$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa File: d3601d74-a920-36fe-9fc7-7641e6a380a9.roa (raw, json) Hash identifier: Fmd9C0c2GDF3ARqxf7XzJe8cvSEDkixD6E71vGAmrR4= Subject key identifier: EB:05:1D:17:2A:F0:0F:AD:CD:AF:F9:9F:AD:EF:1B:7B:E7:B4:13:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA8F171283545E6AABDBB0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.239.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:8f:17:12:83:54:5e:6a:ab:db:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=b1b7f618-ebf4-42c6-9142-ac02272c0554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fc:12:13:c0:68:91:23:d9:f7:98:92:3f:94: fd:c6:9b:81:a5:c5:25:d4:f1:34:f0:df:67:3c:9c: 52:18:12:90:05:a3:6d:96:ec:55:d2:0d:38:fb:a4: 40:96:2a:63:69:49:63:ba:a5:00:23:4a:8a:b9:de: 9a:2c:5c:2a:86:88:3f:64:2a:ec:47:45:3a:1c:c6: 71:f3:d3:5f:2e:1b:8a:5b:0e:65:60:06:a0:2a:b2: 13:86:9b:1f:7d:27:a0:fb:5a:96:0b:1c:e0:41:82: 29:7b:4d:7d:36:7e:a4:42:e5:32:c5:d1:48:80:f0: a3:bb:f9:88:30:6a:0f:55:4e:8b:53:dd:a0:d1:50: ab:5f:a1:03:96:4e:d1:79:4d:0c:20:9e:10:23:01: 1b:1c:cd:39:a0:e0:32:bc:fa:e8:f4:a0:9f:24:ee: ca:59:57:78:f7:5e:54:8d:d0:3a:20:3a:e7:81:86: 83:23:7b:92:30:da:e4:51:ba:fb:4f:2d:f8:d5:95: b3:db:a7:3f:a3:66:20:bc:05:a3:2b:6a:86:0c:25: 0c:52:66:f7:85:25:59:d5:7a:36:67:5a:a8:3c:6c: 51:df:9d:be:32:63:0f:92:35:98:d3:a5:eb:65:c4: a2:c9:d7:bc:dd:2a:7c:ca:ab:a8:17:61:59:ab:fc: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:05:1D:17:2A:F0:0F:AD:CD:AF:F9:9F:AD:EF:1B:7B:E7:B4:13:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:36:f1:c1:06:12:6c:b3:a8:7d:ce:5d:7b:8b:cd:25:c6:4d: 6a:59:c1:cb:c2:8c:a1:5c:cd:c0:c1:eb:cc:ea:6b:3c:5b:13: 0f:2b:26:68:c4:7f:0e:bd:af:84:98:91:ba:30:46:ce:b0:73: 75:0b:03:b1:ea:6e:8b:86:9e:58:5a:3e:e8:0d:4e:77:e0:e6: 14:4c:03:73:e7:da:e4:f8:af:5a:77:06:d6:92:7b:42:44:f6: 94:73:cc:12:27:63:39:96:0b:4c:fb:67:c5:7c:d1:a0:c1:f0: e3:d5:08:74:bd:38:ec:50:f7:6c:7f:20:b7:bd:c7:82:18:86: 90:b1:6b:92:f3:2d:55:fa:24:ad:32:ee:00:e6:1f:8c:9f:47: 95:75:46:b5:d2:f4:76:2c:4b:48:84:57:31:8a:e8:11:a6:6a: 07:c0:32:45:6e:d4:49:2b:2e:d6:b4:33:6b:c7:6d:7b:99:73: 3a:c5:f5:0a:f8:49:11:8c:75:2f:f1:9a:6f:ab:d0:48:dc:2b: 97:0e:40:78:6c:26:8d:a7:98:c0:16:04:9f:94:eb:f6:ad:c0: c2:64:bf:c3:f7:08:43:02:16:0c:1b:19:4c:76:23:20:99:e5: b6:e3:37:5e:58:81:ea:4e:b6:82:ca:a2:2a:b7:13:b5:b5:8f: 80:41:28:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqo8XEoNUXmqr27AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YjFiN2Y2MTgtZWJmNC00MmM2LTkxNDItYWMwMjI3MmMwNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPwSE8BokSPZ95iSP5T9xpuBpcUl1PE08N9n PJxSGBKQBaNtluxV0g04+6RAlipjaUljuqUAI0qKud6aLFwqhog/ZCrsR0U6HMZx 89NfLhuKWw5lYAagKrIThpsffSeg+1qWCxzgQYIpe019Nn6kQuUyxdFIgPCju/mI MGoPVU6LU92g0VCrX6EDlk7ReU0MIJ4QIwEbHM05oOAyvPro9KCfJO7KWVd4915U jdA6IDrngYaDI3uSMNrkUbr7Ty341ZWz26c/o2YgvAWjK2qGDCUMUmb3hSVZ1Xo2 Z1qoPGxR352+MmMPkjWY06XrZcSiyde83Sp8yquoF2FZq/z62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsFHRcq8A+tza/5n63vG3vntBO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM2MDFkNzQtYTkyMC0z NmZlLTlmYzctNzY0MWU2YTM4MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ28cEGEmyzqH3OXXuLzSXGTWpZwcvCjKFczcDB68zqazxbEw8rJmjE fw69r4SYkbowRs6wc3ULA7HqbouGnlhaPugNTnfg5hRMA3Pn2uT4r1p3BtaSe0JE 9pRzzBInYzmWC0z7Z8V80aDB8OPVCHS9OOxQ92x/ILe9x4IYhpCxa5LzLVX6JK0y 7gDmH4yfR5V1RrXS9HYsS0iEVzGK6BGmagfAMkVu1EkrLta0M2vHbXuZczrF9Qr4 SRGMdS/xmm+r0EjcK5cOQHhsJo2nmMAWBJ+U6/atwMJkv8P3CEMCFgwbGUx2IyCZ 5bbjN15YgepOtoLKoiq3E7W1j4BBKOg= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:30 2026 by rpki-client