$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1cd5758-bf41-30da-817a-870e66d4e99e.roa File: f1cd5758-bf41-30da-817a-870e66d4e99e.roa (raw, json) Hash identifier: 3DYtQcFp7qHpDBHAWwXE890UP8FaB+kLS/sJJGAxXA8= Subject key identifier: 87:F5:98:49:9D:9F:60:AF:C1:53:4B:7C:B4:AF:45:9C:7A:81:43:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3036CA85792BF1552040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1cd5758-bf41-30da-817a-870e66d4e99e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 19527 IP address blocks: 35.206.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:30:36:ca:85:79:2b:f1:55:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d0f6d9f0-322a-4a4b-851c-e15a3c13c2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:bb:74:11:67:5c:ee:33:b9:bd:4f:cc:a9: 19:d7:23:11:41:4a:88:17:7d:a8:8c:a5:dd:d5:70: be:72:67:9d:05:0a:da:f4:02:7b:2d:fd:a7:aa:cf: 1e:cd:7f:1c:2c:ed:c3:fa:90:ef:83:cb:cc:9a:87: 43:5d:52:d0:f3:fc:a6:3c:27:e7:a4:73:f0:dc:4a: a1:5a:9a:bd:66:e7:d9:00:af:3d:81:4b:12:e6:50: dd:31:29:c5:69:5c:43:3b:15:4d:a5:fd:d1:ca:56: 78:b5:13:0d:92:e1:dc:5d:8d:d3:8a:60:2a:e5:ba: 0a:1e:ff:de:32:36:04:e4:aa:ee:9c:c4:f5:dc:5b: db:15:f4:b1:1d:68:7c:25:df:57:36:c4:71:6e:ef: bc:e3:42:ad:58:28:3c:2b:8e:8c:26:43:72:07:cd: bb:ca:82:95:04:21:65:a2:a6:57:a5:fd:75:11:b7: 56:ab:76:58:5d:63:72:b7:9d:e2:a6:24:10:40:ab: 95:d6:4d:e0:3e:ca:77:38:99:43:0b:28:a7:0c:94: a2:ce:14:7d:50:b4:41:66:27:4e:f0:5e:b7:9f:75: 61:d0:ca:ed:98:10:44:db:93:57:6b:1d:42:cb:59: 10:66:9b:94:f9:ea:83:be:14:a0:e0:b9:17:79:2e: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F5:98:49:9D:9F:60:AF:C1:53:4B:7C:B4:AF:45:9C:7A:81:43:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1cd5758-bf41-30da-817a-870e66d4e99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3d:92:ec:42:54:df:05:f5:bf:85:52:4e:2d:21:c8:be:07: 3a:1c:14:6d:dd:77:94:a9:5f:31:b8:14:1e:f2:54:35:d1:9a: be:6e:c2:9d:11:ba:75:4f:91:e9:28:7f:94:af:ac:06:62:e3: f8:f3:be:e9:02:3b:b8:b0:b9:af:5e:34:6c:78:00:03:13:a4: 81:d6:e8:ee:5b:3f:3d:d7:36:c0:d3:0d:57:ea:53:de:29:e6: 82:ac:93:28:64:bf:d4:73:ad:0c:32:36:d7:ad:76:b6:de:6b: 07:4e:6b:b5:43:13:6e:ee:09:2f:ab:e4:4b:6c:dd:1d:a9:d0: fb:1b:2a:6b:c8:07:f6:eb:4c:c6:4d:cc:3e:34:83:67:77:4b: 9a:34:6c:f9:cd:59:14:58:48:54:d4:b7:89:95:5a:5f:a6:4c: 16:d4:4f:71:1c:0d:ae:25:61:cb:fc:4c:ef:70:be:d0:bc:8e: ea:15:39:fd:4f:e6:c7:e5:e8:55:0a:e9:91:e1:f2:09:c2:8b: 25:50:ca:62:55:fa:1d:2b:f5:8a:ec:01:c0:32:3d:53:9b:d4: e4:f4:4a:c3:45:a1:35:64:eb:a5:9b:a0:ed:9b:60:7a:30:0d: 77:20:5e:f8:16:1e:f3:95:ec:03:2a:d0:d1:45:48:00:8f:a6: ee:6a:c3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjA2yoV5K/FVIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDBmNmQ5ZjAtMzIyYS00YTRiLTg1MWMtZTE1YTNjMTNjMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+m7dBFnXO4zub1PzKkZ1yMRQUqIF32ojKXd 1XC+cmedBQra9AJ7Lf2nqs8ezX8cLO3D+pDvg8vMmodDXVLQ8/ymPCfnpHPw3Eqh Wpq9ZufZAK89gUsS5lDdMSnFaVxDOxVNpf3RylZ4tRMNkuHcXY3TimAq5boKHv/e MjYE5KrunMT13FvbFfSxHWh8Jd9XNsRxbu+840KtWCg8K46MJkNyB827yoKVBCFl oqZXpf11EbdWq3ZYXWNyt53ipiQQQKuV1k3gPsp3OJlDCyinDJSizhR9ULRBZidO 8F63n3Vh0MrtmBBE25NXax1Cy1kQZpuU+eqDvhSg4LkXeS6p6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf1mEmdn2CvwVNLfLSvRZx6gUOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjFjZDU3NTgtYmY0MS0z MGRhLTgxN2EtODcwZTY2ZDRlOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB89kuxCVN8F9b+FUk4tIci+BzocFG3dd5SpXzG4FB7yVDXRmr5uwp0R unVPkekof5SvrAZi4/jzvukCO7iwua9eNGx4AAMTpIHW6O5bPz3XNsDTDVfqU94p 5oKskyhkv9RzrQwyNtetdrbeawdOa7VDE27uCS+r5Ets3R2p0PsbKmvIB/brTMZN zD40g2d3S5o0bPnNWRRYSFTUt4mVWl+mTBbUT3EcDa4lYcv8TO9wvtC8juoVOf1P 5sfl6FUK6ZHh8gnCiyVQymJV+h0r9YrsAcAyPVOb1OT0SsNFoTVk66WboO2bYHow DXcgXvgWHvOV7AMq0NFFSACPpu5qw24= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:44 2026 by rpki-client