$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/707a0ed8-84ad-34f0-84a3-547ea767a123.roa File: 707a0ed8-84ad-34f0-84a3-547ea767a123.roa (raw, json) Hash identifier: aVZSHBHkIf5oQdqT1OxhCq1Z+ueZA1HQobcjhPawCFI= Subject key identifier: 64:AB:51:90:1D:73:3B:D9:2A:9A:06:EC:C7:E7:A5:0D:8A:C4:9E:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA84DB192E4EE8848C9F20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/707a0ed8-84ad-34f0-84a3-547ea767a123.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.221.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:84:db:19:2e:4e:e8:84:8c:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=db91de63-7128-48cc-850a-1511fe56f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:b8:45:4a:6c:60:f4:50:83:84:5f:dd:41: 51:2d:86:28:23:8c:1c:82:b7:13:cd:b3:ba:99:62: ca:b2:39:9d:80:3a:14:b1:bd:ac:97:a6:c3:45:62: 82:29:39:d0:f1:cf:25:eb:20:0a:59:c9:ab:56:ee: 5e:1d:aa:b9:d3:44:0a:c4:e9:4d:df:bd:19:4f:f7: 6a:b3:b6:14:77:c6:4a:b4:a6:ef:ae:77:56:b1:06: 2c:f1:46:24:cf:9f:46:f2:69:b2:c7:40:9e:7b:e3: cd:b8:63:20:65:99:74:1c:9b:81:e7:69:84:ff:ad: 19:23:88:96:90:03:8d:d6:5b:97:13:df:1f:f0:f4: 22:af:6a:cb:d5:7d:46:7f:e4:c5:43:67:3b:bf:e5: 0c:c8:c2:73:55:40:e5:ff:ca:21:47:ee:93:23:c8: 1e:2d:3a:6a:3d:ed:2a:91:0f:7c:e6:71:5d:eb:31: 5b:66:ea:f8:95:b3:ec:ce:cc:af:c6:c1:fc:f2:62: 1c:67:1e:5c:d3:2e:4f:c9:63:10:94:97:8b:ec:43: 66:aa:93:ef:b6:33:30:f5:a0:f2:c8:3c:bb:6d:c1: 07:58:d6:e6:17:6d:6d:35:06:f6:81:ef:5b:fa:20: c0:b3:3f:66:55:30:4e:ed:04:a8:85:5b:a4:dc:a5: ed:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AB:51:90:1D:73:3B:D9:2A:9A:06:EC:C7:E7:A5:0D:8A:C4:9E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/707a0ed8-84ad-34f0-84a3-547ea767a123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.221.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:19:e6:54:ec:ef:e2:7a:0f:62:b6:60:b0:3d:e1:26:2b:c6: e6:60:1a:eb:58:35:1a:38:9d:9f:55:11:fc:c3:56:e5:c9:50: 48:9a:b9:7a:19:86:28:66:5b:92:eb:e3:09:77:b2:24:d5:9b: a9:ee:52:08:35:7c:4d:71:c9:99:52:fc:42:96:f8:8a:0a:35: 62:25:ca:19:bc:9b:62:e0:86:06:66:fa:5b:ae:48:89:4c:4f: c8:47:07:12:59:0f:61:9c:14:6b:66:fd:ff:b5:9e:4d:8c:aa: 18:84:56:65:ad:3a:b9:78:17:f1:63:12:c5:22:d1:ca:65:76: d8:06:92:0d:6e:93:8d:7f:c7:88:b9:6a:17:2b:18:44:0d:68: 2d:1b:81:78:33:28:53:1a:5f:7d:5e:cb:81:99:f0:6b:e2:d8: 07:a0:3a:4e:ab:07:ba:48:d4:a6:3e:61:d9:37:c0:cd:6f:07: 30:d9:f0:d9:89:f2:98:f5:69:db:92:c2:12:6a:3d:7e:2c:b1: eb:3a:b8:58:51:5f:c1:95:3f:32:44:5b:ec:b5:ec:10:ad:8d: dc:0c:75:73:9c:ed:e3:db:6c:0a:95:a7:9b:dc:37:11:c3:1f: 10:a0:33:bf:6e:51:36:3a:c3:be:02:b1:42:6d:19:23:3c:05: 04:a5:26:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoTbGS5O6ISMnyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGI5MWRlNjMtNzEyOC00OGNjLTg1MGEtMTUxMWZlNTZmMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L24RUpsYPRQg4Rf3UFRLYYoI4wcgrcTzbO6 mWLKsjmdgDoUsb2sl6bDRWKCKTnQ8c8l6yAKWcmrVu5eHaq500QKxOlN370ZT/dq s7YUd8ZKtKbvrndWsQYs8UYkz59G8mmyx0Cee+PNuGMgZZl0HJuB52mE/60ZI4iW kAON1luXE98f8PQir2rL1X1Gf+TFQ2c7v+UMyMJzVUDl/8ohR+6TI8geLTpqPe0q kQ985nFd6zFbZur4lbPszsyvxsH88mIcZx5c0y5PyWMQlJeL7ENmqpPvtjMw9aDy yDy7bcEHWNbmF21tNQb2ge9b+iDAsz9mVTBO7QSohVuk3KXtPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSrUZAdczvZKpoG7MfnpQ2KxJ4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzA3YTBlZDgtODRhZC0z NGYwLTg0YTMtNTQ3ZWE3NjdhMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI91wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoZ5lTs7+J6D2K2YLA94SYrxuZgGutYNRo4nZ9VEfzDVuXJUEiauXoZ hihmW5Lr4wl3siTVm6nuUgg1fE1xyZlS/EKW+IoKNWIlyhm8m2LghgZm+luuSIlM T8hHBxJZD2GcFGtm/f+1nk2MqhiEVmWtOrl4F/FjEsUi0cpldtgGkg1uk41/x4i5 ahcrGEQNaC0bgXgzKFMaX31ey4GZ8Gvi2AegOk6rB7pI1KY+Ydk3wM1vBzDZ8NmJ 8pj1aduSwhJqPX4sses6uFhRX8GVPzJEW+y17BCtjdwMdXOc7ePbbAqVp5vcNxHD HxCgM79uUTY6w74CsUJtGSM8BQSlJrM= -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:42 2026 by rpki-client