$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0428cca3-d944-31e7-b96f-ebc172871493.roa File: 0428cca3-d944-31e7-b96f-ebc172871493.roa (raw, json) Hash identifier: 7XXFi2rz0AG3kWPRkqh//sP0C66spJQssOYKmskxjSg= Subject key identifier: 5F:7A:AE:16:51:82:50:BF:0D:2B:9A:46:64:14:F3:62:DA:5D:F4:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA33C12D9CB39D9F8D6D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0428cca3-d944-31e7-b96f-ebc172871493.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.221.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:33:c1:2d:9c:b3:9d:9f:8d:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4378f3eb-8b0d-41d1-8669-d82b9e4d5d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:64:37:66:4a:5f:fe:de:7b:03:15:e4:db: 3e:c6:cd:cf:55:02:c6:65:b6:d0:c1:68:05:7d:5b: d0:df:1f:fb:d7:af:40:a3:b4:4d:22:e7:bd:f4:c5: e6:1f:61:9d:9a:81:d6:78:93:47:ed:b0:f4:02:d5: c7:a2:b6:9e:fe:e9:a6:c7:3a:1f:ca:29:e8:0a:12: 05:67:2f:15:e0:49:29:7f:e9:b8:91:4b:1e:63:e6: ba:c0:f5:e7:69:f5:d9:d3:3c:e2:11:b9:16:11:d8: 01:50:b1:94:67:e9:7b:0d:e0:3b:1d:ba:04:51:17: a8:c0:b1:21:41:b6:48:46:40:31:16:43:a1:75:d2: c5:99:8b:f6:45:32:cd:20:c8:9f:0c:42:2b:58:5e: 6a:9e:5d:7e:b8:17:6b:44:8a:27:6c:67:8c:08:d9: 9f:18:08:d1:f2:70:94:df:1b:65:ca:0a:16:6b:40: 15:74:d8:16:4b:82:bc:a9:4a:fc:e2:0a:76:a8:ca: 29:f7:1a:8f:ab:f3:a3:33:1d:81:45:b9:5a:55:09: ea:1d:f7:80:80:95:e9:10:b5:a7:f2:22:ca:75:9e: 5e:6d:3a:63:2a:64:b3:ec:e3:46:22:92:74:6c:82: 5e:fb:df:82:d9:11:03:1c:e5:9e:02:c4:a2:6d:66: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7A:AE:16:51:82:50:BF:0D:2B:9A:46:64:14:F3:62:DA:5D:F4:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0428cca3-d944-31e7-b96f-ebc172871493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.221.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f1:30:da:b8:59:37:11:69:6b:66:82:4f:fe:73:50:c7:0b: 3e:4e:a0:b9:0d:e4:0b:82:20:3e:8e:54:34:11:24:15:cd:da: f6:8d:07:3e:6e:56:8d:cc:a8:51:c4:21:da:f2:2d:42:a6:2e: 04:33:c6:e3:b9:bb:9f:ce:c8:26:e9:4b:a5:fe:d6:e5:e4:3e: c1:13:96:82:10:16:0f:6f:a2:82:78:5c:d0:75:02:24:f7:c1: 44:46:48:a2:0c:9e:ec:a5:a3:ca:68:8b:28:52:40:59:d0:6c: d1:cf:20:b9:14:e0:bc:2a:06:41:95:1e:bd:8f:d7:d9:7d:24: c5:18:3f:c1:a1:b3:c6:d7:9d:c9:4f:83:99:7f:6f:46:9d:76: 66:74:92:f4:e6:bc:13:0f:5f:71:14:bb:33:cd:08:3e:d6:62: 08:b9:53:6a:57:c2:60:6c:a8:a3:e0:7f:6b:af:fc:7e:1b:7c: 7e:5b:17:7a:13:04:e8:09:6f:dd:05:b9:40:39:75:66:fa:c5: 86:18:59:60:5d:e5:ed:28:02:27:68:fa:b7:76:a4:2f:b3:e2: 75:31:c4:1e:df:31:ca:dd:54:0d:c2:53:ad:d6:20:5d:ee:fe: 26:ae:36:8d:a2:39:aa:45:44:2c:c1:17:96:84:b2:7b:47:22: 10:a3:9d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjPBLZyznZ+NbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDM3OGYzZWItOGIwZC00MWQxLTg2NjktZDgyYjllNGQ1ZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtetkN2ZKX/7eewMV5Ns+xs3PVQLGZbbQwWgF fVvQ3x/7169Ao7RNIue99MXmH2GdmoHWeJNH7bD0AtXHorae/ummxzofyinoChIF Zy8V4Ekpf+m4kUseY+a6wPXnafXZ0zziEbkWEdgBULGUZ+l7DeA7HboEUReowLEh QbZIRkAxFkOhddLFmYv2RTLNIMifDEIrWF5qnl1+uBdrRIonbGeMCNmfGAjR8nCU 3xtlygoWa0AVdNgWS4K8qUr84gp2qMop9xqPq/OjMx2BRblaVQnqHfeAgJXpELWn 8iLKdZ5ebTpjKmSz7ONGIpJ0bIJe+9+C2REDHOWeAsSibWbWJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF96rhZRglC/DSuaRmQU82LaXfRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQyOGNjYTMtZDk0NC0z MWU3LWI5NmYtZWJjMTcyODcxNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI93wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbxMNq4WTcRaWtmgk/+c1DHCz5OoLkN5AuCID6OVDQRJBXN2vaNBz5u Vo3MqFHEIdryLUKmLgQzxuO5u5/OyCbpS6X+1uXkPsETloIQFg9vooJ4XNB1AiT3 wURGSKIMnuylo8poiyhSQFnQbNHPILkU4LwqBkGVHr2P19l9JMUYP8Ghs8bXnclP g5l/b0addmZ0kvTmvBMPX3EUuzPNCD7WYgi5U2pXwmBsqKPgf2uv/H4bfH5bF3oT BOgJb90FuUA5dWb6xYYYWWBd5e0oAido+rd2pC+z4nUxxB7fMcrdVA3CU63WIF3u /iauNo2iOapFRCzBF5aEsntHIhCjnQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:43 2026 by rpki-client