$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa File: e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa (raw, json) Hash identifier: gjIoqgCPJEjf67RNMC7CIrbu42w2ufNy3tfRAhMsEKU= Subject key identifier: 8A:D6:BF:91:B1:66:19:69:17:8B:C5:FB:5C:ED:C1:AD:C4:C6:DA:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA87063B1E68D70A917280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.201.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:87:06:3b:1e:68:d7:0a:91:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3748a536-eb9d-49d3-87e4-df67c9192802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:7f:86:c0:fb:2c:1c:cc:f4:07:99:04:7c: 55:54:ef:2c:57:ea:7d:0e:71:a9:fd:79:eb:db:f8: 29:4d:cc:b7:61:53:ea:dd:b2:87:11:f8:ea:ab:cb: 21:90:d9:ea:ac:75:5c:d7:f0:ac:e2:68:90:63:85: cf:6c:d5:44:19:77:55:5d:93:0c:2a:cd:3e:21:54: 85:91:bf:60:23:24:bf:9d:54:66:bc:e8:36:df:0b: cd:e8:d7:4d:79:98:a1:7f:0b:af:23:9b:77:5f:70: 9a:2b:09:e9:1a:d6:e5:fa:17:00:85:f5:c2:fd:7b: fb:d5:2b:08:d4:ba:66:e3:a4:53:26:bf:5f:ec:ec: 32:6f:1c:67:cf:80:6c:9a:3d:2f:4a:60:c6:d6:d5: 7f:2b:09:92:47:b4:0e:c7:0f:10:09:44:1e:3a:3a: 80:d9:e7:2f:a6:a9:4c:fc:e9:d8:4d:f8:69:07:a7: 6e:b0:d0:09:32:f8:52:7c:0c:fe:b1:1c:31:f9:97: 55:67:36:af:7d:92:9b:20:f6:1c:93:24:6c:13:bf: a5:b7:49:bd:ac:14:82:13:c0:eb:06:98:5a:e5:ba: 4c:0c:06:f0:63:78:a5:ba:71:24:ee:20:69:f1:a7: dd:b3:93:75:a6:af:4f:a3:a3:b7:e1:7d:58:6c:2b: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D6:BF:91:B1:66:19:69:17:8B:C5:FB:5C:ED:C1:AD:C4:C6:DA:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:4a:9b:33:2b:bc:1d:d2:f2:de:e2:2d:79:dd:c2:b6:f8:0b: 0c:43:e1:28:19:5f:ab:ab:06:ef:7f:9d:d4:d9:01:a0:b1:73: 33:f5:b1:10:26:d2:3d:34:9d:38:5c:4d:35:fd:b6:9e:dd:4c: 45:83:e4:e1:1a:2d:e5:cd:bd:7b:ca:1c:cb:e0:80:b1:22:c2: 9e:6c:e3:a4:4f:e6:1c:d8:23:05:67:fe:38:ed:24:25:0b:70: 0b:69:9c:a6:8f:90:33:59:53:56:b8:30:4b:22:07:08:82:cf: c1:2f:41:b3:dc:bb:87:be:35:da:ac:24:dd:2c:c4:86:8e:2b: 3f:e9:1e:a7:9e:d1:c2:34:d6:5f:6a:5e:7a:88:a0:70:eb:60: ad:0f:78:92:00:52:e4:ec:4a:c9:79:ff:20:f4:05:4c:8f:19: d6:57:c0:ba:a7:c7:dd:1b:af:04:c1:a3:66:65:90:51:39:e7: 74:6d:45:87:96:cd:99:31:12:f7:1a:d2:af:5d:33:0e:04:1e: 1e:e3:6c:e0:08:18:1e:af:f7:f2:01:b7:d7:a7:b8:99:9c:5e: 6d:95:0a:87:e1:3d:3b:0f:4b:c1:82:65:12:f5:e1:d4:fe:61: f2:5d:b3:8a:8e:68:41:57:ad:37:95:cf:83:24:ef:d2:10:47: 7e:37:36:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqocGOx5o1wqRcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Mzc0OGE1MzYtZWI5ZC00OWQzLTg3ZTQtZGY2N2M5MTkyODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOF/hsD7LBzM9AeZBHxVVO8sV+p9DnGp/Xnr 2/gpTcy3YVPq3bKHEfjqq8shkNnqrHVc1/Cs4miQY4XPbNVEGXdVXZMMKs0+IVSF kb9gIyS/nVRmvOg23wvN6NdNeZihfwuvI5t3X3CaKwnpGtbl+hcAhfXC/Xv71SsI 1Lpm46RTJr9f7Owybxxnz4Bsmj0vSmDG1tV/KwmSR7QOxw8QCUQeOjqA2ecvpqlM /OnYTfhpB6dusNAJMvhSfAz+sRwx+ZdVZzavfZKbIPYckyRsE7+lt0m9rBSCE8Dr Bpha5bpMDAbwY3ilunEk7iBp8afds5N1pq9Po6O34X1YbCuiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrWv5GxZhlpF4vF+1ztwa3ExtoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTNmM2FhYjAtMzUyNi0z YjdlLWFhZjgtZWQyNTA0ZDdmMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8khMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpKmzMrvB3S8t7iLXndwrb4CwxD4SgZX6urBu9/ndTZAaCxczP1sRAm 0j00nThcTTX9tp7dTEWD5OEaLeXNvXvKHMvggLEiwp5s46RP5hzYIwVn/jjtJCUL cAtpnKaPkDNZU1a4MEsiBwiCz8EvQbPcu4e+NdqsJN0sxIaOKz/pHqee0cI01l9q XnqIoHDrYK0PeJIAUuTsSsl5/yD0BUyPGdZXwLqnx90brwTBo2ZlkFE553RtRYeW zZkxEvca0q9dMw4EHh7jbOAIGB6v9/IBt9enuJmcXm2VCofhPTsPS8GCZRL14dT+ YfJds4qOaEFXrTeVz4Mk79IQR343Nnc= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:20 2026 by rpki-client