$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa File: 63a799f7-620c-3e6d-a174-e979e3a9bd06.roa (raw, json) Hash identifier: FNsbTM45iYBEXXfxmxtWFip459lMo4eCN2TOXT7RydI= Subject key identifier: 3D:6A:BD:39:59:45:7B:FA:C4:AD:66:81:86:34:51:79:CE:6C:38:2C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C48715E2258311976194CCFA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 35.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:5e:22:58:31:19:76:19:4c:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=6676dba4-94d9-4988-8c41-51513de37e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:be:90:6e:13:07:28:2d:ef:15:b7:f0:02:d2: 11:dd:f4:04:5c:f8:b5:f2:bb:21:1c:e2:38:41:74: e8:02:bb:de:ce:9b:24:03:3c:f8:57:b4:f4:24:f8: 5e:b3:b6:fd:e1:0b:7b:47:eb:a4:f1:86:ef:db:85: cb:d1:84:d5:73:23:f3:62:43:4a:f4:e7:a7:85:3b: 8a:4a:59:4b:8e:29:21:d8:6b:a4:26:da:77:44:3f: 4c:57:1d:2e:f2:92:e1:1d:17:f1:f9:fa:f2:8e:0f: 65:12:33:d9:89:8d:b9:b6:fa:41:14:41:7b:b2:72: 01:87:15:4a:d1:bb:6d:41:b3:48:dc:c0:42:89:3d: d2:c8:da:b1:db:51:f7:70:70:aa:2f:3e:3e:99:fc: a6:75:db:48:41:ed:4f:f5:9c:06:3c:72:19:e6:f7: 0b:dc:98:14:66:57:7c:bb:da:d1:bc:9d:75:45:2e: d8:6b:d5:75:5f:f9:74:a7:bb:57:09:95:fa:a4:3b: 22:da:cc:f3:e8:63:e1:93:e1:48:92:4f:aa:83:2f: 7d:0a:91:4b:11:12:90:56:c9:e3:43:4b:85:4f:34: 88:14:58:1c:cf:e3:9a:77:ac:e5:6f:1d:32:be:d7: cb:13:47:36:0f:47:01:2c:9a:a4:e6:39:59:c6:b4: 9c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:BD:39:59:45:7B:FA:C4:AD:66:81:86:34:51:79:CE:6C:38:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b0:9a:7f:cc:80:27:73:1f:84:49:81:49:6e:24:10:51:82: 3b:e8:80:82:60:d0:57:26:e6:05:b3:3b:99:e4:c5:73:50:46: f7:94:b8:55:9c:62:73:3b:92:bf:b9:11:0c:d9:d1:aa:4e:e7: 8f:24:68:40:ae:84:e4:d6:8a:d8:06:8f:28:69:a5:4c:f5:d7: 93:db:70:ca:1f:de:e1:77:b8:40:58:ce:4c:ef:32:93:db:fb: a1:25:8f:88:97:eb:46:c8:8f:57:75:b5:51:fd:d8:59:bc:1b: 05:2d:22:6b:80:c2:08:d0:07:f5:7e:2a:e4:e4:d6:21:52:35: dc:a3:fe:7e:75:72:d2:6f:6b:ee:ad:71:4f:f5:ef:69:2f:f4: 0e:f1:0b:a9:a6:54:61:bd:a7:ee:88:83:a6:3a:ec:3e:42:9a: 17:ec:4a:77:e5:46:07:b4:42:a3:9f:32:db:67:3c:e1:6b:c6: 9f:cd:b6:63:bc:bf:2f:c4:6c:81:c5:3d:ed:81:e8:37:81:c3: 63:8c:1f:12:d7:29:e9:eb:55:e9:cb:ca:f5:81:8f:5f:34:95: 94:cd:f6:80:c8:0f:4e:ad:52:e7:9b:61:c0:a3:83:43:59:90: 15:96:c8:0b:6d:b2:b6:d2:ea:f4:97:47:cf:92:3f:33:97:cb: e0:38:fe:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcV4iWDEZdhlMz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NjY3NmRiYTQtOTRkOS00OTg4LThjNDEtNTE1MTNkZTM3ZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr6QbhMHKC3vFbfwAtIR3fQEXPi18rshHOI4 QXToArvezpskAzz4V7T0JPhes7b94Qt7R+uk8Ybv24XL0YTVcyPzYkNK9OenhTuK SllLjikh2GukJtp3RD9MVx0u8pLhHRfx+fryjg9lEjPZiY25tvpBFEF7snIBhxVK 0bttQbNI3MBCiT3SyNqx21H3cHCqLz4+mfymddtIQe1P9ZwGPHIZ5vcL3JgUZld8 u9rRvJ11RS7Ya9V1X/l0p7tXCZX6pDsi2szz6GPhk+FIkk+qgy99CpFLERKQVsnj Q0uFTzSIFFgcz+Oad6zlbx0yvtfLE0c2D0cBLJqk5jlZxrScswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1qvTlZRXv6xK1mgYY0UXnObDgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjNhNzk5ZjctNjIwYy0z ZTZkLWExNzQtZTk3OWUzYTliZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOwmn/MgCdzH4RJgUluJBBRgjvogIJg0Fcm5gWzO5nkxXNQRveUuFWc YnM7kr+5EQzZ0apO548kaECuhOTWitgGjyhppUz115PbcMof3uF3uEBYzkzvMpPb +6Elj4iX60bIj1d1tVH92Fm8GwUtImuAwgjQB/V+KuTk1iFSNdyj/n51ctJva+6t cU/172kv9A7xC6mmVGG9p+6Ig6Y67D5CmhfsSnflRge0QqOfMttnPOFrxp/NtmO8 vy/EbIHFPe2B6DeBw2OMHxLXKenrVenLyvWBj180lZTN9oDID06tUuebYcCjg0NZ kBWWyAttsrbS6vSXR8+SPzOXy+A4/lU= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:15 2026 by rpki-client