$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1b2c949-53d6-381a-8fe7-62a862aa1408.roa File: d1b2c949-53d6-381a-8fe7-62a862aa1408.roa (raw, json) Hash identifier: QNhqwceQxh1Fp48slz5oOg4gZkJe4ad12a1bbhDYG1o= Subject key identifier: 4A:FF:2A:7C:18:67:03:6C:9B:1E:0A:81:32:EF:6A:AC:31:9B:02:A0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6798E1EFBBD61E09EF08 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1b2c949-53d6-381a-8fe7-62a862aa1408.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.235.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:67:98:e1:ef:bb:d6:1e:09:ef:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=28ecc128-3268-4b8c-80e1-62dd758ca17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:a1:45:5e:32:63:e7:be:3b:ef:10:d8:99: 6d:c0:a2:59:81:ed:0d:bd:ac:dc:cf:f3:51:39:a9: b4:f0:13:1d:bd:a1:f1:2c:72:29:28:45:14:28:fb: 4e:76:bb:63:99:c8:b6:91:23:80:50:76:32:6f:e1: 12:b7:d9:f1:79:f0:ee:62:bc:70:fa:27:02:bb:08: f0:18:c8:74:06:ff:08:3e:b8:33:71:57:76:f4:7a: ca:7f:93:e2:51:47:fa:fb:5d:2d:15:e7:f2:d5:bb: 5e:2c:42:2f:85:33:e9:b0:3a:89:5e:01:b9:18:8f: 41:2c:f7:2c:2b:25:b7:b9:d5:ec:dc:45:97:ab:69: 74:e9:73:9b:b2:cd:36:31:fc:f0:ef:a9:3f:c4:e3: 98:39:e7:11:2b:7f:d4:26:35:7b:20:ed:5d:c9:ce: 81:6d:a4:65:06:42:69:f5:a3:c6:84:75:32:7c:4f: 3a:1b:ca:27:c2:6f:8a:c4:b1:e1:81:e1:cb:51:82: d0:f6:e8:f2:44:f7:12:e9:cf:5b:df:2c:5e:0c:35: b4:aa:4a:55:13:69:e2:43:06:e6:ca:e9:a1:20:d8: 95:07:86:71:31:3c:8e:4d:c3:ac:ea:58:64:f8:cc: 9a:42:7a:e3:63:5e:79:ac:d2:86:33:5a:2f:23:a1: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FF:2A:7C:18:67:03:6C:9B:1E:0A:81:32:EF:6A:AC:31:9B:02:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1b2c949-53d6-381a-8fe7-62a862aa1408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:35:29:71:db:81:46:b0:2b:18:5b:ab:d8:45:e6:38:09:56: cf:4d:ed:e8:4a:9c:1c:b8:0d:2c:22:46:02:dd:d5:40:e4:67: e7:bd:96:d4:ec:32:00:74:12:d2:9c:3a:ec:64:d6:14:09:38: 92:c1:4c:7b:7a:08:64:fb:2c:93:59:60:38:7d:ea:57:01:48: 2c:03:43:94:5d:a9:5a:23:78:80:09:30:37:e8:c7:88:69:29: dd:f6:e8:cf:49:6f:11:80:bc:d2:d7:50:4a:b1:ec:90:9a:32: 90:31:47:41:a5:13:12:b8:b3:fb:21:c2:e9:ca:f7:60:74:a6: 83:f3:96:99:dd:97:e6:c4:7e:cf:bd:27:f6:c6:48:a4:23:ca: 5a:f1:37:b9:a0:a9:11:e7:0b:e0:7b:61:42:c6:2d:1b:1e:8b: 36:0d:1c:d9:ab:bf:d8:05:e2:1d:2c:24:b4:c3:88:05:5b:27: d0:35:bb:ea:58:5c:45:12:dd:cc:83:87:6f:57:ad:cf:d0:39: da:a8:f8:91:d2:a1:a4:02:b7:74:45:7b:12:4f:65:3b:53:16: f9:6c:9f:db:6d:9c:0d:b2:da:3a:49:87:2a:33:5c:30:f4:f6: ab:32:fe:f3:fe:8d:13:39:ca:1f:1d:7f:91:48:23:45:7d:bf: a5:e6:07:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmeY4e+71h4J7wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjhlY2MxMjgtMzI2OC00YjhjLTgwZTEtNjJkZDc1OGNhMTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wyhRV4yY+e+O+8Q2JltwKJZge0Nvazcz/NR Oam08BMdvaHxLHIpKEUUKPtOdrtjmci2kSOAUHYyb+ESt9nxefDuYrxw+icCuwjw GMh0Bv8IPrgzcVd29HrKf5PiUUf6+10tFefy1bteLEIvhTPpsDqJXgG5GI9BLPcs KyW3udXs3EWXq2l06XObss02Mfzw76k/xOOYOecRK3/UJjV7IO1dyc6BbaRlBkJp 9aPGhHUyfE86G8onwm+KxLHhgeHLUYLQ9ujyRPcS6c9b3yxeDDW0qkpVE2niQwbm yumhINiVB4ZxMTyOTcOs6lhk+MyaQnrjY155rNKGM1ovI6HcSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr/KnwYZwNsmx4KgTLvaqwxmwKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDFiMmM5NDktNTNkNi0z ODFhLThmZTctNjJhODYyYWExNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI+vAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC41KXHbgUawKxhbq9hF5jgJVs9N7ehKnBy4DSwiRgLd1UDkZ+e9ltTs MgB0EtKcOuxk1hQJOJLBTHt6CGT7LJNZYDh96lcBSCwDQ5RdqVojeIAJMDfox4hp Kd326M9JbxGAvNLXUEqx7JCaMpAxR0GlExK4s/shwunK92B0poPzlpndl+bEfs+9 J/bGSKQjylrxN7mgqRHnC+B7YULGLRseizYNHNmrv9gF4h0sJLTDiAVbJ9A1u+pY XEUS3cyDh29Xrc/QOdqo+JHSoaQCt3RFexJPZTtTFvlsn9ttnA2y2jpJhyozXDD0 9qsy/vP+jRM5yh8df5FII0V9v6XmB2M= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:29 2026 by rpki-client