$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa File: f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa (raw, json) Hash identifier: cNfLDZe9mKJXcza9DsoNe398zVxkVAH7J+Pxquh4gi8= Subject key identifier: B8:31:F5:9F:E3:EE:43:F8:F6:36:5F:D8:9B:C1:5A:B9:95:F4:A7:28 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4871BE7118C42FE4C2977250 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 35.236.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:be:71:18:c4:2f:e4:c2:97:72:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=dec5c4c1-63ba-41a0-a1f8-e97a28690e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:ce:61:7e:f6:05:66:49:db:ad:f6:6f:ca: fc:9a:95:00:ef:d0:fc:e3:1d:17:94:95:8c:35:ce: 69:d9:bc:d4:8b:2f:6f:8e:85:5a:38:41:5f:ab:e1: 0e:d4:c7:62:6b:57:e2:94:46:7a:20:10:15:5f:6f: 9a:4c:63:0f:36:3a:a6:58:28:b9:8f:12:85:ca:2f: 17:23:aa:8a:4a:91:f6:37:6e:b7:9d:b4:fc:81:f6: 3f:59:6f:3c:d6:94:d4:2f:86:73:59:5f:45:1b:03: e2:2a:67:ef:14:3e:3b:46:c5:ab:bd:63:d3:7b:00: 51:e8:e1:30:b1:84:1d:06:3f:ae:08:d5:a8:3e:dc: 30:2f:37:36:f1:37:9d:74:f8:a1:5c:80:df:75:36: 71:ff:61:ef:7d:07:a1:07:4c:a5:0d:b6:fe:1d:7b: 73:15:ae:f8:09:d3:1e:e1:bc:74:47:5b:e0:c2:13: ae:3e:f6:e1:e6:53:1e:b2:0e:74:05:d2:52:72:4a: ec:0f:a6:8a:72:1b:2f:18:fc:05:d8:c2:ec:4e:c7: cb:87:d4:fa:3b:83:9f:60:2a:2b:c6:84:b6:5c:ae: 8b:bd:2e:d2:ba:23:a6:bf:08:48:74:ab:47:7b:14: f3:a8:87:06:83:9c:4a:7c:bd:0a:fa:a9:cc:d1:43: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:F5:9F:E3:EE:43:F8:F6:36:5F:D8:9B:C1:5A:B9:95:F4:A7:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a7:45:41:01:96:e2:b8:73:43:2d:a4:98:66:f3:4a:73:ac: 09:55:85:f6:18:06:dc:3e:17:ae:07:5a:8b:95:47:29:36:7e: 74:d7:4c:82:5b:dc:8f:50:91:11:c0:74:20:6b:5d:98:4b:38: db:06:9b:74:d6:88:c3:c8:fa:20:81:3c:89:b8:fa:65:42:c8: 63:96:22:01:c7:7c:cc:77:3b:18:bd:61:6b:21:bf:e8:eb:64: 50:7b:31:74:a3:98:ed:3f:21:9f:65:e9:83:c0:02:ad:49:8d: 32:87:1f:16:ce:18:19:71:1c:0f:46:c5:cc:e0:95:94:e6:00: e6:db:e0:52:9d:a6:00:16:a7:17:b1:d3:d5:89:6d:5d:07:d9: e2:47:2e:b6:53:5a:ea:e2:6c:30:d3:4c:e1:6a:77:01:14:d0: e5:d5:ef:a2:d4:e2:d4:a7:1c:5a:53:f4:56:70:7a:9d:b0:98: 1b:02:22:42:cb:fb:a5:e3:80:3a:21:5e:92:95:da:6a:df:9b: 95:6d:04:36:63:9a:43:24:f5:a7:96:6f:dc:f6:f9:8a:41:67: 82:65:a5:56:0b:c3:b8:24:95:39:e9:3e:5b:fb:85:dc:d7:02: 9d:3b:6c:96:44:66:74:65:34:d8:b4:86:c3:45:2e:5d:ef:4f: 59:17:44:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcb5xGMQv5MKXclAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ZGVjNWM0YzEtNjNiYS00MWEwLWExZjgtZTk3YTI4NjkwZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOvOYX72BWZJ2632b8r8mpUA79D84x0XlJWM Nc5p2bzUiy9vjoVaOEFfq+EO1Mdia1filEZ6IBAVX2+aTGMPNjqmWCi5jxKFyi8X I6qKSpH2N263nbT8gfY/WW881pTUL4ZzWV9FGwPiKmfvFD47RsWrvWPTewBR6OEw sYQdBj+uCNWoPtwwLzc28TeddPihXIDfdTZx/2HvfQehB0ylDbb+HXtzFa74CdMe 4bx0R1vgwhOuPvbh5lMesg50BdJSckrsD6aKchsvGPwF2MLsTsfLh9T6O4OfYCor xoS2XK6LvS7SuiOmvwhIdKtHexTzqIcGg5xKfL0K+qnM0UNOZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgx9Z/j7kP49jZf2JvBWrmV9KcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjE5ZGUwYWMtOGQxYi0z ZDNjLTg4NzgtNmMxMWU3Y2IzOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI+wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABynRUEBluK4c0MtpJhm80pzrAlVhfYYBtw+F64HWouVRyk2fnTXTIJb 3I9QkRHAdCBrXZhLONsGm3TWiMPI+iCBPIm4+mVCyGOWIgHHfMx3Oxi9YWshv+jr ZFB7MXSjmO0/IZ9l6YPAAq1JjTKHHxbOGBlxHA9GxczglZTmAObb4FKdpgAWpxex 09WJbV0H2eJHLrZTWuribDDTTOFqdwEU0OXV76LU4tSnHFpT9FZwep2wmBsCIkLL +6XjgDohXpKV2mrfm5VtBDZjmkMk9aeWb9z2+YpBZ4JlpVYLw7gklTnpPlv7hdzX Ap07bJZEZnRlNNi0hsNFLl3vT1kXRHI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:22 2026 by rpki-client