$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa File: dd35f63d-34eb-34a9-9b70-5091213e41cf.roa (raw, json) Hash identifier: OdSBofIOwAwleBcXafiHUN58xrk4OZ3C/9c3nfSPK9M= Subject key identifier: 34:C5:59:0B:61:26:B2:42:64:6A:A4:05:24:8C:28:3B:55:2B:D1:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA82B5FC10D12357160600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.239.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:82:b5:fc:10:d1:23:57:16:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d63f7a21-165f-4370-9e92-7d9bf1c53a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:e2:82:5d:63:f5:9d:1e:5b:8e:c3:0b:b2: 10:32:b2:08:90:95:43:45:25:7d:3d:bc:79:7e:d2: 6e:f6:1f:b2:02:75:23:e9:91:c5:33:99:dd:85:fc: b3:e2:e5:2f:6d:10:c1:00:dd:46:03:a8:ea:db:c6: e1:e5:cc:3a:c0:5b:32:65:1c:cb:bf:3b:6e:87:45: 7a:6d:bb:c3:06:77:9c:85:85:f7:31:43:c8:f9:3b: 8a:89:fe:cb:0a:96:a4:87:86:58:f0:d4:c6:b4:8e: 5a:ce:ce:4c:0e:2e:01:9f:e5:4e:76:0a:b8:c7:de: 37:ce:15:5d:24:e6:28:cd:1a:78:52:d1:80:cd:03: 12:9e:69:25:52:a2:b0:d6:29:96:60:d4:d0:95:03: 3f:32:49:59:64:e5:a6:d3:9f:e4:5a:d6:c3:ef:0a: 79:55:c5:8d:88:73:44:c9:3f:0f:c5:0f:0a:43:ce: de:33:11:bd:ea:04:6f:14:c9:7e:d5:70:2a:f4:be: 9c:a9:de:14:63:1e:b6:08:c1:c5:a6:a8:be:f1:48: 5a:20:2f:7a:df:2f:66:7a:b3:25:c8:82:fa:5c:80: 67:05:78:85:69:ba:f6:d4:50:5b:ec:24:a7:38:e3: 81:42:d8:2c:ce:67:a7:b4:93:b4:e5:84:11:f6:09: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:59:0B:61:26:B2:42:64:6A:A4:05:24:8C:28:3B:55:2B:D1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:74:e3:26:4e:b4:f2:03:71:8a:1a:9a:0d:49:79:88:79:e2: 34:2f:c8:59:9e:08:cb:e3:ec:52:f8:0c:7a:66:06:87:b1:27: 10:72:c9:f7:d3:36:b3:c2:75:a2:14:a0:25:87:79:63:c5:b9: 77:61:82:e3:c4:14:44:1a:26:49:e4:05:b4:fe:8c:84:3b:2c: bc:95:35:ab:96:49:55:c7:ba:1f:5d:ee:6a:f3:6f:88:ef:2d: cf:74:d5:1b:b3:af:59:70:de:36:7d:55:e8:29:fc:87:4e:dc: 18:e6:8b:a2:d9:20:09:32:40:81:10:2b:aa:17:64:1c:27:d5: 6b:ab:12:2f:69:ba:38:a0:4e:c4:6d:2f:69:b0:a6:a0:51:a1: 6c:f6:a3:b7:70:c3:7c:64:88:78:6a:fc:48:3e:a8:f5:c3:63: 76:6f:dc:1c:d6:9b:77:56:42:e8:93:18:77:8e:7e:a2:05:e7: 31:b6:97:e7:b5:81:81:31:54:d3:13:9c:8f:93:74:c1:6a:16: 18:21:20:41:a0:d0:41:c1:25:eb:83:60:a1:b3:2a:bf:08:f4: bd:ac:ce:04:dd:48:16:b2:39:ae:52:11:7c:15:1f:07:f5:22: 8b:b6:4f:d8:70:af:51:63:78:24:ea:09:89:20:62:8b:e1:3f: 9a:c8:6e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoK1/BDRI1cWBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDYzZjdhMjEtMTY1Zi00MzcwLTllOTItN2Q5YmYxYzUzYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGPigl1j9Z0eW47DC7IQMrIIkJVDRSV9Pbx5 ftJu9h+yAnUj6ZHFM5ndhfyz4uUvbRDBAN1GA6jq28bh5cw6wFsyZRzLvztuh0V6 bbvDBnechYX3MUPI+TuKif7LCpakh4ZY8NTGtI5azs5MDi4Bn+VOdgq4x943zhVd JOYozRp4UtGAzQMSnmklUqKw1imWYNTQlQM/MklZZOWm05/kWtbD7wp5VcWNiHNE yT8PxQ8KQ87eMxG96gRvFMl+1XAq9L6cqd4UYx62CMHFpqi+8UhaIC963y9merMl yIL6XIBnBXiFabr21FBb7CSnOOOBQtgszmentJO05YQR9gnpcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTFWQthJrJCZGqkBSSMKDtVK9HXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQzNWY2M2QtMzRlYi0z NGE5LTliNzAtNTA5MTIxM2U0MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI++AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx04yZOtPIDcYoamg1JeYh54jQvyFmeCMvj7FL4DHpmBoexJxByyffT NrPCdaIUoCWHeWPFuXdhguPEFEQaJknkBbT+jIQ7LLyVNauWSVXHuh9d7mrzb4jv Lc901Ruzr1lw3jZ9Vegp/IdO3Bjmi6LZIAkyQIEQK6oXZBwn1WurEi9pujigTsRt L2mwpqBRoWz2o7dww3xkiHhq/Eg+qPXDY3Zv3BzWm3dWQuiTGHeOfqIF5zG2l+e1 gYExVNMTnI+TdMFqFhghIEGg0EHBJeuDYKGzKr8I9L2szgTdSBayOa5SEXwVHwf1 Iou2T9hwr1FjeCTqCYkgYovhP5rIbik= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:26 2026 by rpki-client