$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa File: 33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa (raw, json) Hash identifier: BlAMN3NLABZ6XcLpWAdebWCFfECcxSiAdlJ/XZqvQn0= Subject key identifier: F9:2F:27:77:89:BD:F5:66:FA:5A:76:FE:2F:79:5B:C0:47:CB:AF:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA41F6A99B2E9961DFF368 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.195.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:41:f6:a9:9b:2e:99:61:df:f3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c2da3a45-a3bc-4aff-940c-119da42fc27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:fd:59:d5:c9:93:70:16:7c:00:87:0a:60: f2:76:41:f7:52:57:d6:28:e9:d2:77:20:71:f9:2e: 04:e3:44:9f:55:40:0e:a9:f3:3f:2a:19:c0:c5:a8: 31:db:c9:db:f1:85:58:38:9f:9c:ce:52:d7:46:26: 82:f8:a6:ff:92:88:dc:60:23:0e:52:9c:00:38:9e: 9e:2a:e9:1e:96:cc:28:cf:f9:44:de:aa:f5:91:50: 8a:a8:16:8a:9d:4b:d3:19:3b:e4:d1:c0:f6:b2:8a: cc:1a:5a:99:0d:45:7e:ad:34:73:ae:4a:b2:9d:cb: 4d:44:0c:3b:ee:d6:a3:c8:b5:51:ac:ab:f1:26:a8: 04:5c:2b:1d:74:ab:da:54:f6:a0:5b:ed:19:3d:ea: 0f:54:77:6a:56:e8:e2:69:7b:91:dc:cf:0c:88:18: b1:ab:6a:1a:d1:0c:a0:50:38:dc:94:2e:3e:4c:fa: d3:d9:38:7b:d4:73:e7:64:52:0a:d1:af:60:30:c1: 33:93:00:dc:69:75:e9:45:a5:70:91:af:2f:7f:81: db:14:9c:eb:40:73:e5:e4:f3:13:08:f8:0e:f0:1b: 05:5a:5e:d3:14:b0:91:78:79:35:ba:74:c5:34:51: ea:70:3c:e0:0f:f9:b9:e9:3b:48:cc:86:1a:73:14: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2F:27:77:89:BD:F5:66:FA:5A:76:FE:2F:79:5B:C0:47:CB:AF:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0b:4e:b8:e2:e5:65:e6:2d:e2:86:36:16:e5:8e:22:aa:07: da:e8:99:ac:9a:2d:5e:3f:0c:42:fa:be:52:ae:46:16:6d:78: 37:c1:1d:73:37:e4:65:a2:cb:6b:d9:e8:dd:f6:61:74:51:88: 1c:22:a5:97:d5:ca:a2:e3:83:ad:ce:09:40:51:e2:6d:c0:f0: ee:92:48:1c:8e:20:35:d9:8c:31:a5:f1:b9:35:a2:a0:5b:12: 4a:b3:b6:c2:05:76:bf:fe:c6:06:30:21:12:9a:65:b6:d9:2b: c4:f1:a7:ad:5d:41:7a:ff:5d:36:f1:87:7e:74:c8:9a:a9:cc: 24:29:2e:57:72:c9:cc:3e:d0:39:07:b7:26:d1:24:c9:ee:d8: eb:5d:eb:63:ca:29:97:fd:c2:26:f8:e0:54:7a:f0:9f:03:3d: fb:a6:21:ce:4a:e0:40:27:11:bc:e9:9a:cb:b1:96:82:dd:32: ec:91:7c:5a:07:90:a0:85:35:da:09:f0:d5:34:cf:a8:bc:3a: a5:5a:e5:b1:da:d2:2c:0d:ed:02:46:84:28:ed:64:99:6a:45: fe:bc:c7:85:fa:3a:ee:ca:2b:5d:a6:fe:3a:cd:d9:61:5d:bd: 3e:94:c2:0a:9c:30:7b:18:0a:1f:5c:c2:80:24:bf:ba:4c:37: b6:22:3b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkH2qZsumWHf82gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzJkYTNhNDUtYTNiYy00YWZmLTk0MGMtMTE5ZGE0MmZjMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdz9WdXJk3AWfACHCmDydkH3UlfWKOnSdyBx +S4E40SfVUAOqfM/KhnAxagx28nb8YVYOJ+czlLXRiaC+Kb/kojcYCMOUpwAOJ6e Kukelswoz/lE3qr1kVCKqBaKnUvTGTvk0cD2sorMGlqZDUV+rTRzrkqynctNRAw7 7tajyLVRrKvxJqgEXCsddKvaVPagW+0ZPeoPVHdqVujiaXuR3M8MiBixq2oa0Qyg UDjclC4+TPrT2Th71HPnZFIK0a9gMMEzkwDcaXXpRaVwka8vf4HbFJzrQHPl5PMT CPgO8BsFWl7TFLCReHk1unTFNFHqcDzgD/m56TtIzIYacxQQTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkvJ3eJvfVm+lp2/i95W8BHy68xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjMjNkZjQtMjU5Yi0z ZWY3LTg3YzctNWIwYzNlYTAyNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8MwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsLTrji5WXmLeKGNhbljiKqB9romayaLV4/DEL6vlKuRhZteDfBHXM3 5GWiy2vZ6N32YXRRiBwipZfVyqLjg63OCUBR4m3A8O6SSByOIDXZjDGl8bk1oqBb EkqztsIFdr/+xgYwIRKaZbbZK8Txp61dQXr/XTbxh350yJqpzCQpLldyycw+0DkH tybRJMnu2Otd62PKKZf9wib44FR68J8DPfumIc5K4EAnEbzpmsuxloLdMuyRfFoH kKCFNdoJ8NU0z6i8OqVa5bHa0iwN7QJGhCjtZJlqRf68x4X6Ou7KK12m/jrN2WFd vT6UwgqcMHsYCh9cwoAkv7pMN7YiO6A= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:29 2026 by rpki-client