$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa File: 2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa (raw, json) Hash identifier: fNkBhIOrLep9NNswdLcEtUpwMrV0rNZlUzdctGW5KWc= Subject key identifier: 6E:9B:F6:63:F1:B1:20:E0:9A:0E:3A:89:09:B2:3D:04:5E:AB:B9:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E086602DBD83B45A05639C140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.204.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:02:db:d8:3b:45:a0:56:39:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=28c5eaa6-441c-44f1-b7a0-1daab7e8a471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:18:f7:ed:48:b8:45:aa:1c:3c:c0:b7:b6:e0: aa:1d:5a:7d:17:d5:b0:10:1b:38:2e:a7:0e:fb:0b: 77:d5:2a:27:3b:d6:47:4b:d7:39:98:46:d2:34:5d: 09:68:07:7a:a0:c0:91:bf:1d:dd:d3:6c:c3:98:d4: e0:3f:2d:d4:2d:16:dd:a7:8a:1d:58:fd:07:32:73: 24:9d:71:57:74:a4:d2:4c:7e:e4:78:82:ee:0d:09: f4:4e:b1:cc:69:33:fe:93:07:0c:b7:60:c5:f8:e7: e6:b3:32:34:6c:9c:bd:40:c6:9b:1b:92:6a:80:32: ad:42:a9:d5:90:33:79:9b:68:e4:61:1d:d3:33:b2: e9:08:44:ac:8e:2e:e4:1a:56:de:fa:06:7a:fd:79: 09:24:dc:4d:15:f3:dc:1f:8f:a1:11:61:f3:c4:13: aa:e2:42:c9:e1:2d:de:6d:cc:93:11:d7:01:29:b7: d6:99:dd:7a:9b:47:2c:d5:84:aa:84:c3:d5:5f:c9: f5:c2:17:18:45:73:0f:d1:d3:ca:09:b7:34:19:7d: 8b:67:af:f2:16:a0:5f:43:43:20:58:9e:71:51:e6: 39:ad:2a:65:52:15:a9:44:49:9a:c5:49:cd:e9:e9: 33:de:24:69:c9:6e:99:2f:c6:ac:6c:25:67:ab:b2: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9B:F6:63:F1:B1:20:E0:9A:0E:3A:89:09:B2:3D:04:5E:AB:B9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:56:51:94:f7:4c:4f:19:f2:95:7f:c3:9b:52:08:9d:66:e9: e9:24:cc:22:65:ae:b9:84:68:db:6b:db:51:70:c6:a1:da:f8: 4d:c0:e4:34:a6:90:c2:56:6e:0c:30:d7:99:12:bd:40:59:6a: 2d:74:33:bc:6a:73:d8:ba:36:bb:6b:dd:a3:2d:cc:c9:c8:12: f8:97:d1:a5:e4:ae:f4:b1:40:df:2a:fc:f9:ee:04:26:57:e5: a0:02:13:9c:a0:5f:ef:93:f9:dd:ad:f3:d1:c9:7f:21:93:3a: cf:1b:bc:95:63:d7:03:b1:8a:46:b0:16:47:a9:6a:0f:d1:14: d6:6e:08:f2:62:c1:c0:72:58:29:c2:31:ed:7c:a5:c4:bb:9b: 5a:b0:32:25:68:1c:50:65:4d:f7:2b:2e:80:da:c7:de:fc:a2: eb:41:ac:95:fd:b7:19:a6:82:c9:08:33:c9:15:17:19:c3:54: 10:9c:05:7b:72:13:ce:ee:70:9d:c1:d7:21:2e:3d:b5:87:b2: 4f:d0:b8:53:9e:ff:22:2b:b6:85:b5:7b:6f:b8:0b:1e:99:9b: 43:9c:aa:d6:36:d8:ab:29:e1:0f:39:88:22:96:b8:1e:66:28: da:83:34:a8:3c:63:e8:a0:a8:f8:54:4c:e5:4a:3b:81:39:da: 6d:5c:ee:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZgLb2DtFoFY5wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MjhjNWVhYTYtNDQxYy00NGYxLWI3YTAtMWRhYWI3ZThhNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRj37Ui4RaocPMC3tuCqHVp9F9WwEBs4LqcO +wt31SonO9ZHS9c5mEbSNF0JaAd6oMCRvx3d02zDmNTgPy3ULRbdp4odWP0HMnMk nXFXdKTSTH7keILuDQn0TrHMaTP+kwcMt2DF+OfmszI0bJy9QMabG5JqgDKtQqnV kDN5m2jkYR3TM7LpCESsji7kGlbe+gZ6/XkJJNxNFfPcH4+hEWHzxBOq4kLJ4S3e bcyTEdcBKbfWmd16m0cs1YSqhMPVX8n1whcYRXMP0dPKCbc0GX2LZ6/yFqBfQ0Mg WJ5xUeY5rSplUhWpREmaxUnN6ekz3iRpyW6ZL8asbCVnq7I4iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6b9mPxsSDgmg46iQmyPQReq7miMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmMzYjlkMDgtMWYyZi0z NDQ0LTkyZmItYmNjZDFlNzZlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFWUZT3TE8Z8pV/w5tSCJ1m6ekkzCJlrrmEaNtr21FwxqHa+E3A5DSm kMJWbgww15kSvUBZai10M7xqc9i6Nrtr3aMtzMnIEviX0aXkrvSxQN8q/PnuBCZX 5aACE5ygX++T+d2t89HJfyGTOs8bvJVj1wOxikawFkepag/RFNZuCPJiwcByWCnC Me18pcS7m1qwMiVoHFBlTfcrLoDax978outBrJX9txmmgskIM8kVFxnDVBCcBXty E87ucJ3B1yEuPbWHsk/QuFOe/yIrtoW1e2+4Cx6Zm0OcqtY22Ksp4Q85iCKWuB5m KNqDNKg8Y+igqPhUTOVKO4E52m1c7kc= -----END CERTIFICATE-----Generated at Sat Jun 13 19:16:20 2026 by rpki-client