb:d8:c3:bd:b7:89:ff:2a:a5: 9d:8a:ec:8a:df:a3:a3:b6:ba:69:77:bf:67:32:d5: 67:b9:5d:a6:a3:e8:69:60:35:1f:ff:2e:18:28:d1: 0d:e0:2c:dd:ef:1d:bf:49:a3:c2:0f:11:6b:26:d8: 69:23:f5:e8:67:0b:61:4a:2a:f0:e5:f1:38:6e:22: 9a:7e:ab:78:cd:e7:fa:61:f1:80:6a:04:dc:e9:9c: 3f:26:9f:c9:07:2b:26:dc:f4:11:d4:b0:3a:f4:5d: fd:6d:f6:1e:d3:95:8e:75:72:fe:7e:1b:23:0e:ad: f7:55:90:0a:88:cc:8f:f0:d9:8c:58:33:51:ed:d2: 88:7a:80:09:31:58:35:73:48:0c:e8:04:94:31:80: 47:24:fd:80:e5:d1:58:79:19:32:a3:01:50:49:e4: 46:cb:00:55:c2:f5:66:bf:eb:4c:f8:3e:d5:08:87: e5:fa:ea:84:26:5a:9a:2f:b0:c3:e0:ff:84:cb:54: a6:6a:98:24:66:32:21:31:6a:1c:5e:60:b0:69:49: 9c:cf:9a:de:d5:42:6b:d4:22:73:ee:33:b4:7f:fc: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F4:A4:2B:2F:D5:F8:3F:FB:03:8B:94:30:56:4F:1D:EF:46:74:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba901b0f-8189-3408-8e2f-d9d6a6006520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7d:5d:80:6f:14:83:80:aa:5b:e6:b0:64:fe:8f:9b:d6:ba: 66:97:0f:dc:44:43:c5:c3:92:7c:1d:79:05:b1:35:f5:ae:43: ea:e5:f5:5c:69:bb:1a:7d:b2:16:31:4d:c3:98:14:2f:34:84: 3a:ba:82:1d:ee:52:7b:0f:55:58:eb:4e:23:56:ed:92:f2:7e: e5:d0:b1:44:ac:2c:15:fc:aa:ac:78:f1:27:17:0c:09:fd:7e: d1:f9:01:72:ad:af:86:2c:28:a6:d3:f8:9a:c9:9d:98:4a:76: f3:72:39:94:8b:03:cd:04:a4:f7:86:3c:54:56:31:ae:21:4d: 9a:3e:e1:e3:d8:3c:72:bc:ea:bf:7f:01:ff:12:f6:0a:09:c5: c1:e5:97:5b:df:20:2f:4e:d6:f1:ba:d9:77:42:0c:31:b2:35: 2d:0c:6c:7a:8d:38:be:e1:a4:40:63:6c:aa:9f:5f:34:15:cb: 48:64:3e:63:89:6b:84:ff:27:4c:6e:cc:ff:17:9d:da:9b:45: 1b:2b:30:4c:0b:b4:dc:ee:14:fa:21:14:45:7e:75:bc:98:12: 0c:b2:07:13:a8:4d:d4:5b:e0:20:9e:95:a1:a5:3c:1f:7b:c6: 9a:fe:00:67:cf:22:16:4e:93:d5:5a:cb:6f:42:7d:9b:f3:38: 1f:cd:d9:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpXBGITV0/Y7eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OGVkNWNmMzYtODc4Ni00OTUzLWE3M2QtN2MzMzk1MzEyNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMsii0JM6h7rEUq7lOqrnw7WeIcApiWqKZ2C +4J20z2Yhn/r2MO9t4n/KqWdiuyK36Ojtrppd79nMtVnuV2mo+hpYDUf/y4YKNEN 4Czd7x2/SaPCDxFrJthpI/XoZwthSirw5fE4biKafqt4zef6YfGAagTc6Zw/Jp/J Bysm3PQR1LA69F39bfYe05WOdXL+fhsjDq33VZAKiMyP8NmMWDNR7dKIeoAJMVg1 c0gM6ASUMYBHJP2A5dFYeRkyowFQSeRGywBVwvVmv+tM+D7VCIfl+uqEJlqaL7DD 4P+Ey1SmapgkZjIhMWocXmCwaUmcz5re1UJr1CJz7jO0f/xhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn0pCsv1fg/+wOLlDBWTx3vRnTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE5MDFiMGYtODE4OS0z NDA4LThlMmYtZDlkNmE2MDA2NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd9XYBvFIOAqlvmsGT+j5vWumaXD9xEQ8XDknwdeQWxNfWuQ+rl9Vxp uxp9shYxTcOYFC80hDq6gh3uUnsPVVjrTiNW7ZLyfuXQsUSsLBX8qqx48ScXDAn9 ftH5AXKtr4YsKKbT+JrJnZhKdvNyOZSLA80EpPeGPFRWMa4hTZo+4ePYPHK86r9/ Af8S9goJxcHll1vfIC9O1vG62XdCDDGyNS0MbHqNOL7hpEBjbKqfXzQVy0hkPmOJ a4T/J0xuzP8XndqbRRsrMEwLtNzuFPohFEV+dbyYEgyyBxOoTdRb4CCelaGlPB97 xpr+AGfPIhZOk9Vay29CfZvzOB/N2Uo= -----END CERTIFICATE-----Generated at Thu Mar 19 01:53:06 2026 by rpki-client