$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43436c02-0337-37f3-bf92-d102a1abb24e.roa File: 43436c02-0337-37f3-bf92-d102a1abb24e.roa (raw, json) Hash identifier: J8WILjtqbB9ZRShsN3gyjkuYaZ+z8Rj3cJp4qMiNTgw= Subject key identifier: F7:DD:17:72:C8:5D:F9:9C:FC:FC:1E:83:9F:91:35:1D:2C:E4:CE:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E0865F105C304394568C2B100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43436c02-0337-37f3-bf92-d102a1abb24e.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.234.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:f1:05:c3:04:39:45:68:c2:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=ed7ed4e5-2854-4324-a31d-a51f3f7c0be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:4d:8e:5b:d3:05:7d:a8:d7:44:12:7c:a0: 96:c7:02:93:f7:72:b6:5a:7c:0b:51:d8:5c:40:a4: 0b:23:48:21:b3:85:93:3d:ed:75:50:fa:50:43:d5: c3:77:f4:a3:65:7b:6d:f2:7a:69:e5:85:91:70:b3: e3:51:1a:5a:3f:7a:14:c9:2a:52:83:05:3e:1c:64: 9e:f1:06:e2:35:93:7d:82:59:28:52:32:7c:41:9a: f4:03:6e:1c:c7:fd:78:8d:05:93:9d:e0:62:2a:e0: ff:ad:60:df:cb:c0:ae:14:d2:bb:50:51:f5:c2:2b: d5:c9:79:8c:33:56:f2:b2:e4:19:6a:1f:4d:cc:41: 53:45:bf:5c:de:35:bc:bd:36:4e:eb:6f:d2:d8:da: 6b:e4:a3:42:43:44:26:5f:9d:96:ac:1f:00:9f:1e: b5:9d:0d:25:01:ec:ab:65:55:02:ff:96:5f:ac:8b: 17:e5:03:45:3c:de:fe:c5:21:b0:49:8b:46:bd:38: e0:9d:fc:7e:43:24:84:ca:ae:1d:6d:e1:97:98:de: 5a:1c:5a:d0:8a:b9:32:51:0e:ad:68:29:44:28:c1: 88:d3:cb:83:d7:4a:7b:9d:a5:3d:64:8b:72:c9:c6: ae:e8:57:fd:b2:5f:cd:fd:67:e3:f0:e2:50:5e:7e: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:17:72:C8:5D:F9:9C:FC:FC:1E:83:9F:91:35:1D:2C:E4:CE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43436c02-0337-37f3-bf92-d102a1abb24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.234.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f1:47:dd:2f:bd:e5:7d:6c:20:2e:2c:05:f2:f2:43:95:7c: d9:1d:e4:24:7d:91:87:72:b8:90:2a:5a:34:62:9e:16:d9:16: a3:27:23:49:67:5f:b6:55:5e:1f:5d:f8:f2:24:ca:fd:c2:f6: 02:0e:05:63:80:31:33:0a:86:80:d8:a1:10:4f:ef:75:e1:82: 1b:87:5f:53:ca:e2:6e:f2:6a:bb:3d:30:c0:77:12:d5:98:be: 18:0f:4b:02:35:06:f8:6a:d6:23:20:b9:2d:8b:2b:27:5f:3c: cd:9e:4b:99:58:39:1e:77:09:57:92:5d:b4:42:29:22:7e:3e: 27:e3:ad:13:25:3d:89:5c:a6:90:60:9b:89:08:8c:95:54:1a: 28:a4:e0:24:cf:68:ea:aa:b8:b5:f0:62:ae:85:a2:b9:c0:17: 1b:0c:60:a9:5c:08:92:ba:98:e6:9f:44:02:7a:07:6f:9d:eb: d8:cb:c9:25:d3:bf:1a:d6:55:1d:f3:ff:b7:c8:78:fd:c8:e8: 19:83:5f:65:a8:fe:8e:0b:61:9f:8e:97:eb:3c:54:a0:3c:63: b6:6e:16:54:08:cf:b6:9f:91:d2:5e:0f:cf:28:c8:b0:fe:6d: 77:77:70:58:e8:88:7e:9e:80:da:b1:fa:76:62:06:eb:28:33: 5a:f8:e9:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZfEFwwQ5RWjCsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZWQ3ZWQ0ZTUtMjg1NC00MzI0LWEzMWQtYTUxZjNmN2MwYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWRNjlvTBX2o10QSfKCWxwKT93K2WnwLUdhc QKQLI0ghs4WTPe11UPpQQ9XDd/SjZXtt8npp5YWRcLPjURpaP3oUySpSgwU+HGSe 8QbiNZN9glkoUjJ8QZr0A24cx/14jQWTneBiKuD/rWDfy8CuFNK7UFH1wivVyXmM M1bysuQZah9NzEFTRb9c3jW8vTZO62/S2Npr5KNCQ0QmX52WrB8Anx61nQ0lAeyr ZVUC/5ZfrIsX5QNFPN7+xSGwSYtGvTjgnfx+QySEyq4dbeGXmN5aHFrQirkyUQ6t aClEKMGI08uD10p7naU9ZItyycau6Ff9sl/N/Wfj8OJQXn7znwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfdF3LIXfmc/Pweg5+RNR0s5M6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM0MzZjMDItMDMzNy0z N2YzLWJmOTItZDEwMmExYWJiMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+rAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbxR90vveV9bCAuLAXy8kOVfNkd5CR9kYdyuJAqWjRinhbZFqMnI0ln X7ZVXh9d+PIkyv3C9gIOBWOAMTMKhoDYoRBP73XhghuHX1PK4m7yars9MMB3EtWY vhgPSwI1Bvhq1iMguS2LKydfPM2eS5lYOR53CVeSXbRCKSJ+PifjrRMlPYlcppBg m4kIjJVUGiik4CTPaOqquLXwYq6FornAFxsMYKlcCJK6mOafRAJ6B2+d69jLySXT vxrWVR3z/7fIeP3I6BmDX2Wo/o4LYZ+Ol+s8VKA8Y7ZuFlQIz7afkdJeD88oyLD+ bXd3cFjoiH6egNqx+nZiBusoM1r46WY= -----END CERTIFICATE-----Generated at Sun Jun 14 00:32:07 2026 by rpki-client