$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa File: 2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa (raw, json) Hash identifier: BAGh/h9zqME79e0/jFBhkgB3Eo3c0lYBVp18mAj3cGs= Subject key identifier: 08:0D:98:CC:E9:70:C3:69:38:90:DE:4E:F6:80:3B:60:86:6A:C2:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4CB6644C9739289B54C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.197.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4c:b6:64:4c:97:39:28:9b:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=8ecd3cf0-8b13-4b6f-b45d-787a9052067c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:f2:26:d6:a3:94:1a:bd:66:3e:f8:a6:34: b8:74:ca:2d:d7:a4:9d:15:a9:fe:09:e7:65:ee:75: 7c:c7:79:36:bc:b0:e5:e2:72:f1:c2:cb:be:c5:4c: 61:f6:97:e7:04:1e:0c:7a:d3:c4:0e:ee:5d:09:79: 7f:e1:99:cb:d8:58:ca:82:71:e8:1a:80:c1:c4:e1: e8:79:9d:34:5d:36:51:e1:a7:be:fe:70:40:d0:6c: 35:45:f3:d1:b2:63:45:50:d9:6d:a0:02:75:1c:01: 4b:19:bc:eb:05:d1:d9:6e:20:56:c2:b5:ad:75:50: 6d:b9:41:37:f5:f9:5c:32:70:6f:d7:8a:ed:35:00: 72:de:f1:22:4c:e8:eb:8e:e7:2c:6f:98:cf:c6:2d: 6e:9d:c9:2f:a0:62:d6:b6:74:a3:a0:c6:61:7f:dc: 4e:d1:41:a7:74:4b:1c:72:6e:52:bb:85:30:b1:aa: 16:63:b2:a9:01:a5:0f:f3:6e:56:77:ec:d9:b0:f5: 86:1e:4e:b7:aa:7f:37:7b:99:a5:d9:ca:b7:48:6e: a4:01:67:b3:d6:a7:11:53:83:8c:16:a8:ef:e1:74: 03:0f:53:27:af:e5:94:0f:70:9d:e8:3c:bf:7c:0c: 83:d9:35:15:d4:71:54:6f:79:74:a2:e0:54:d9:cc: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0D:98:CC:E9:70:C3:69:38:90:DE:4E:F6:80:3B:60:86:6A:C2:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.197.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:21:06:11:41:31:e7:f9:4d:cd:fb:71:39:5c:c2:bb:00:11: 97:36:cb:e3:8a:0c:e9:63:2b:23:83:5c:c7:87:b4:f1:ed:e2: e3:15:b5:0c:49:e5:9d:aa:07:3e:f9:bb:25:fd:8b:8c:51:11: 9e:a2:4f:cc:64:83:80:e7:f2:03:89:16:2c:e1:57:a5:60:48: fe:bb:87:88:d3:76:0f:93:54:f1:71:c8:0d:52:3f:35:2b:a4: 77:3e:37:ab:6c:a6:55:ae:04:42:e9:6f:8a:79:07:49:99:d5: 92:5a:3f:38:a0:ec:a9:31:28:28:eb:1d:1c:85:52:90:ef:c3: 79:4a:d4:92:10:a5:34:28:64:52:61:6c:2f:36:fc:44:d1:9d: 0b:5d:b9:b6:09:ee:c8:65:f0:d8:44:51:72:69:22:1e:e7:9f: 0a:80:47:01:6a:7a:63:39:40:8f:05:ee:12:3c:19:bb:77:2a: e5:87:64:0f:8f:29:c7:4f:a2:38:ed:d4:b1:de:f1:13:55:a0: 20:21:53:db:69:80:9c:09:6f:e5:51:a8:d9:6b:4f:ae:b5:c5: 9e:cc:61:15:34:54:b8:35:6e:90:9a:b9:11:4f:e7:8a:bc:56: 7c:9a:15:53:e4:db:82:a9:80:b7:8a:f2:c2:f7:7b:b2:55:74: fe:7c:3e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqky2ZEyXOSibVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OGVjZDNjZjAtOGIxMy00YjZmLWI0NWQtNzg3YTkwNTIwNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuvyJtajlBq9Zj74pjS4dMot16SdFan+Cedl 7nV8x3k2vLDl4nLxwsu+xUxh9pfnBB4MetPEDu5dCXl/4ZnL2FjKgnHoGoDBxOHo eZ00XTZR4ae+/nBA0Gw1RfPRsmNFUNltoAJ1HAFLGbzrBdHZbiBWwrWtdVBtuUE3 9flcMnBv14rtNQBy3vEiTOjrjucsb5jPxi1unckvoGLWtnSjoMZhf9xO0UGndEsc cm5Su4UwsaoWY7KpAaUP825Wd+zZsPWGHk63qn83e5ml2cq3SG6kAWez1qcRU4OM Fqjv4XQDD1Mnr+WUD3Cd6Dy/fAyD2TUV1HFUb3l0ouBU2cx+dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgNmMzpcMNpOJDeTvaAO2CGasKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNmNTljODItMWUzOS0z NDUzLWFhOWQtNjZmNWRkYTFiNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFshBhFBMef5Tc37cTlcwrsAEZc2y+OKDOljKyODXMeHtPHt4uMVtQxJ 5Z2qBz75uyX9i4xREZ6iT8xkg4Dn8gOJFizhV6VgSP67h4jTdg+TVPFxyA1SPzUr pHc+N6tsplWuBELpb4p5B0mZ1ZJaPzig7KkxKCjrHRyFUpDvw3lK1JIQpTQoZFJh bC82/ETRnQtdubYJ7shl8NhEUXJpIh7nnwqARwFqemM5QI8F7hI8Gbt3KuWHZA+P KcdPojjt1LHe8RNVoCAhU9tpgJwJb+VRqNlrT661xZ7MYRU0VLg1bpCauRFP54q8 VnyaFVPk24KpgLeK8sL3e7JVdP58Pg8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:43 2026 by rpki-client