$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa File: cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa (raw, json) Hash identifier: jjTikySyL42R196dW43ivt9TPcMGyYMqQr0qTlTdBnI= Subject key identifier: BE:9B:A7:A3:36:9A:D8:6E:F1:0B:33:7D:FD:CA:80:A6:91:F2:E5:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA0BE95F4AE48E7587340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.222.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a0:be:95:f4:ae:48:e7:58:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=cbe09442-e008-4b45-b3bb-54fdd7b54869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:ad:c3:85:e4:2c:fe:8a:b9:47:8f:a3:56: e2:50:2a:d8:d1:5d:8a:e6:00:9c:23:5a:bb:43:e7: 0d:c8:9b:ee:c7:3b:4b:2f:99:c3:08:15:4c:12:1d: 5a:0f:0d:81:b6:58:28:42:b0:4f:47:e9:60:6a:83: fa:46:95:83:50:85:63:72:10:49:5b:c8:dd:25:00: 1a:a9:b0:e7:1e:f6:47:2e:bc:6a:13:4e:5a:09:5f: 08:42:55:84:7a:b6:0e:d6:05:73:9c:8f:d3:9e:1a: 16:8b:47:94:ef:4c:9e:4f:7e:82:12:46:37:7f:b7: 6c:78:14:03:d4:b7:88:2a:be:a2:07:7a:8d:71:f0: 16:a8:77:6f:ca:40:66:c2:28:e0:94:bb:75:97:bc: 30:5c:a9:75:fa:c8:df:0a:1e:c6:48:19:3f:7c:8d: 80:5c:6b:94:ce:cb:33:50:ff:06:9d:a0:28:99:62: 88:6f:81:8d:f4:8a:a7:01:0e:a8:b4:93:8d:cf:37: c9:95:c8:c2:f9:5e:78:67:cf:2a:6b:56:83:13:6f: ae:17:9d:f0:23:9f:65:85:2f:7e:64:1f:61:50:c6: 2a:d7:eb:d0:81:28:8c:00:95:52:2c:0f:4f:cc:7b: 6f:e2:f7:b4:23:78:bd:c0:56:01:c8:02:3a:8d:a4: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:A7:A3:36:9A:D8:6E:F1:0B:33:7D:FD:CA:80:A6:91:F2:E5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:77:d7:3c:f7:bd:b1:22:84:50:0b:1b:4e:4d:68:ff:b5:ca: 97:d5:45:0f:f7:46:01:df:04:58:94:c5:e9:38:09:be:0d:36: d8:80:d8:5b:ba:c3:74:22:38:9a:b8:f6:95:b7:40:d7:ee:80: d5:9f:b1:5a:d4:fb:f4:32:bd:a5:13:64:0d:48:9a:15:55:54: b7:23:40:3b:6f:84:7f:e3:d1:f4:ac:b9:09:ae:ec:00:15:d6: 0e:c0:d2:5f:1b:af:5e:1d:bd:5e:55:97:65:ba:6b:0d:87:27: 0d:69:01:10:0a:a8:2b:99:a0:8d:a2:48:72:5e:b3:aa:22:ff: f5:17:d2:51:92:1d:9e:f8:46:f3:6b:2b:25:75:3c:55:83:43: 9e:47:2c:07:b9:aa:5e:0a:a4:0d:67:8d:9f:72:c1:3b:4e:ad: 42:da:26:97:28:32:09:17:32:38:a9:da:65:b4:cf:a3:93:27: ce:e3:dc:95:42:cf:a9:ea:74:9d:44:bb:69:9c:cd:ac:0a:a5: 6a:e5:f0:1d:1f:19:05:23:0e:3c:4c:4f:c7:49:1d:1c:a0:36: ac:11:50:80:f7:97:fc:44:73:c6:dc:2a:04:13:81:b1:98:e6: 57:d0:16:f3:e1:ad:cf:ca:17:cb:06:fe:88:50:f8:0c:e1:0e: 5e:02:ea:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqC+lfSuSOdYc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2JlMDk0NDItZTAwOC00YjQ1LWIzYmItNTRmZGQ3YjU0ODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfitw4XkLP6KuUePo1biUCrY0V2K5gCcI1q7 Q+cNyJvuxztLL5nDCBVMEh1aDw2BtlgoQrBPR+lgaoP6RpWDUIVjchBJW8jdJQAa qbDnHvZHLrxqE05aCV8IQlWEerYO1gVznI/TnhoWi0eU70yeT36CEkY3f7dseBQD 1LeIKr6iB3qNcfAWqHdvykBmwijglLt1l7wwXKl1+sjfCh7GSBk/fI2AXGuUzssz UP8GnaAomWKIb4GN9IqnAQ6otJONzzfJlcjC+V54Z88qa1aDE2+uF53wI59lhS9+ ZB9hUMYq1+vQgSiMAJVSLA9PzHtv4ve0I3i9wFYByAI6jaTggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6bp6M2mthu8Qszff3KgKaR8uWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZkZjViNzEtZTgwMy0z Y2I4LWEzZDgtN2E4NDVmZWE0OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ31zz3vbEihFALG05NaP+1ypfVRQ/3RgHfBFiUxek4Cb4NNtiA2Fu6 w3QiOJq49pW3QNfugNWfsVrU+/QyvaUTZA1ImhVVVLcjQDtvhH/j0fSsuQmu7AAV 1g7A0l8br14dvV5Vl2W6aw2HJw1pARAKqCuZoI2iSHJes6oi//UX0lGSHZ74RvNr KyV1PFWDQ55HLAe5ql4KpA1njZ9ywTtOrULaJpcoMgkXMjip2mW0z6OTJ87j3JVC z6nqdJ1Eu2mczawKpWrl8B0fGQUjDjxMT8dJHRygNqwRUID3l/xEc8bcKgQTgbGY 5lfQFvPhrc/KF8sG/ohQ+AzhDl4C6vE= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:06 2026 by rpki-client