$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a317ffa8-150a-3248-a7ed-3b98df65e8f5.roa File: a317ffa8-150a-3248-a7ed-3b98df65e8f5.roa (raw, json) Hash identifier: siQbtj7qr9v56D/x1onYOJmsgl91t7pOZjp7sqf0LkU= Subject key identifier: 72:CA:CA:66:20:6C:23:60:36:4E:DF:AE:ED:C2:A4:BB:DA:5F:FA:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA80F8EBF01E0CAB021680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a317ffa8-150a-3248-a7ed-3b98df65e8f5.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.199.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:80:f8:eb:f0:1e:0c:ab:02:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=01ad060a-c585-4736-9421-4967134f778c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:37:8e:c8:68:2a:5e:4e:35:24:73:d1:0d: 28:55:49:ff:45:4f:cc:64:0a:58:96:39:c8:8c:16: 56:e2:7f:ed:4f:ed:c5:36:e1:98:22:d1:c4:37:2e: 60:60:05:04:16:1f:1c:a5:0e:94:93:da:0f:4e:1b: 8e:40:da:cc:66:53:43:e3:52:63:45:b6:df:75:6d: 45:b1:5b:7a:e1:4f:3e:b3:b7:79:b5:52:6b:4e:99: 44:81:41:5b:eb:9e:b0:28:2e:1b:48:bd:d3:e6:81: d7:0f:56:1e:0d:4b:46:8e:85:40:f5:83:72:e5:ef: 43:cd:bb:79:90:df:12:fc:a5:4d:c7:f8:ba:ea:04: d9:c1:59:9d:9b:8b:95:5e:ca:7b:f0:3d:b6:7f:ac: b1:fc:3d:aa:7a:97:49:e5:eb:58:a4:59:76:7d:b9: e3:87:3a:2b:07:02:63:ad:2a:a1:cc:06:ba:af:39: 9b:dc:a9:26:c3:ac:1c:ca:cd:a3:8e:36:ba:f5:e0: 06:d8:4f:8c:98:4f:5f:db:b8:71:d7:5c:c0:f2:a7: 95:1b:89:bb:07:f7:40:d3:46:08:35:d1:1c:3a:4b: 67:ed:8b:cd:7f:55:5f:bc:34:98:10:df:ae:14:76: 42:ac:c6:4f:ee:8f:f7:b1:de:5a:e7:11:b6:25:20: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CA:CA:66:20:6C:23:60:36:4E:DF:AE:ED:C2:A4:BB:DA:5F:FA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a317ffa8-150a-3248-a7ed-3b98df65e8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:75:47:3f:5e:8a:0a:bf:35:c3:2f:ed:fe:df:ed:b1:bb:ca: 84:ec:14:f2:bd:80:fa:41:99:fa:08:9b:5f:89:c4:4c:c3:da: eb:a0:09:d3:06:b3:ea:f6:3d:22:8c:fa:6c:a8:a2:b4:f2:19: a5:c0:4a:12:e4:6f:68:07:06:e8:af:6a:ba:04:cd:14:fd:37: 88:25:b0:70:55:32:61:63:4f:16:5a:8f:9b:12:d1:f9:0c:c7: e0:ba:9e:03:ec:42:47:6e:b1:7a:20:4a:e0:cc:4a:6c:be:67: 85:c9:5b:c4:10:b5:c8:36:f0:aa:26:fe:5d:5d:21:12:14:18: 50:f9:a5:16:67:be:97:dd:14:cf:31:c4:a9:2a:61:2b:eb:1c: e7:5c:04:02:af:6e:b5:88:ca:83:cc:ee:77:fb:2b:f1:9d:17: a4:c0:c7:8f:3b:93:3f:17:23:a8:e9:8b:2b:c7:0e:7e:b2:5f: 88:e4:60:33:09:4d:de:aa:ac:ea:d9:da:7c:1c:3c:b2:58:b5: d4:76:64:a4:ea:5b:18:f3:42:33:ab:b8:75:c0:3c:98:c1:16: 87:87:cb:29:b9:2f:52:7d:11:06:b0:a3:a0:65:91:b0:c9:a5: 1e:0c:fd:6b:f5:e4:43:91:48:22:ab:fa:41:83:9e:27:a4:3f: 02:95:32:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoD46/AeDKsCFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDFhZDA2MGEtYzU4NS00NzM2LTk0MjEtNDk2NzEzNGY3NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsug3jshoKl5ONSRz0Q0oVUn/RU/MZApYljnI jBZW4n/tT+3FNuGYItHENy5gYAUEFh8cpQ6Uk9oPThuOQNrMZlND41JjRbbfdW1F sVt64U8+s7d5tVJrTplEgUFb656wKC4bSL3T5oHXD1YeDUtGjoVA9YNy5e9Dzbt5 kN8S/KVNx/i66gTZwVmdm4uVXsp78D22f6yx/D2qepdJ5etYpFl2fbnjhzorBwJj rSqhzAa6rzmb3Kkmw6wcys2jjja69eAG2E+MmE9f27hx11zA8qeVG4m7B/dA00YI NdEcOktn7YvNf1VfvDSYEN+uFHZCrMZP7o/3sd5a5xG2JSDwPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLKymYgbCNgNk7fru3CpLvaX/qiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTMxN2ZmYTgtMTUwYS0z MjQ4LWE3ZWQtM2I5OGRmNjVlOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ1Rz9eigq/NcMv7f7f7bG7yoTsFPK9gPpBmfoIm1+JxEzD2uugCdMG s+r2PSKM+myoorTyGaXAShLkb2gHBuivaroEzRT9N4glsHBVMmFjTxZaj5sS0fkM x+C6ngPsQkdusXogSuDMSmy+Z4XJW8QQtcg28Kom/l1dIRIUGFD5pRZnvpfdFM8x xKkqYSvrHOdcBAKvbrWIyoPM7nf7K/GdF6TAx487kz8XI6jpiyvHDn6yX4jkYDMJ Td6qrOrZ2nwcPLJYtdR2ZKTqWxjzQjOruHXAPJjBFoeHyym5L1J9EQawo6BlkbDJ pR4M/Wv15EORSCKr+kGDniekPwKVMqE= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:37 2026 by rpki-client