$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa File: 20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa (raw, json) Hash identifier: O1+WSTU0bpSCJH8R5ZtPzcoSgtKapn46W86E1mPBP9M= Subject key identifier: 56:68:D4:EB:55:B0:20:08:2D:7F:71:A0:B8:C6:0B:09:CB:3D:18:5D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787B895AC10203C21DF9460 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 43515 IP address blocks: 35.216.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:b8:95:ac:10:20:3c:21:df:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=315d23c3-d01d-4624-804a-b747a5b85215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:d6:74:04:50:f5:e5:3e:2a:93:5b:a8:86: 8d:f9:b6:8a:40:41:c3:ad:5e:fa:f8:6a:55:e5:29: f4:0f:26:c9:e8:63:c2:0d:d9:4e:a3:f8:79:d5:f9: 99:e3:20:88:c4:0d:3b:09:a1:d3:f8:7e:69:7a:e4: 16:81:74:e5:22:b6:38:7b:b8:87:97:15:43:d1:7b: f4:0f:41:0d:19:73:a1:cb:49:26:c6:09:aa:9d:0a: f7:ae:31:dd:1d:ef:31:14:17:46:76:d0:fb:00:59: 47:0f:d4:6a:7a:5e:9e:10:81:08:7c:13:40:84:66: 4b:6b:15:8b:ba:9e:d4:cb:f5:7e:58:b0:d6:9f:c7: b6:64:bf:44:a0:af:fc:34:20:27:fe:45:a6:36:1e: bd:7c:85:fc:70:c0:0c:66:88:32:27:70:60:99:f5: f1:b6:38:92:29:02:c4:a5:f7:e4:43:65:4a:d2:92: b4:be:15:50:f5:76:e5:c2:43:43:58:46:89:a2:74: de:c5:a8:48:76:20:b2:00:78:33:9c:66:7c:3e:a4: c1:8e:c1:ed:bc:e9:54:7e:93:97:2b:35:ef:62:ee: 58:d5:9f:26:3f:7d:dd:81:20:8e:9b:8b:f9:bf:1e: 3b:e5:ae:e9:7a:1f:55:f0:01:98:16:cd:cb:1a:42: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:D4:EB:55:B0:20:08:2D:7F:71:A0:B8:C6:0B:09:CB:3D:18:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c5:cb:6f:12:4a:84:e4:62:42:a0:75:02:40:dd:ac:d9:21: 74:85:6b:42:6d:a1:c6:e5:65:24:5d:77:9c:b2:bd:bd:3c:cb: 78:ac:55:ef:2c:4a:6c:ab:44:e1:05:14:16:fd:54:89:b3:b8: 94:71:35:9c:21:2c:7e:40:1e:2f:f3:09:c7:a7:ba:4b:d6:55: 96:e9:01:c9:3f:71:35:cc:0c:5e:63:00:d8:55:16:ae:f0:d1: 64:48:3e:d0:50:c1:b2:01:14:26:64:59:82:1c:a5:12:13:47: 91:ca:02:26:45:05:3b:97:4f:5f:1b:13:2c:8d:12:5a:af:5b: 03:06:8d:93:58:2e:3a:49:5d:b4:d6:f8:45:2a:e7:b1:c7:62: 83:d6:99:bb:d6:e2:ab:1a:4f:cd:75:9e:74:48:d8:7e:ac:bf: c5:e4:3e:b9:19:a6:b1:9b:03:98:9a:f2:16:4b:22:f5:6d:0e: f5:fb:ed:5b:07:96:32:f0:6b:d6:cb:d5:ea:90:93:59:94:ad: 21:cc:09:86:c9:43:68:9d:07:14:e0:f2:a9:37:d3:ca:df:21: 15:fc:c8:7b:8e:be:0f:6b:48:ac:7d:57:0d:cd:37:36:64:a0: 2d:4e:65:3b:0f:76:ee:90:fd:b9:af:b7:ef:c3:a6:95:f9:c3: 52:bc:47:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7iVrBAgPCHflGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzE1ZDIzYzMtZDAxZC00NjI0LTgwNGEtYjc0N2E1Yjg1MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rPWdARQ9eU+KpNbqIaN+baKQEHDrV76+GpV 5Sn0DybJ6GPCDdlOo/h51fmZ4yCIxA07CaHT+H5peuQWgXTlIrY4e7iHlxVD0Xv0 D0ENGXOhy0kmxgmqnQr3rjHdHe8xFBdGdtD7AFlHD9Rqel6eEIEIfBNAhGZLaxWL up7Uy/V+WLDWn8e2ZL9EoK/8NCAn/kWmNh69fIX8cMAMZogyJ3BgmfXxtjiSKQLE pffkQ2VK0pK0vhVQ9XblwkNDWEaJonTexahIdiCyAHgznGZ8PqTBjsHtvOlUfpOX KzXvYu5Y1Z8mP33dgSCOm4v5vx475a7peh9V8AGYFs3LGkKScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZo1OtVsCAILX9xoLjGCwnLPRhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBlNTEyMWUtZDQ1Mi0z ZDEzLTk0ZjktZDExYTRhMGJhOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPFy28SSoTkYkKgdQJA3azZIXSFa0JtocblZSRdd5yyvb08y3isVe8s SmyrROEFFBb9VImzuJRxNZwhLH5AHi/zCcenukvWVZbpAck/cTXMDF5jANhVFq7w 0WRIPtBQwbIBFCZkWYIcpRITR5HKAiZFBTuXT18bEyyNElqvWwMGjZNYLjpJXbTW +EUq57HHYoPWmbvW4qsaT811nnRI2H6sv8XkPrkZprGbA5ia8hZLIvVtDvX77VsH ljLwa9bL1eqQk1mUrSHMCYbJQ2idBxTg8qk308rfIRX8yHuOvg9rSKx9Vw3NNzZk oC1OZTsPdu6Q/bmvt+/DppX5w1K8R5o= -----END CERTIFICATE-----Generated at Wed Jul 29 08:42:42 2026 by rpki-client