$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de5c2941-312a-3131-af3e-33a86372cfd9.roa File: de5c2941-312a-3131-af3e-33a86372cfd9.roa (raw, json) Hash identifier: 6mBeil5+82gieZaq8p29RwP060WnqLv0mzLYcJY6mUQ= Subject key identifier: 10:5A:91:01:3D:CE:D4:AA:1B:A5:59:79:11:91:23:A7:E2:9C:46:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA6A8F4D4F884891309B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de5c2941-312a-3131-af3e-33a86372cfd9.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 35.203.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6a:8f:4d:4f:88:48:91:30:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=23bb1c8a-e390-4cb0-a7cc-84fb03e3254a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:6b:ae:5c:83:a7:e6:43:0e:f0:be:a6:de: 84:26:e9:08:95:96:b4:f9:ed:07:55:42:2f:77:8f: ef:04:0d:6d:b0:db:53:8c:c2:a0:8e:30:ec:ab:bb: 18:a9:8a:e0:50:30:35:bf:4e:ba:8f:34:6a:70:49: 1d:02:08:23:9c:75:37:83:19:16:97:a5:fd:67:13: 14:06:7b:d5:9a:d9:9d:b1:64:70:52:da:36:2d:fb: b4:28:6b:a7:61:ac:d8:9c:41:79:24:48:54:cf:41: bb:5f:be:bb:a5:fe:cc:3c:6f:c5:69:c7:40:d0:db: 04:9a:06:d2:45:5d:26:72:47:25:90:96:0e:50:a9: d5:fa:be:10:58:bb:3a:4b:7e:2f:5f:e1:b6:97:a4: 47:0c:8c:a9:38:1e:ec:7c:99:ac:0e:fe:73:41:e3: ca:06:8b:d2:fb:2e:67:31:a1:eb:41:d3:7c:6e:7f: 60:1d:e8:56:73:cf:eb:10:60:f8:fe:fe:f2:24:62: 4e:c8:ea:79:fc:62:7d:72:e8:96:15:88:7f:e2:24: 6e:b7:0f:f7:d3:a7:9c:ae:78:d2:2f:37:53:0e:f0: 47:56:08:cb:3e:a6:cc:73:1c:9b:c5:7a:f2:c8:c6: 66:3c:07:c1:bd:5a:4e:15:6e:50:6f:4b:6f:25:5a: 3a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5A:91:01:3D:CE:D4:AA:1B:A5:59:79:11:91:23:A7:E2:9C:46:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de5c2941-312a-3131-af3e-33a86372cfd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:de:87:4b:45:bb:c8:52:12:81:94:55:a3:1a:c1:9a:7f:3c: 28:76:9f:4f:18:c9:b6:79:98:c1:01:63:04:e0:bb:a2:ad:80: fc:d3:97:c8:1e:72:99:43:22:21:bc:b5:10:97:87:ea:91:02: cd:6b:a2:1d:68:b8:7a:3d:a0:27:90:81:29:71:2e:36:ad:44: 2a:e9:6a:75:f7:3f:92:bf:9b:d5:da:d1:49:08:b0:d6:64:d3: 8e:73:63:1f:b1:43:a1:2c:4b:d0:48:fa:f7:b9:13:25:7d:25: be:cb:18:52:b0:d3:89:9d:e1:a6:64:fb:3d:57:21:64:a8:92: 26:af:68:eb:08:be:35:ad:42:94:6d:e9:89:d8:db:3d:33:7a: 12:3f:e2:86:b9:0c:c0:d2:3c:23:01:89:27:45:79:f2:d9:0b: 4e:bf:08:12:ad:36:f6:6b:ad:c2:45:c3:2d:7c:c2:7f:fa:a0: 9e:e1:2d:6c:7b:80:2f:25:ae:c2:59:ca:39:b9:7e:1c:d2:ba: 21:b2:14:f3:9f:1e:5b:10:70:49:a3:dc:1c:5c:a6:c0:10:14: 27:d6:2e:4a:0a:51:b9:c1:59:9e:76:b2:76:d4:5b:13:63:bf: b0:9f:81:d1:99:3f:19:29:a3:ae:96:82:a7:2c:08:15:19:b7: 75:9e:7f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmqPTU+ISJEwm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjNiYjFjOGEtZTM5MC00Y2IwLWE3Y2MtODRmYjAzZTMyNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirxrrlyDp+ZDDvC+pt6EJukIlZa0+e0HVUIv d4/vBA1tsNtTjMKgjjDsq7sYqYrgUDA1v066jzRqcEkdAggjnHU3gxkWl6X9ZxMU BnvVmtmdsWRwUto2Lfu0KGunYazYnEF5JEhUz0G7X767pf7MPG/FacdA0NsEmgbS RV0mckclkJYOUKnV+r4QWLs6S34vX+G2l6RHDIypOB7sfJmsDv5zQePKBovS+y5n MaHrQdN8bn9gHehWc8/rEGD4/v7yJGJOyOp5/GJ9cuiWFYh/4iRutw/306ecrnjS LzdTDvBHVgjLPqbMcxybxXryyMZmPAfBvVpOFW5Qb0tvJVo6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBakQE9ztSqG6VZeRGRI6finEYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU1YzI5NDEtMzEyYS0z MTMxLWFmM2UtMzNhODYzNzJjZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDeh0tFu8hSEoGUVaMawZp/PCh2n08YybZ5mMEBYwTgu6KtgPzTl8ge cplDIiG8tRCXh+qRAs1roh1ouHo9oCeQgSlxLjatRCrpanX3P5K/m9Xa0UkIsNZk 045zYx+xQ6EsS9BI+ve5EyV9Jb7LGFKw04md4aZk+z1XIWSokiavaOsIvjWtQpRt 6YnY2z0zehI/4oa5DMDSPCMBiSdFefLZC06/CBKtNvZrrcJFwy18wn/6oJ7hLWx7 gC8lrsJZyjm5fhzSuiGyFPOfHlsQcEmj3BxcpsAQFCfWLkoKUbnBWZ52snbUWxNj v7CfgdGZPxkpo66WgqcsCBUZt3Wef3M= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:29 2026 by rpki-client