$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa File: 9a23917d-461e-3291-a9be-0803e9d905a9.roa (raw, json) Hash identifier: 8cr4u3YcQra7vHPaVs4TANNWhS00VJJ1XBqkAM6G1Ro= Subject key identifier: 4E:58:BB:C2:CB:5F:70:91:11:97:58:E6:CA:7A:66:19:47:A8:8A:92 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA77CDA02409D1D0268280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.189.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:77:cd:a0:24:09:d1:d0:26:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d8e7ef75-bf14-47ac-a5ad-024680d28b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:ea:2a:56:94:99:28:7b:b9:9a:67:7d:b8: 61:84:16:d2:9d:6f:c6:57:c1:61:a2:aa:34:e8:1b: 19:2f:20:1c:70:e1:40:7b:0a:c0:3d:35:17:ff:76: a1:20:07:e1:d8:2b:6c:65:6f:a5:59:88:34:dc:14: 62:07:8e:6e:1c:46:bb:7a:9b:d1:6f:5e:dc:83:8c: 89:45:15:ba:10:13:95:ed:dc:bf:ac:de:57:10:b6: d6:03:95:bd:f5:72:c6:7c:0b:9e:dc:94:ae:60:51: 5a:91:72:eb:fa:b4:af:94:fe:23:3c:cd:58:31:5b: df:04:d3:c4:17:18:3d:1d:fc:5f:02:68:7b:df:fb: 89:ae:38:8a:16:c7:b9:8f:93:e6:05:61:1c:f7:4b: da:f2:52:f7:10:a1:ce:ee:77:57:2e:07:80:dd:f7: e1:c5:0e:29:39:b8:22:8e:bb:44:27:5e:f6:7b:34: 9e:ac:ba:52:de:b5:12:b7:df:f4:be:89:60:5e:6d: 64:38:8b:62:68:50:d8:19:ed:00:96:be:cd:69:c0: 85:b5:34:58:12:24:4e:d7:7d:02:1a:1e:2d:58:d2: c1:75:e3:93:e5:aa:b3:3e:0b:08:00:90:98:3d:7b: b7:26:43:89:60:c7:e0:aa:e4:a5:93:7b:a9:27:88: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:58:BB:C2:CB:5F:70:91:11:97:58:E6:CA:7A:66:19:47:A8:8A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f5:15:ff:82:c6:61:5c:0a:05:67:5d:ab:94:69:00:84:85: d9:8b:36:1b:a6:28:53:aa:f2:b7:57:56:b1:24:5d:2d:42:eb: 5a:29:f2:04:06:16:91:b4:ba:3f:98:26:c7:68:b7:7a:ae:61: d0:56:c2:62:00:2a:ea:c7:ab:a0:f9:2c:c1:05:00:19:11:85: 4a:21:df:01:2f:80:da:04:67:e0:9b:cf:2c:6f:62:b9:01:82: ad:ef:3a:f0:15:b3:a7:e8:33:a5:3d:3d:68:10:33:28:5c:39: 9f:83:46:24:ec:1a:f7:f2:fb:bf:46:de:93:e9:8b:d2:35:e9: 4a:85:db:2c:f1:94:9a:61:ae:da:fa:fc:10:b9:5a:e7:fe:c3: a4:30:4a:63:8f:55:88:49:1a:2f:a0:e7:01:d9:79:eb:31:e4: b1:33:99:c9:c8:ba:2a:4e:7a:42:fb:4b:42:44:ee:db:5f:02: 5a:be:2b:cc:61:cc:3d:09:28:56:55:42:e0:a0:e5:22:16:87: 75:71:e2:24:87:e8:2e:bb:1a:70:eb:25:55:65:2a:fe:9e:53: ea:19:62:de:0f:fe:5a:08:d3:f4:71:27:e5:43:c1:51:7c:83: d8:9f:df:b1:f1:e9:78:41:40:4e:f6:5b:06:f4:b3:cf:1c:db: 0d:c6:d4:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnfNoCQJ0dAmgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDhlN2VmNzUtYmYxNC00N2FjLWE1YWQtMDI0NjgwZDI4YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4PqKlaUmSh7uZpnfbhhhBbSnW/GV8Fhoqo0 6BsZLyAccOFAewrAPTUX/3ahIAfh2CtsZW+lWYg03BRiB45uHEa7epvRb17cg4yJ RRW6EBOV7dy/rN5XELbWA5W99XLGfAue3JSuYFFakXLr+rSvlP4jPM1YMVvfBNPE Fxg9HfxfAmh73/uJrjiKFse5j5PmBWEc90va8lL3EKHO7ndXLgeA3ffhxQ4pObgi jrtEJ172ezSerLpS3rUSt9/0volgXm1kOItiaFDYGe0Alr7NacCFtTRYEiRO130C Gh4tWNLBdeOT5aqzPgsIAJCYPXu3JkOJYMfgquSlk3upJ4gGSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5Yu8LLX3CREZdY5sp6ZhlHqIqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEyMzkxN2QtNDYxZS0z MjkxLWE5YmUtMDgwM2U5ZDkwNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP1Ff+CxmFcCgVnXauUaQCEhdmLNhumKFOq8rdXVrEkXS1C61op8gQG FpG0uj+YJsdot3quYdBWwmIAKurHq6D5LMEFABkRhUoh3wEvgNoEZ+CbzyxvYrkB gq3vOvAVs6foM6U9PWgQMyhcOZ+DRiTsGvfy+79G3pPpi9I16UqF2yzxlJphrtr6 /BC5Wuf+w6QwSmOPVYhJGi+g5wHZeesx5LEzmcnIuipOekL7S0JE7ttfAlq+K8xh zD0JKFZVQuCg5SIWh3Vx4iSH6C67GnDrJVVlKv6eU+oZYt4P/loI0/RxJ+VDwVF8 g9if37Hx6XhBQE72Wwb0s88c2w3G1MA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:40 2026 by rpki-client