$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa File: 43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa (raw, json) Hash identifier: MeG8ReEr9o7WoPUPmm4uu0IvbG6qC0lUVsmr6SmGvy0= Subject key identifier: 34:6B:BD:F2:35:26:2B:00:E6:CE:BF:04:4A:D1:DB:89:57:5F:0B:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA36CC2FFB33E2A8CDA7C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.239.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:36:cc:2f:fb:33:e2:a8:cd:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=0134c2ad-cbb3-4e7c-8f6b-4f70a6902c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:e9:f9:22:94:c3:73:6c:7a:67:df:e3:33: 50:35:eb:51:f3:d6:45:d2:9a:cd:c6:dc:9a:5a:ec: 5b:67:36:86:43:68:8b:1f:8d:ca:8d:e9:1e:61:79: 44:6b:df:9b:46:ae:7d:c6:6d:7d:af:20:a0:ed:3e: 6b:55:1d:51:77:7a:f4:54:cd:a6:70:e0:cc:31:66: 65:83:90:95:0e:4b:d7:9b:1b:1b:72:d8:45:a8:06: 38:01:f3:8d:c6:e2:78:cb:22:bf:47:f2:79:f7:6f: bb:ed:1f:4f:c9:3e:4c:64:c4:fc:bb:de:a4:e0:5c: c1:4e:06:ee:54:5e:f1:01:54:41:53:3d:a7:fe:66: b6:e2:e8:96:43:3f:7e:18:0f:bd:a1:ac:f8:1c:cb: 23:d5:f8:db:de:f3:99:00:a9:29:ae:fd:91:b3:ee: 57:6d:f4:2d:a8:21:7a:34:4c:34:c1:10:79:8b:59: 47:d0:c3:1e:72:10:a6:17:2a:6b:e0:c8:28:1f:b1: bb:0b:ca:fe:92:13:d5:cc:4d:76:23:2b:ee:c7:5e: eb:b5:82:21:24:54:21:ea:50:96:90:a0:12:ca:8a: e2:5c:9c:99:fb:78:91:e4:46:3f:ac:9d:47:e1:50: e9:14:14:36:f7:98:b8:8c:a5:0a:5d:55:30:a5:3a: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6B:BD:F2:35:26:2B:00:E6:CE:BF:04:4A:D1:DB:89:57:5F:0B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:60:b2:b4:53:12:19:37:64:09:03:1c:d0:40:a0:b5:4a:eb: 24:23:45:c8:04:9d:35:64:9a:3b:73:8e:3c:ce:40:28:4a:1c: f4:6e:03:be:ed:bb:30:de:e4:f1:22:e6:9a:ed:41:14:ca:b5: 67:25:27:bd:df:bf:87:d2:89:d1:f8:8c:c5:5e:a0:95:cf:b7: 0a:90:2d:82:a9:8f:94:44:14:95:02:0d:ea:8d:43:2a:55:2d: 96:5c:e8:84:e4:b4:77:a2:99:98:33:f5:90:15:09:f7:80:39: 70:3b:c6:d1:fe:76:33:38:51:fc:15:1b:c0:7f:d4:44:8f:fe: 7b:38:2a:4c:e0:72:74:b3:23:a7:ad:c3:c1:fd:69:5a:9f:32: 4c:cb:09:99:1c:02:33:42:fb:67:8c:35:12:b3:d7:11:0a:93: a1:79:fd:8c:14:17:f2:49:9e:a6:f8:74:0a:0e:a0:f8:3c:22: d8:a3:1a:84:78:b1:40:13:47:9d:49:e6:14:42:3b:e8:92:98: af:c1:f1:75:18:5d:60:b2:f4:7f:42:e0:d5:61:58:78:d7:d3: 7b:5f:6c:db:3d:3f:89:31:b1:5e:3a:5b:5d:39:e5:30:a5:3e: ab:21:85:c0:ff:b1:3c:58:f6:6c:a1:3d:e9:58:33:3c:87:83: ea:72:af:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjbML/sz4qjNp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDEzNGMyYWQtY2JiMy00ZTdjLThmNmItNGY3MGE2OTAyYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxjp+SKUw3Nsemff4zNQNetR89ZF0prNxtya WuxbZzaGQ2iLH43KjekeYXlEa9+bRq59xm19ryCg7T5rVR1Rd3r0VM2mcODMMWZl g5CVDkvXmxsbcthFqAY4AfONxuJ4yyK/R/J592+77R9PyT5MZMT8u96k4FzBTgbu VF7xAVRBUz2n/ma24uiWQz9+GA+9oaz4HMsj1fjb3vOZAKkprv2Rs+5XbfQtqCF6 NEw0wRB5i1lH0MMechCmFypr4MgoH7G7C8r+khPVzE12Iyvux17rtYIhJFQh6lCW kKASyoriXJyZ+3iR5EY/rJ1H4VDpFBQ295i4jKUKXVUwpTqBeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRrvfI1JisA5s6/BErR24lXXws4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDNhNDllZTMtOGFhNC0z M2JjLThkNTItZDgwMWU1ZjBhMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxgsrRTEhk3ZAkDHNBAoLVK6yQjRcgEnTVkmjtzjjzOQChKHPRuA77t uzDe5PEi5prtQRTKtWclJ73fv4fSidH4jMVeoJXPtwqQLYKpj5REFJUCDeqNQypV LZZc6ITktHeimZgz9ZAVCfeAOXA7xtH+djM4UfwVG8B/1ESP/ns4KkzgcnSzI6et w8H9aVqfMkzLCZkcAjNC+2eMNRKz1xEKk6F5/YwUF/JJnqb4dAoOoPg8ItijGoR4 sUATR51J5hRCO+iSmK/B8XUYXWCy9H9C4NVhWHjX03tfbNs9P4kxsV46W1055TCl PqshhcD/sTxY9myhPelYMzyHg+pyr60= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:31 2026 by rpki-client