$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa File: 9aaa8c8f-6494-3aba-bad8-75ea73377902.roa (raw, json) Hash identifier: DPxY+Pq12Z3y0iibBq5S7DhsYvE5pg0gyhweo4jYU7A= Subject key identifier: 31:22:04:D9:E1:94:06:5D:C9:41:7A:9D:BE:0B:A5:04:2E:FD:9A:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AAA2D0C48D3DDD3B34B680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.195.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a2:d0:c4:8d:3d:dd:3b:34:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=806e007b-b85f-47aa-b51a-7ea658b887ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:4e:b6:ce:0e:ff:2e:fa:a7:ff:a7:dd:37: 9d:72:2a:c5:bc:62:1d:bf:3a:06:95:9b:25:b9:45: 6e:cb:d9:24:7c:8f:99:5f:3b:96:88:d8:01:8f:01: af:12:24:ca:7a:03:cb:ef:66:27:8b:da:d2:cb:30: b9:4e:d3:3f:46:62:a8:4e:50:23:4d:cd:90:ec:27: 4b:f4:98:0a:67:db:21:93:82:2f:46:98:da:97:25: 8e:bf:db:b5:15:ec:d0:0c:de:a2:22:1d:7f:1d:37: 3f:59:3d:3c:4f:11:31:7e:2a:27:06:ef:66:31:62: 9a:55:b0:b2:b0:5b:2e:c4:8c:01:d6:db:e4:83:a1: 52:5a:88:a7:10:de:59:17:81:a5:3d:05:b3:8c:1c: 29:18:5f:28:0b:2b:e7:45:86:1d:29:f4:6b:c2:9d: dc:52:71:31:1a:bc:78:89:13:47:a5:e5:c2:23:78: 3e:ba:a2:78:d6:9e:cf:b4:86:8c:d3:28:94:9a:b3: 86:d7:78:18:f7:9d:10:90:31:38:45:1f:dd:77:cc: 05:72:ec:db:a8:c3:f5:3b:c1:a5:82:bd:fb:1c:31: 31:50:c2:06:58:8f:47:bb:a2:40:55:08:bb:25:17: 16:86:31:1d:23:93:97:95:36:7d:0f:30:b3:06:81: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:22:04:D9:E1:94:06:5D:C9:41:7A:9D:BE:0B:A5:04:2E:FD:9A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:65:f4:ab:8f:30:a6:ab:9d:d8:f8:0e:3c:b4:09:eb:66:d4: 4f:93:aa:9b:da:b0:9c:69:cb:be:a4:51:86:16:7f:dd:35:ad: 60:f9:45:a5:30:c2:c3:5e:3a:7c:9e:5d:26:96:d3:77:ce:67: b2:03:c6:68:be:2d:00:c5:71:b8:4d:00:56:71:e8:13:29:1e: 9d:8b:65:6a:49:72:d3:f3:96:44:0f:5d:67:83:98:70:70:9f: 08:06:9e:a5:c4:a4:83:a5:ab:b7:5d:52:4d:e0:bc:f5:87:92: b5:25:eb:1c:19:3d:b5:4d:52:65:6e:b3:d4:d5:37:a9:8a:61: b6:f7:0a:94:3e:a0:a6:d8:77:37:01:e0:9c:f0:7f:52:87:2a: 57:4f:6f:18:d8:2b:b1:b0:6e:22:de:23:14:d7:77:b4:fc:ad: 75:7d:0d:ee:be:c6:63:8b:77:33:13:03:f1:b9:6b:ca:af:33: b0:53:fe:82:cc:cb:4c:34:40:7b:a2:a6:1c:14:58:60:03:8f: a2:f0:f5:cb:b5:0c:20:2e:14:e9:c6:a8:4b:d7:80:7f:65:cf: 51:8d:01:57:1c:b4:95:f5:a3:94:e4:59:19:70:d4:da:48:74: 81:08:33:3e:67:f5:08:c0:ce:e4:ab:eb:0a:02:9f:2f:eb:c6: b0:b5:41:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqLQxI093Ts0toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODA2ZTAwN2ItYjg1Zi00N2FhLWI1MWEtN2VhNjU4Yjg4N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVNOts4O/y76p/+n3TedcirFvGIdvzoGlZsl uUVuy9kkfI+ZXzuWiNgBjwGvEiTKegPL72Yni9rSyzC5TtM/RmKoTlAjTc2Q7CdL 9JgKZ9shk4IvRpjalyWOv9u1FezQDN6iIh1/HTc/WT08TxExfionBu9mMWKaVbCy sFsuxIwB1tvkg6FSWoinEN5ZF4GlPQWzjBwpGF8oCyvnRYYdKfRrwp3cUnExGrx4 iRNHpeXCI3g+uqJ41p7PtIaM0yiUmrOG13gY950QkDE4RR/dd8wFcuzbqMP1O8Gl gr37HDExUMIGWI9Hu6JAVQi7JRcWhjEdI5OXlTZ9DzCzBoGFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEiBNnhlAZdyUF6nb4LpQQu/ZrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWFhYThjOGYtNjQ5NC0z YWJhLWJhZDgtNzVlYTczMzc3OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8MQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJl9KuPMKarndj4Djy0Cetm1E+TqpvasJxpy76kUYYWf901rWD5RaUw wsNeOnyeXSaW03fOZ7IDxmi+LQDFcbhNAFZx6BMpHp2LZWpJctPzlkQPXWeDmHBw nwgGnqXEpIOlq7ddUk3gvPWHkrUl6xwZPbVNUmVus9TVN6mKYbb3CpQ+oKbYdzcB 4Jzwf1KHKldPbxjYK7GwbiLeIxTXd7T8rXV9De6+xmOLdzMTA/G5a8qvM7BT/oLM y0w0QHuiphwUWGADj6Lw9cu1DCAuFOnGqEvXgH9lz1GNAVcctJX1o5TkWRlw1NpI dIEIMz5n9QjAzuSr6woCny/rxrC1QWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:19 2026 by rpki-client