$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa File: bd538f77-993a-3a7b-b68e-2bd33845696f.roa (raw, json) Hash identifier: OMkAgihLAHHMSCv5MkZus9uNHVIt6EmA+gEiCFNHmQE= Subject key identifier: 0C:AF:9A:B0:D8:39:8C:A8:EE:F9:6D:A8:2E:AD:91:7A:B0:83:EF:BB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6AEAE601DC8CD4426910 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.240.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6a:ea:e6:01:dc:8c:d4:42:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=22296e7f-4fc4-4ba9-b58b-57c38a10fb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:f1:b8:b1:1d:34:79:d1:7e:fd:d4:4c:63: e5:20:a0:cb:da:ee:bc:9f:b6:6d:d1:38:8a:60:c6: 9e:f8:e6:02:6f:b8:1d:48:f1:f0:1a:52:cc:cd:57: 52:b5:d3:80:44:a2:b9:79:4c:e6:f2:82:d2:cd:eb: f5:32:15:67:66:81:ac:ff:a5:f6:e1:86:d8:6b:ac: 91:77:16:91:e3:48:5d:88:b1:b5:5b:c4:09:18:c0: c9:8c:87:eb:2d:01:b9:a6:db:a8:8e:2f:88:9c:c3: ed:1e:e9:44:68:c5:42:af:80:cc:23:4d:6e:c9:49: 02:f0:a9:98:8a:b9:40:e0:49:f3:ee:3d:1e:99:9a: e3:72:86:9a:04:cd:e1:49:90:84:13:09:73:59:1c: 9b:23:16:5f:15:20:11:ae:9e:b3:1c:a0:93:ec:c0: 42:9a:12:7a:b6:cd:72:d1:d2:94:48:a8:f1:7a:f0: f1:d8:5e:7e:53:90:75:64:df:67:2c:24:a5:13:fb: 41:14:e5:08:f3:5c:9d:c6:4f:23:f1:fb:b2:84:7e: 91:36:8f:0f:5e:b3:58:95:a7:3e:f0:7c:91:0a:12: 3a:4d:7e:3a:b6:56:b2:96:aa:9d:f4:77:32:1a:ce: ca:b3:5b:83:61:14:b5:26:7c:0c:c2:2f:66:45:03: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AF:9A:B0:D8:39:8C:A8:EE:F9:6D:A8:2E:AD:91:7A:B0:83:EF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8f:99:db:3e:01:fd:99:16:85:6a:06:ca:c1:bd:ef:86:cd: bf:3b:74:23:8f:7e:71:c8:eb:b0:83:56:77:14:8a:da:15:a6: ce:86:1e:67:e2:32:e4:a9:5b:cb:1d:80:6d:08:36:43:26:1b: 82:5b:be:98:a5:48:c4:09:9c:07:ef:e9:eb:54:4a:79:ec:df: f2:39:1e:79:2d:f1:86:cd:f4:50:44:40:64:14:b9:a9:f5:db: f4:4f:01:36:49:7a:17:b0:3f:1d:c5:31:98:6f:f1:90:09:7e: 83:0b:a5:08:7f:d8:ba:fe:aa:a0:1c:27:f6:b2:d0:09:49:0d: 6d:83:e6:35:d7:1f:9a:41:3c:fa:62:c4:59:0c:4d:66:01:f8: 0e:81:4d:19:eb:1f:ca:43:b2:a0:5e:21:f7:46:e2:ed:1b:df: cc:e2:bb:99:b3:79:ab:54:79:95:52:60:07:0d:0e:01:53:1b: 72:43:65:17:31:b4:ec:14:4f:fc:71:73:c7:0e:e2:f5:60:a7: 54:f9:87:4d:3c:67:36:4c:08:c4:00:9a:f5:c3:99:42:e0:40: 5c:74:6a:82:63:bc:de:0f:5b:b9:ef:5e:1c:36:d0:5c:b7:45: 2b:56:02:53:53:d2:cf:2d:d4:2f:cd:53:06:e2:91:b9:13:99: b2:af:27:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmrq5gHcjNRCaRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjIyOTZlN2YtNGZjNC00YmE5LWI1OGItNTdjMzhhMTBmYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpTxuLEdNHnRfv3UTGPlIKDL2u68n7Zt0TiK YMae+OYCb7gdSPHwGlLMzVdStdOARKK5eUzm8oLSzev1MhVnZoGs/6X24YbYa6yR dxaR40hdiLG1W8QJGMDJjIfrLQG5ptuoji+InMPtHulEaMVCr4DMI01uyUkC8KmY irlA4Enz7j0emZrjcoaaBM3hSZCEEwlzWRybIxZfFSARrp6zHKCT7MBCmhJ6ts1y 0dKUSKjxevDx2F5+U5B1ZN9nLCSlE/tBFOUI81ydxk8j8fuyhH6RNo8PXrNYlac+ 8HyRChI6TX46tlaylqqd9HcyGs7Ks1uDYRS1JnwMwi9mRQNE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyvmrDYOYyo7vltqC6tkXqwg++7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQ1MzhmNzctOTkzYS0z YTdiLWI2OGUtMmJkMzM4NDU2OTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Pmds+Af2ZFoVqBsrBve+Gzb87dCOPfnHI67CDVncUitoVps6GHmfi MuSpW8sdgG0INkMmG4JbvpilSMQJnAfv6etUSnns3/I5Hnkt8YbN9FBEQGQUuan1 2/RPATZJehewPx3FMZhv8ZAJfoMLpQh/2Lr+qqAcJ/ay0AlJDW2D5jXXH5pBPPpi xFkMTWYB+A6BTRnrH8pDsqBeIfdG4u0b38ziu5mzeatUeZVSYAcNDgFTG3JDZRcx tOwUT/xxc8cO4vVgp1T5h008ZzZMCMQAmvXDmULgQFx0aoJjvN4PW7nvXhw20Fy3 RStWAlNT0s8t1C/NUwbikbkTmbKvJ4o= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:15 2026 by rpki-client