$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa File: d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa (raw, json) Hash identifier: tVEqWk6PQ5TBNwo9I8mZ5bVCA+ZJFeL2svelmJGivVU= Subject key identifier: 77:3A:AA:7B:D6:27:27:E3:07:E4:65:2A:87:2E:D8:94:F7:8D:FE:C7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D1F4A820E50493E11878F4A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 130.211.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:82:0e:50:49:3e:11:87:8f:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=36ea68fc-54e9-4344-9048-1931da5df39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:f8:d2:d0:f7:69:85:13:e5:9e:bf:66:87: 3a:cf:ff:ed:10:0f:96:d0:71:5f:b7:0e:d2:de:2f: 6a:65:2d:27:1d:cd:e7:c0:f2:cf:8b:a5:13:a0:ae: 90:de:9e:c8:1d:ce:1b:3d:21:4b:54:3d:98:01:ce: b4:8c:66:85:8d:d0:4b:b7:50:11:24:00:36:77:eb: d3:fd:01:37:08:57:95:10:e2:8d:21:e8:1b:53:6a: 98:1d:89:0e:b6:42:6d:a5:a6:b6:57:54:d0:ff:7c: 99:0f:30:32:64:c2:72:3d:ad:ff:a5:76:5d:e9:37: c7:cb:2f:25:4e:88:b5:a8:8d:eb:ef:b9:60:a7:7f: c7:05:46:66:b5:5c:58:c3:35:f7:19:33:95:0d:dd: 42:17:ea:03:f1:2d:a6:81:65:2a:2f:82:88:ed:e4: 13:4d:71:44:01:ba:04:ae:0c:0b:1d:61:b7:84:54: c0:55:1e:72:05:bf:65:ba:22:0d:b2:2c:08:c7:72: ed:53:f9:d2:23:70:3b:d9:6f:ec:34:ab:85:98:02: a8:13:34:71:16:05:41:f7:f7:55:de:2b:98:5d:65: f6:a3:7d:f2:39:ea:22:93:1e:1f:92:b8:95:24:23: d4:48:5e:38:ea:95:e3:47:21:31:36:82:61:4c:2f: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3A:AA:7B:D6:27:27:E3:07:E4:65:2A:87:2E:D8:94:F7:8D:FE:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:68:35:78:17:08:d0:c2:18:51:fb:f4:4c:f8:10:08:35:03: 0b:40:c9:72:fa:97:0f:2d:1d:80:b4:f2:68:9b:fe:1f:22:52: 05:fb:76:4d:8f:99:63:85:72:74:3e:45:c7:34:44:a2:a3:fb: 3e:42:ab:bf:c3:70:51:9c:ea:5e:91:6f:bb:b9:8b:3f:d0:fe: 05:83:6f:53:50:66:87:49:ed:40:b6:cd:ea:88:f5:b5:93:0d: 35:c1:24:3c:13:7a:f7:df:48:73:17:6c:37:fa:21:33:82:3a: bf:cd:98:e6:f5:1b:59:dc:2f:5e:6b:8c:4d:bc:a3:99:5e:d9: 3d:e8:46:b9:47:5c:ac:e3:cb:16:09:3e:86:65:3d:60:5b:6d: 19:b1:f7:0b:13:44:f2:1b:51:5a:5f:a6:04:31:44:39:75:40: 75:e4:27:82:a1:0e:ff:e7:30:20:80:57:be:81:d9:58:26:90: 1d:4a:bf:fb:93:16:d5:8d:24:75:0c:1b:d6:d0:e0:09:4f:10: c6:2a:db:8f:57:ad:da:34:5a:5a:6b:a8:fa:72:49:bd:58:41: 8f:de:17:b1:f1:9d:b5:7d:f0:7d:59:7d:78:1d:a9:c3:85:3b: 2c:30:c6:b6:ab:bf:bd:c9:7a:77:3d:32:0e:00:d1:99:01:96: d8:22:da:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoIOUEk+EYePSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MzZlYTY4ZmMtNTRlOS00MzQ0LTkwNDgtMTkzMWRhNWRmMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1r40tD3aYUT5Z6/Zoc6z//tEA+W0HFftw7S 3i9qZS0nHc3nwPLPi6UToK6Q3p7IHc4bPSFLVD2YAc60jGaFjdBLt1ARJAA2d+vT /QE3CFeVEOKNIegbU2qYHYkOtkJtpaa2V1TQ/3yZDzAyZMJyPa3/pXZd6TfHyy8l Toi1qI3r77lgp3/HBUZmtVxYwzX3GTOVDd1CF+oD8S2mgWUqL4KI7eQTTXFEAboE rgwLHWG3hFTAVR5yBb9luiINsiwIx3LtU/nSI3A72W/sNKuFmAKoEzRxFgVB9/dV 3iuYXWX2o33yOeoikx4fkriVJCPUSF446pXjRyExNoJhTC8ZVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc6qnvWJyfjB+RlKocu2JT3jf7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDA5ZTZhOTUtZGUzZC0z NDVkLWJkNjAtMGM4YzVmMWViMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgtMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRoNXgXCNDCGFH79Ez4EAg1AwtAyXL6lw8tHYC08mib/h8iUgX7dk2P mWOFcnQ+Rcc0RKKj+z5Cq7/DcFGc6l6Rb7u5iz/Q/gWDb1NQZodJ7UC2zeqI9bWT DTXBJDwTevffSHMXbDf6ITOCOr/NmOb1G1ncL15rjE28o5le2T3oRrlHXKzjyxYJ PoZlPWBbbRmx9wsTRPIbUVpfpgQxRDl1QHXkJ4KhDv/nMCCAV76B2VgmkB1Kv/uT FtWNJHUMG9bQ4AlPEMYq249Xrdo0WlprqPpySb1YQY/eF7HxnbV98H1ZfXgdqcOF Oywwxrarv73Jenc9Mg4A0ZkBltgi2lA= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:43 2026 by rpki-client