$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa File: 4867dc89-6f52-3a23-9d9c-4e26531651da.roa (raw, json) Hash identifier: fs+G+m0L7IXG0sZ4aj1t10EFHhrjbHtRchNM9+jfoGQ= Subject key identifier: 0B:F1:B1:0E:C7:E3:2F:80:99:58:F9:40:39:49:E3:B1:89:84:DD:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA622D1D1FCE2E659A73A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.235.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:62:2d:1d:1f:ce:2e:65:9a:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c5259544-d4f8-4559-ad72-d92b2e1f0261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:23:1c:10:06:a9:fc:8f:b3:64:2d:33:a0: 13:f2:4f:01:44:1f:54:1e:61:7f:91:c2:cb:28:cf: b2:a6:95:1a:b5:2c:b1:5c:2f:87:c2:bb:bb:90:27: 1b:e5:3a:48:9c:e3:f2:8d:71:ff:56:20:e4:27:12: 13:e0:5c:24:f4:9c:91:cf:44:fc:fa:a1:a2:aa:1a: 73:b4:3e:e3:02:f2:d0:18:c4:92:4f:b7:3c:7e:8d: a9:86:f6:7c:ee:4f:1b:c4:70:79:ff:c4:86:7a:ac: 0d:1e:0e:bd:f5:be:63:d2:cc:84:d5:fa:c5:b3:62: 6c:7d:11:79:5b:b0:83:59:3c:4b:43:73:95:d7:2b: 9d:79:de:92:19:8c:ab:e2:1c:9d:78:e7:23:49:be: 8d:08:4f:24:52:4d:3b:7d:97:68:51:cd:6e:d1:a1: 7a:49:79:4c:45:95:6b:49:94:24:28:57:73:29:b3: 31:9f:3d:27:2f:69:74:46:3b:d1:67:63:64:26:84: 57:9a:62:64:51:bd:41:b0:3f:be:bb:d4:95:47:8c: b8:7a:2e:54:88:e3:7c:d5:11:06:e4:0e:ed:56:0b: 48:6e:86:c2:8a:72:ec:58:71:ed:c0:f4:01:43:53: db:9a:fa:03:1a:7c:d7:f9:ff:04:5f:36:8e:e1:dc: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F1:B1:0E:C7:E3:2F:80:99:58:F9:40:39:49:E3:B1:89:84:DD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f4:a6:85:b4:05:c6:b1:c2:dc:73:02:f7:ac:04:36:02:01: 7b:d8:77:99:e0:f3:6f:f5:64:9d:79:32:9f:82:9a:f7:15:0c: 0c:4c:40:88:59:ea:a0:16:25:11:dc:72:28:8a:78:85:cc:19: 68:07:51:46:cc:fc:7f:30:e4:9e:74:1e:f3:01:3c:e1:59:09: cf:c3:47:a3:36:5a:3e:b9:b9:82:b1:3d:f7:5e:39:aa:f9:4d: eb:9f:5b:80:57:6d:78:e4:2c:1d:68:e5:b3:b6:44:39:a4:58: 3b:1a:5b:f2:c4:40:0e:7c:01:4f:e0:10:4d:c5:ed:81:63:49: ea:54:bc:2b:f1:41:6b:bc:ad:5a:cb:8f:13:27:74:34:40:0d: ee:7b:5f:eb:7d:cf:74:2c:3b:34:e4:f5:b2:55:db:d7:5a:61: e0:cb:40:49:c3:7c:3b:95:c0:68:eb:0d:87:ac:1a:16:a5:18: 5b:9c:e9:5f:e4:90:89:51:6a:c0:b9:bd:82:f3:d2:9c:be:cd: 8d:e6:a2:b5:ce:6c:19:d0:b3:f8:6f:ad:b6:78:cd:ec:63:f3: e8:ec:93:0b:46:d8:ce:07:2c:bf:d7:ce:c3:2b:9d:1e:a1:84: dc:72:6c:1a:c8:2a:47:2b:df:aa:83:f9:41:ed:18:33:c3:09: 6a:90:95:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmItHR/OLmWac6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzUyNTk1NDQtZDRmOC00NTU5LWFkNzItZDkyYjJlMWYwMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCIjHBAGqfyPs2QtM6AT8k8BRB9UHmF/kcLL KM+yppUatSyxXC+Hwru7kCcb5TpInOPyjXH/ViDkJxIT4Fwk9JyRz0T8+qGiqhpz tD7jAvLQGMSST7c8fo2phvZ87k8bxHB5/8SGeqwNHg699b5j0syE1frFs2JsfRF5 W7CDWTxLQ3OV1yuded6SGYyr4hydeOcjSb6NCE8kUk07fZdoUc1u0aF6SXlMRZVr SZQkKFdzKbMxnz0nL2l0RjvRZ2NkJoRXmmJkUb1BsD++u9SVR4y4ei5UiON81REG 5A7tVgtIbobCinLsWHHtwPQBQ1PbmvoDGnzX+f8EXzaO4dz0VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvxsQ7H4y+AmVj5QDlJ47GJhN0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDg2N2RjODktNmY1Mi0z YTIzLTlkOWMtNGUyNjUzMTY1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/0poW0BcaxwtxzAvesBDYCAXvYd5ng82/1ZJ15Mp+CmvcVDAxMQIhZ 6qAWJRHcciiKeIXMGWgHUUbM/H8w5J50HvMBPOFZCc/DR6M2Wj65uYKxPfdeOar5 TeufW4BXbXjkLB1o5bO2RDmkWDsaW/LEQA58AU/gEE3F7YFjSepUvCvxQWu8rVrL jxMndDRADe57X+t9z3QsOzTk9bJV29daYeDLQEnDfDuVwGjrDYesGhalGFuc6V/k kIlRasC5vYLz0py+zY3morXObBnQs/hvrbZ4zexj8+jskwtG2M4HLL/XzsMrnR6h hNxybBrIKkcr36qD+UHtGDPDCWqQlQI= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:50 2026 by rpki-client