$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8edf531-cc66-3f8f-974d-cc5ad0dbe28f.roa File: d8edf531-cc66-3f8f-974d-cc5ad0dbe28f.roa (raw, json) Hash identifier: Mk6beZEIJoPz0bcYFwKmtEPZrbfAsRF6aYR1xdpCBzU= Subject key identifier: 6A:20:1A:37:BD:3A:17:F1:89:F6:FD:70:E7:FA:50:5F:E5:D0:90:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA4C0C2B0ECBC257BE75C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8edf531-cc66-3f8f-974d-cc5ad0dbe28f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.192.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:4c:0c:2b:0e:cb:c2:57:be:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3973856e-2f6c-4e45-ae73-72e2b8c54edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:42:8a:ed:6a:8e:e6:c0:9a:be:83:a5:da: a9:48:a0:84:fc:30:ce:95:e8:75:81:9a:24:ca:2d: eb:9d:8a:e8:76:f8:99:af:1a:f4:9a:ff:37:36:e2: cc:da:99:07:29:b7:73:05:ca:7e:29:8c:be:4c:e6: 81:6c:e1:54:39:47:2d:9c:15:b8:c8:20:eb:cd:c5: a9:71:77:7a:55:dd:7b:c6:14:80:2d:33:49:0e:50: 26:b5:a8:99:2e:a6:d9:af:c6:95:c4:33:88:2a:a4: c3:d9:e5:7c:77:bf:54:85:eb:6f:d2:aa:5e:0c:01: 20:80:8b:39:92:91:1d:c6:89:5d:74:f2:ee:8b:71: f3:ec:c5:88:ba:e9:05:0c:b1:5f:f7:b5:44:5f:ab: d4:a7:ab:7f:1a:57:9c:1e:06:c6:5c:24:b9:00:14: 1d:05:2c:44:57:33:67:14:d4:93:6e:4f:b8:21:19: 96:b1:95:35:5e:70:68:37:a3:d8:e7:54:c2:34:75: 43:53:68:31:53:dc:a6:00:1a:f1:0d:ba:3e:f5:e6: df:c5:6d:40:52:30:41:08:02:3b:66:6b:3e:68:39: 72:93:f3:53:a0:35:a1:2b:6d:c1:49:db:0e:06:84: 5a:6d:6b:a3:6f:1a:e6:51:a5:de:a3:52:5f:6d:8f: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:20:1A:37:BD:3A:17:F1:89:F6:FD:70:E7:FA:50:5F:E5:D0:90:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8edf531-cc66-3f8f-974d-cc5ad0dbe28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.192.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2e:54:ec:11:0b:86:5c:47:b3:14:95:06:0b:a6:72:21:ba: 97:d0:2b:98:ae:4e:c5:f3:c6:5b:23:0f:8b:64:9f:56:97:db: f9:87:93:0f:3e:d0:b6:85:b6:d3:d2:58:68:48:b7:fe:ef:89: 43:d3:58:4f:c5:49:c5:ec:db:ef:d4:fc:15:bc:f7:48:5d:50: e3:4b:b7:0f:1b:53:48:31:d1:95:af:a0:04:74:16:57:0e:03: b1:96:f0:0c:59:eb:cc:28:eb:80:0a:7a:27:2c:23:d6:15:99: 3f:1a:5c:7b:c1:ef:7e:08:47:b4:b4:11:a5:a5:fc:31:b7:06: cb:a6:3e:0b:56:f5:6c:d2:58:15:11:d4:2c:69:a0:36:de:21: 34:f5:2b:a4:4e:46:15:31:7a:50:51:59:d2:9d:e0:d7:0f:57: 27:2c:44:0a:ec:75:89:09:e2:82:d8:4d:ca:65:5b:a6:7e:b3: ef:25:1e:6a:ca:e4:84:74:a6:0b:0b:27:80:3c:85:79:41:7e: fa:fe:92:28:c1:cc:e9:ab:73:c7:c5:0f:64:cc:5f:5a:53:23: a8:cb:c4:b6:ed:fc:2a:6e:7b:75:4b:38:6e:8b:6d:bc:a7:64: ce:f8:58:0b:fe:d2:60:8b:e6:a2:6d:25:b9:cd:a0:b1:41:73: 7d:4c:5e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkwMKw7Lwle+dcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Mzk3Mzg1NmUtMmY2Yy00ZTQ1LWFlNzMtNzJlMmI4YzU0ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ9Ciu1qjubAmr6DpdqpSKCE/DDOleh1gZok yi3rnYrodviZrxr0mv83NuLM2pkHKbdzBcp+KYy+TOaBbOFUOUctnBW4yCDrzcWp cXd6Vd17xhSALTNJDlAmtaiZLqbZr8aVxDOIKqTD2eV8d79Uhetv0qpeDAEggIs5 kpEdxolddPLui3Hz7MWIuukFDLFf97VEX6vUp6t/GlecHgbGXCS5ABQdBSxEVzNn FNSTbk+4IRmWsZU1XnBoN6PY51TCNHVDU2gxU9ymABrxDbo+9ebfxW1AUjBBCAI7 Zms+aDlyk/NToDWhK23BSdsOBoRabWujbxrmUaXeo1JfbY83IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGogGje9Ohfxifb9cOf6UF/l0JAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhlZGY1MzEtY2M2Ni0z ZjhmLTk3NGQtY2M1YWQwZGJlMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsuVOwRC4ZcR7MUlQYLpnIhupfQK5iuTsXzxlsjD4tkn1aX2/mHkw8+ 0LaFttPSWGhIt/7viUPTWE/FScXs2+/U/BW890hdUONLtw8bU0gx0ZWvoAR0FlcO A7GW8AxZ68wo64AKeicsI9YVmT8aXHvB734IR7S0EaWl/DG3BsumPgtW9WzSWBUR 1CxpoDbeITT1K6RORhUxelBRWdKd4NcPVycsRArsdYkJ4oLYTcplW6Z+s+8lHmrK 5IR0pgsLJ4A8hXlBfvr+kijBzOmrc8fFD2TMX1pTI6jLxLbt/Cpue3VLOG6Lbbyn ZM74WAv+0mCL5qJtJbnNoLFBc31MXjQ= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:33 2026 by rpki-client