$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d86529dc-f062-3766-98b6-ebc6232a14e3.roa File: d86529dc-f062-3766-98b6-ebc6232a14e3.roa (raw, json) Hash identifier: Yvb8CpKMLqUEfzwYuxBjo/jHUJ+P73AU6B+qUaun5TU= Subject key identifier: D0:14:E1:A2:AD:70:D8:5A:BA:82:C3:89:B9:5A:88:11:1D:D6:1D:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA99E7936C71BC0C5E5C21 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d86529dc-f062-3766-98b6-ebc6232a14e3.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.224.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:99:e7:93:6c:71:bc:0c:5e:5c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=2237c768-92e1-4a94-89e9-8a8f478820cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:68:8b:a3:18:77:a4:fc:ca:e5:ba:17:a6: 3b:52:71:1a:ed:d8:92:2d:69:0b:51:78:c2:09:2b: aa:0d:d5:ad:6c:ab:7e:26:e2:5e:00:47:a2:6e:00: 09:e4:ae:1a:1c:2d:c2:ce:57:4e:41:22:a3:d5:58: a8:05:09:b5:f1:37:13:47:58:33:ee:3e:0c:2d:57: ef:84:5a:b1:55:d7:ce:9a:8e:07:8a:ff:a2:cf:22: b7:ad:bc:7f:61:03:b1:fb:85:72:4b:2c:a1:61:85: 7b:6d:a1:8b:be:3c:09:7f:01:5e:c9:2c:70:ab:21: 5a:f4:4c:25:96:a3:46:93:4e:94:43:7d:a2:69:eb: 1a:61:7f:22:6d:5c:ef:98:4a:65:d8:5c:c6:99:9c: 90:7d:01:67:e0:ae:d2:17:19:21:ca:a5:f9:af:1b: 7d:7f:0b:8b:5a:66:4b:81:31:90:88:65:a4:19:6e: de:63:aa:b0:8e:67:b9:48:37:c8:49:01:ae:c8:f0: ff:9a:25:64:93:53:d9:11:eb:4f:22:b8:92:59:a0: 4b:ba:a5:82:01:e9:a6:29:54:9b:84:79:38:c0:9c: 2e:25:77:8b:5a:b8:75:5a:7d:eb:c8:49:02:69:88: e1:ec:9e:b6:41:4c:34:9a:95:5e:be:bf:eb:68:6a: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:14:E1:A2:AD:70:D8:5A:BA:82:C3:89:B9:5A:88:11:1D:D6:1D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d86529dc-f062-3766-98b6-ebc6232a14e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.224.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e5:fb:34:e7:9b:ff:72:84:96:20:8c:6a:6b:13:7f:62:d0: 35:7b:ed:78:71:b6:da:75:93:9c:29:f8:76:8a:91:4c:a5:da: 40:13:b7:fe:2d:2d:d1:85:9d:6d:44:7f:94:62:1c:8e:69:0f: 58:91:aa:17:e9:fa:9c:c7:ec:c1:74:89:6c:e0:d9:27:2d:4f: fa:e9:d7:dd:41:86:65:8f:dd:dd:91:fd:b0:85:6a:dd:52:6c: 6d:2f:40:a3:96:19:d1:0a:76:f8:18:bd:63:77:0c:dc:3f:a3: 81:af:07:24:90:e2:45:29:55:9d:40:5c:ec:36:75:d4:ee:2e: 9e:bf:ce:30:a0:57:fb:78:e1:03:6b:b2:8b:09:07:53:5a:f7: 63:9d:2f:fb:d6:dd:d5:c6:3f:e9:5a:06:1d:5b:18:4c:c0:05: c4:d2:a5:8b:86:c9:ed:ba:d2:46:7e:ae:0f:e6:73:5f:f6:09: bd:a0:24:db:77:85:ac:e3:06:f1:d1:1e:ba:65:f2:72:1d:50: 5f:e0:eb:61:25:99:4f:0d:ef:d0:9b:fc:27:3d:83:ca:13:11: a6:f3:c1:78:ff:f2:b2:6d:4d:c0:81:b5:98:a3:e6:32:33:77: 61:97:ae:56:68:38:83:f7:24:2e:27:c3:2c:6c:ab:08:2c:04: ef:9a:66:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpnnk2xxvAxeXCEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjIzN2M3NjgtOTJlMS00YTk0LTg5ZTktOGE4ZjQ3ODgyMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznFoi6MYd6T8yuW6F6Y7UnEa7diSLWkLUXjC CSuqDdWtbKt+JuJeAEeibgAJ5K4aHC3CzldOQSKj1VioBQm18TcTR1gz7j4MLVfv hFqxVdfOmo4Hiv+izyK3rbx/YQOx+4VySyyhYYV7baGLvjwJfwFeySxwqyFa9Ewl lqNGk06UQ32iaesaYX8ibVzvmEpl2FzGmZyQfQFn4K7SFxkhyqX5rxt9fwuLWmZL gTGQiGWkGW7eY6qwjme5SDfISQGuyPD/miVkk1PZEetPIriSWaBLuqWCAemmKVSb hHk4wJwuJXeLWrh1Wn3ryEkCaYjh7J62QUw0mpVevr/raGqLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAU4aKtcNhauoLDiblaiBEd1h2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDg2NTI5ZGMtZjA2Mi0z NzY2LTk4YjYtZWJjNjIzMmExNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvl+zTnm/9yhJYgjGprE39i0DV77Xhxttp1k5wp+HaKkUyl2kATt/4t LdGFnW1Ef5RiHI5pD1iRqhfp+pzH7MF0iWzg2SctT/rp191BhmWP3d2R/bCFat1S bG0vQKOWGdEKdvgYvWN3DNw/o4GvBySQ4kUpVZ1AXOw2ddTuLp6/zjCgV/t44QNr sosJB1Na92OdL/vW3dXGP+laBh1bGEzABcTSpYuGye260kZ+rg/mc1/2Cb2gJNt3 hazjBvHRHrpl8nIdUF/g62ElmU8N79Cb/Cc9g8oTEabzwXj/8rJtTcCBtZij5jIz d2GXrlZoOIP3JC4nwyxsqwgsBO+aZmE= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:18 2026 by rpki-client