$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa File: 5899eaf1-4aac-378e-b6cc-b484a2849734.roa (raw, json) Hash identifier: dSSjhL/zEhAwbhqzfvtCLWj7Js9VnU+FKC4jjFdt3WU= Subject key identifier: CD:54:1E:97:91:97:C8:B9:FE:49:3B:C3:7F:FB:40:8C:4B:EC:8B:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA7A4C1DAFA59C82A5580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.243.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a7:a4:c1:da:fa:59:c8:2a:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=bb8cb522-7b20-4810-a1a7-21f07bc38830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:c7:54:c5:2e:1d:12:42:21:7f:e8:2f:79: 1e:c9:38:05:85:8d:d6:e5:a3:90:88:31:45:02:f1: 43:4c:3b:fe:ff:ef:ff:7b:34:ac:a6:ab:01:85:6f: 89:c1:45:e1:33:24:d1:a7:8c:3e:a2:2a:78:b0:cf: 7b:bb:c5:cf:e5:86:c3:e0:6e:14:06:70:29:5e:19: 8d:72:16:cd:17:3a:e3:54:ef:8e:ee:75:ff:cf:3d: f6:f0:23:a3:cc:7c:d8:13:d8:ea:47:1b:9c:49:ca: 1f:52:07:cf:2c:18:41:18:bd:fc:90:45:c1:81:91: c4:44:75:73:81:bc:6e:af:82:83:2d:75:99:f5:08: 05:66:08:5c:3b:24:fe:2a:96:1b:2b:94:1b:77:8e: 6e:e3:6b:bc:8f:56:09:b7:f9:95:69:28:82:06:c5: c6:60:f5:a7:26:71:6c:b7:58:64:7b:16:10:20:ec: 62:f3:41:7d:a6:4a:21:9f:9b:10:39:11:5e:a1:95: 75:af:96:01:20:12:a8:46:c8:e3:e0:4c:51:6d:2d: 4b:01:cb:3b:23:53:91:18:f0:47:b5:da:7e:3c:e7: d7:d9:dd:04:c0:8f:c0:25:2c:7d:5d:df:67:0f:0a: 09:a1:bb:0c:99:3f:ec:f0:df:d9:c9:8e:68:f5:c3: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:1E:97:91:97:C8:B9:FE:49:3B:C3:7F:FB:40:8C:4B:EC:8B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a2:0a:f3:32:95:f0:c0:9b:67:c5:0f:49:1c:4c:66:2a:84: 3f:75:b4:41:86:02:8f:e0:b9:62:b6:4b:b1:a8:1c:fb:d9:2a: 04:66:d2:57:43:fe:e8:cb:e5:91:8f:05:f5:26:ee:2f:0e:9b: c7:9e:37:a1:ec:59:71:d7:af:c4:60:a7:d4:15:98:55:42:97: 31:5c:25:25:01:9a:32:a5:38:97:ad:f7:04:dd:f6:00:55:7e: 3b:67:10:5c:5a:98:72:23:53:5e:5b:0b:4e:cd:f6:86:0e:4c: 38:ee:0f:04:1a:9a:bc:4d:82:40:c1:11:88:0c:f9:61:11:b2: 12:07:fb:cb:8a:75:32:c6:0a:e0:47:7c:1f:d9:55:e3:c0:b1: 4d:ca:4a:84:ed:a3:0d:21:38:22:fe:22:29:5a:d2:9a:d5:1a: 2f:92:23:00:e4:d2:0f:3b:83:77:51:1f:7f:cd:fd:50:8f:b6: d6:fb:72:6c:6e:37:0d:7b:2f:1d:5c:81:58:ec:79:b9:41:92: 3b:df:8f:b2:95:24:fd:35:ff:7e:66:64:07:d0:eb:37:ce:43: c3:fa:d1:c4:42:da:83:1d:6a:28:0c:be:d6:f5:71:01:ec:e9: 25:68:0c:50:fe:5f:f1:d5:c9:95:6d:76:e4:1c:61:73:ca:13: 09:74:6d:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqekwdr6WcgqVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmI4Y2I1MjItN2IyMC00ODEwLWExYTctMjFmMDdiYzM4ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBbHVMUuHRJCIX/oL3keyTgFhY3W5aOQiDFF AvFDTDv+/+//ezSspqsBhW+JwUXhMyTRp4w+oip4sM97u8XP5YbD4G4UBnApXhmN chbNFzrjVO+O7nX/zz328COjzHzYE9jqRxucScofUgfPLBhBGL38kEXBgZHERHVz gbxur4KDLXWZ9QgFZghcOyT+KpYbK5Qbd45u42u8j1YJt/mVaSiCBsXGYPWnJnFs t1hkexYQIOxi80F9pkohn5sQORFeoZV1r5YBIBKoRsjj4ExRbS1LAcs7I1ORGPBH tdp+POfX2d0EwI/AJSx9Xd9nDwoJobsMmT/s8N/ZyY5o9cO8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1UHpeRl8i5/kk7w3/7QIxL7IujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg5OWVhZjEtNGFhYy0z NzhlLWI2Y2MtYjQ4NGEyODQ5NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiiCvMylfDAm2fFD0kcTGYqhD91tEGGAo/guWK2S7GoHPvZKgRm0ldD /ujL5ZGPBfUm7i8Om8eeN6HsWXHXr8Rgp9QVmFVClzFcJSUBmjKlOJet9wTd9gBV fjtnEFxamHIjU15bC07N9oYOTDjuDwQamrxNgkDBEYgM+WERshIH+8uKdTLGCuBH fB/ZVePAsU3KSoTtow0hOCL+Iila0prVGi+SIwDk0g87g3dRH3/N/VCPttb7cmxu Nw17Lx1cgVjseblBkjvfj7KVJP01/35mZAfQ6zfOQ8P60cRC2oMdaigMvtb1cQHs 6SVoDFD+X/HVyZVtduQcYXPKEwl0bcA= -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:22 2026 by rpki-client