$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa File: db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa (raw, json) Hash identifier: W0vdyLEBxpA2AnJfQ7bgoFBa7N1iDa1W5Zfxgg7p0hc= Subject key identifier: 34:38:66:37:DC:D2:B9:6D:22:C1:CE:D2:51:3F:7F:EA:41:62:FA:C7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4DE683C96F4D0293E080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.187.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4d:e6:83:c9:6f:4d:02:93:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=5867a762-cb8d-42e5-a7c0-7051f08aac51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:c9:c6:35:b3:0f:53:84:36:d3:16:81:7b: 9d:1a:c4:4d:8a:66:04:5a:42:c2:33:a2:e9:f7:04: 3b:95:f2:17:ba:02:a4:ab:1f:c9:30:a9:70:66:d4: e1:a1:48:69:09:b1:d8:c8:b4:1e:45:37:f6:80:7d: a1:fd:7b:fa:dc:c5:b1:1e:31:62:d9:38:96:3e:b9: 7b:9e:e7:bd:42:e6:c3:01:5c:e4:f5:01:f7:b6:8d: 97:ae:46:4d:35:c2:9e:f3:a2:fe:c9:39:32:f8:c9: ae:17:fd:8c:76:6e:d4:3a:b2:c4:16:22:ce:b3:a5: 8c:72:01:17:3c:58:bd:f5:1f:c9:37:0c:cb:13:25: 27:df:26:b6:16:01:37:85:13:b3:e9:8b:4f:da:97: 72:42:a2:d3:ec:a7:43:ae:64:0d:04:d6:ef:03:63: eb:07:9f:2a:8e:54:53:c2:68:c7:e6:da:35:cc:d4: f0:50:63:88:70:96:0b:01:13:f3:65:34:25:d2:e4: 4a:d2:ca:dd:f5:7f:8d:55:35:7d:ac:b4:d1:3b:12: fe:a5:90:86:b1:4b:f1:27:5e:ba:36:85:1c:d6:95: 61:c8:21:a3:09:00:c8:a1:71:9c:56:7c:4d:fc:97: a2:a1:c6:5b:0e:38:c8:f1:e2:f5:59:8c:f0:28:86: a4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:38:66:37:DC:D2:B9:6D:22:C1:CE:D2:51:3F:7F:EA:41:62:FA:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d1:d6:b9:40:0b:aa:54:4f:46:8e:ce:de:37:8e:2d:8d:fa: b0:41:00:f6:bb:5d:8f:a1:4e:c3:a7:59:d2:35:bb:5d:b4:3c: 5a:b2:ee:58:ca:aa:fb:39:b5:4e:69:e0:fb:98:a1:b0:dd:11: 5d:49:f7:f3:23:4b:a5:3e:bb:ff:63:98:7b:8a:c3:c6:0f:e7: be:8d:0d:d2:d4:cc:05:03:16:42:9a:7b:a7:3c:1b:90:d8:2d: 98:60:5f:cc:1c:32:3c:75:2b:9b:8d:81:cd:e7:08:88:3b:e1: ba:35:0b:5d:b0:e3:4f:f5:12:78:1a:42:a2:01:f5:9d:a1:1b: a5:d0:45:00:5d:07:07:b4:92:1d:4f:7f:57:31:56:fa:b3:15: 54:0b:68:48:e4:98:59:34:91:14:c3:98:d2:9c:4f:d1:7a:93: 8c:46:57:e0:da:38:15:d9:42:47:30:d7:62:41:36:55:b4:4e: 4e:21:ba:d1:22:a5:de:c3:ca:78:1d:4f:79:e3:39:19:1d:29: 79:13:14:14:d8:0a:01:4d:10:d7:d8:9d:8c:0c:3f:9c:5a:51: 7e:fc:68:96:ae:b1:77:31:21:7d:b5:b6:d0:57:28:e0:b3:a1: 70:a8:0b:48:c8:ab:18:6c:58:51:c7:63:c4:f2:f6:05:e3:e0: a1:5a:f3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqk3mg8lvTQKT4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NTg2N2E3NjItY2I4ZC00MmU1LWE3YzAtNzA1MWYwOGFhYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3LJxjWzD1OENtMWgXudGsRNimYEWkLCM6Lp 9wQ7lfIXugKkqx/JMKlwZtThoUhpCbHYyLQeRTf2gH2h/Xv63MWxHjFi2TiWPrl7 nue9QubDAVzk9QH3to2XrkZNNcKe86L+yTky+MmuF/2Mdm7UOrLEFiLOs6WMcgEX PFi99R/JNwzLEyUn3ya2FgE3hROz6YtP2pdyQqLT7KdDrmQNBNbvA2PrB58qjlRT wmjH5to1zNTwUGOIcJYLARPzZTQl0uRK0srd9X+NVTV9rLTROxL+pZCGsUvxJ166 NoUc1pVhyCGjCQDIoXGcVnxN/JeiocZbDjjI8eL1WYzwKIakDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ4Zjfc0rltIsHO0lE/f+pBYvrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIzN2E5OWItYTFhMS0z ZjY2LTk4ZTYtZDZjMWQ5NmVjZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzR1rlAC6pUT0aOzt43ji2N+rBBAPa7XY+hTsOnWdI1u120PFqy7ljK qvs5tU5p4PuYobDdEV1J9/MjS6U+u/9jmHuKw8YP576NDdLUzAUDFkKae6c8G5DY LZhgX8wcMjx1K5uNgc3nCIg74bo1C12w40/1EngaQqIB9Z2hG6XQRQBdBwe0kh1P f1cxVvqzFVQLaEjkmFk0kRTDmNKcT9F6k4xGV+DaOBXZQkcw12JBNlW0Tk4hutEi pd7DyngdT3njORkdKXkTFBTYCgFNENfYnYwMP5xaUX78aJausXcxIX21ttBXKOCz oXCoC0jIqxhsWFHHY8Ty9gXj4KFa8+4= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:18 2026 by rpki-client