$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efddc706-5467-32a6-82ac-617a3c89c69e.roa File: efddc706-5467-32a6-82ac-617a3c89c69e.roa (raw, json) Hash identifier: p6PmJWeD2yVBawe/mvU/YRlIUB8C0WENT/jbgUwH9g0= Subject key identifier: D1:0B:19:42:C1:6D:D1:3E:E8:D3:70:8A:13:3A:61:C7:1F:2B:50:66 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6D58BB51388DED921900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efddc706-5467-32a6-82ac-617a3c89c69e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 139070 IP address blocks: 35.216.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6d:58:bb:51:38:8d:ed:92:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1cec5401-7b93-4094-b998-c1298faf8ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:5b:be:10:c3:29:68:83:05:5c:a0:18:8a: 45:98:4c:98:25:21:2a:7a:7c:00:e1:87:c3:31:7b: f7:53:71:b2:d1:b8:5c:05:fe:87:a9:8d:9d:5c:b9: 21:f2:6b:1d:ff:69:38:8d:c9:51:aa:b2:8d:da:2d: 25:5a:b4:dd:27:bb:e7:ce:0e:8c:e4:44:16:d8:f6: 4a:cd:00:8a:8a:84:0e:fd:1b:6c:d9:a3:b9:56:f1: 22:2a:e0:54:95:ef:69:81:d9:b7:51:70:08:ff:61: 70:19:17:28:5b:40:cd:2f:68:4d:c2:30:06:5e:c8: bc:a5:c4:7a:fc:ef:ca:2b:18:60:f5:86:9c:be:ee: e4:63:62:f9:1a:a2:a4:42:44:ef:3e:fe:4a:f1:d8: 12:1f:33:66:18:e0:c2:ee:af:5f:1b:00:7e:27:3e: 7d:76:1a:18:d3:af:da:0b:ce:08:03:68:58:77:f6: 45:f4:fe:27:13:c6:a9:ff:a9:23:89:8f:eb:d2:e9: 0a:88:80:93:57:d2:25:98:a2:d7:f9:77:45:90:d3: ab:e3:cb:07:bf:84:de:d0:7b:73:97:ff:d8:0e:76: 0a:88:83:b0:08:7a:29:12:6d:cd:7a:74:db:0c:41: 27:8c:68:e0:f0:70:d8:a5:87:69:26:8f:d6:20:f6: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:19:42:C1:6D:D1:3E:E8:D3:70:8A:13:3A:61:C7:1F:2B:50:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efddc706-5467-32a6-82ac-617a3c89c69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fc:1d:d4:18:f6:ae:fe:2b:7d:ab:22:fb:b8:b7:db:86:3b: dd:44:41:35:fc:08:50:f3:95:6b:37:d7:8f:3a:3b:36:14:12: 16:21:e0:02:a7:33:ff:a6:d6:e8:b6:0b:a8:77:12:c7:15:f8: af:f8:f9:1c:46:d5:ad:1f:56:7c:e6:49:4d:61:fe:7a:8c:23: 54:82:07:d2:46:d5:3a:9c:3a:0e:30:11:95:7c:82:5d:cd:11: bc:72:c0:be:d5:bc:04:36:85:bd:c5:54:6c:e8:54:6c:37:f3: 75:39:b1:58:32:f4:1b:a2:e6:1a:47:0d:c1:bb:fb:ff:a2:28: 72:aa:4a:87:21:05:c9:51:f8:33:1e:7f:9d:e2:1a:f9:49:34: 9d:df:cd:eb:78:fe:f9:c0:e9:80:79:c1:71:fd:e4:72:12:da: 13:cd:73:44:7c:bc:7b:96:c0:ea:75:43:c2:25:44:53:4a:87: da:cd:d5:89:aa:e8:15:2e:15:1e:88:4e:1f:2d:e0:de:c8:45: 66:8c:e3:04:30:f6:20:c9:fe:87:6b:fa:e2:68:1c:a4:b5:47: 1b:13:3d:40:f9:9f:6a:b3:7b:34:fd:a0:7f:27:f0:ef:df:d1: 54:08:24:9a:bb:18:29:14:2b:38:de:db:ad:62:b9:ff:67:e6: 7e:ae:5e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqm1Yu1E4je2SGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWNlYzU0MDEtN2I5My00MDk0LWI5OTgtYzEyOThmYWY4YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUBbvhDDKWiDBVygGIpFmEyYJSEqenwA4YfD MXv3U3Gy0bhcBf6HqY2dXLkh8msd/2k4jclRqrKN2i0lWrTdJ7vnzg6M5EQW2PZK zQCKioQO/Rts2aO5VvEiKuBUle9pgdm3UXAI/2FwGRcoW0DNL2hNwjAGXsi8pcR6 /O/KKxhg9Yacvu7kY2L5GqKkQkTvPv5K8dgSHzNmGODC7q9fGwB+Jz59dhoY06/a C84IA2hYd/ZF9P4nE8ap/6kjiY/r0ukKiICTV9IlmKLX+XdFkNOr48sHv4Te0Htz l//YDnYKiIOwCHopEm3NenTbDEEnjGjg8HDYpYdpJo/WIPZEAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNELGULBbdE+6NNwihM6YccfK1BmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWZkZGM3MDYtNTQ2Ny0z MmE2LTgyYWMtNjE3YTNjODljNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn8HdQY9q7+K32rIvu4t9uGO91EQTX8CFDzlWs31486OzYUEhYh4AKn M/+m1ui2C6h3EscV+K/4+RxG1a0fVnzmSU1h/nqMI1SCB9JG1TqcOg4wEZV8gl3N EbxywL7VvAQ2hb3FVGzoVGw383U5sVgy9Bui5hpHDcG7+/+iKHKqSochBclR+DMe f53iGvlJNJ3fzet4/vnA6YB5wXH95HIS2hPNc0R8vHuWwOp1Q8IlRFNKh9rN1Ymq 6BUuFR6ITh8t4N7IRWaM4wQw9iDJ/odr+uJoHKS1RxsTPUD5n2qzezT9oH8n8O/f 0VQIJJq7GCkUKzje261iuf9n5n6uXl4= -----END CERTIFICATE-----Generated at Thu Mar 19 01:51:13 2026 by rpki-client