$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4372f537-686f-34dd-9cd2-0f0c47a0fc49.roa File: 4372f537-686f-34dd-9cd2-0f0c47a0fc49.roa (raw, json) Hash identifier: BjjBY0g9aPu8+G+fOFMyKiiBu4vkTQrzL5l1OkJtP6Q= Subject key identifier: 24:22:71:67:6C:F9:2D:5C:6D:E3:D0:49:51:C5:25:12:66:88:95:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA787B3143969781C614B66C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4372f537-686f-34dd-9cd2-0f0c47a0fc49.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 35.217.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:b3:14:39:69:78:1c:61:4b:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8a405e56-d3f8-4f65-be50-7ed6a5f50210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ed:9c:46:30:b1:9f:5b:11:34:9d:ea:5b:f3: f3:68:7e:b5:da:f0:d2:fd:e9:ff:a1:16:0a:ab:01: 92:fa:c1:93:d5:b8:55:5e:83:ed:15:4c:da:0f:84: 4a:6b:53:46:2a:51:f0:bf:07:ad:e7:7d:ef:3a:9a: 3f:1e:00:f7:7f:33:ee:92:a2:cb:35:e0:81:80:10: 7d:19:60:f9:34:8e:9e:dd:aa:8c:a0:a9:f9:c0:b7: fe:57:27:75:a2:d8:da:68:ab:74:32:22:12:68:11: c7:d7:fa:55:19:75:8b:f6:9b:2a:8b:bf:c0:1d:aa: 0e:56:ec:18:f5:17:6a:fa:0b:f1:ba:6d:b0:40:44: 12:ce:c4:94:03:b7:0f:82:bb:a3:a9:de:8f:d7:57: c9:2b:ad:d5:7d:33:10:ca:20:0c:06:56:90:1f:5e: 3d:6c:b0:59:54:5d:92:cd:93:56:25:cd:4c:ee:31: 3c:2d:9d:cd:ca:d5:29:a4:47:30:7a:a1:0b:89:e3: 4d:25:c0:55:44:2a:cf:5b:5b:93:ed:c6:e6:40:43: ae:b8:c0:d9:00:e8:60:61:67:6d:f9:1f:f8:2d:18: 27:88:0c:ca:20:76:ae:43:c3:13:73:06:4a:6d:41: f3:f2:a7:ee:8d:8e:c8:65:72:de:08:03:bf:9f:a9: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:22:71:67:6C:F9:2D:5C:6D:E3:D0:49:51:C5:25:12:66:88:95:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4372f537-686f-34dd-9cd2-0f0c47a0fc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:31:4b:7c:83:93:fd:61:32:f2:03:42:94:be:9e:3b:ea:c3: 21:06:e8:bd:91:6a:a3:97:d8:92:5d:d6:49:d0:da:93:fe:bc: ff:c1:b7:f0:33:2c:a7:8a:e7:8d:3d:d2:73:6a:67:b7:5b:94: 0e:7c:56:1f:33:02:ce:83:1f:f0:05:d8:86:db:65:81:37:69: f1:61:5a:b8:eb:02:7a:1e:f9:8b:a4:a0:de:d7:b7:6f:9c:38: 48:18:bd:08:c9:04:01:e6:a5:18:ea:fa:8a:f2:6a:d9:84:63: 69:5a:53:9b:02:e1:8f:76:f2:44:76:88:20:30:0e:c4:84:a3: b3:69:f1:b9:f3:4e:f0:15:22:8a:de:da:b6:33:da:69:e9:ed: 92:40:17:ad:d9:3d:ed:00:ae:fd:45:40:1d:3d:08:12:16:18: 65:7c:ed:e0:07:e6:4d:6b:24:6b:6e:af:30:c8:8e:e2:83:65: 8e:b9:aa:d4:35:93:e7:63:39:c7:10:03:b6:2b:ea:27:27:62: 9c:a2:60:e9:19:89:17:f7:45:e7:ac:c5:a5:6d:29:e7:b5:d0: 41:72:b0:df:c1:3e:cf:de:ab:d6:54:b3:fc:25:e4:1e:3e:22: 2d:cb:8d:b0:29:6c:68:ac:2f:e1:e9:eb:58:da:a4:4a:5b:e8: e6:04:82:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7MUOWl4HGFLZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGE0MDVlNTYtZDNmOC00ZjY1LWJlNTAtN2VkNmE1ZjUwMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe2cRjCxn1sRNJ3qW/PzaH612vDS/en/oRYK qwGS+sGT1bhVXoPtFUzaD4RKa1NGKlHwvwet533vOpo/HgD3fzPukqLLNeCBgBB9 GWD5NI6e3aqMoKn5wLf+Vyd1otjaaKt0MiISaBHH1/pVGXWL9psqi7/AHaoOVuwY 9Rdq+gvxum2wQEQSzsSUA7cPgrujqd6P11fJK63VfTMQyiAMBlaQH149bLBZVF2S zZNWJc1M7jE8LZ3NytUppEcweqELieNNJcBVRCrPW1uT7cbmQEOuuMDZAOhgYWdt +R/4LRgniAzKIHauQ8MTcwZKbUHz8qfujY7IZXLeCAO/n6msMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQicWds+S1cbePQSVHFJRJmiJVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM3MmY1MzctNjg2Zi0z NGRkLTljZDItMGYwYzQ3YTBmYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEExS3yDk/1hMvIDQpS+njvqwyEG6L2RaqOX2JJd1knQ2pP+vP/Bt/Az LKeK54090nNqZ7dblA58Vh8zAs6DH/AF2IbbZYE3afFhWrjrAnoe+YukoN7Xt2+c OEgYvQjJBAHmpRjq+oryatmEY2laU5sC4Y928kR2iCAwDsSEo7Np8bnzTvAVIore 2rYz2mnp7ZJAF63ZPe0Arv1FQB09CBIWGGV87eAH5k1rJGturzDIjuKDZY65qtQ1 k+djOccQA7Yr6icnYpyiYOkZiRf3ReesxaVtKee10EFysN/BPs/eq9ZUs/wl5B4+ Ii3LjbApbGisL+Hp61japEpb6OYEgrU= -----END CERTIFICATE-----Generated at Wed Jul 29 15:24:42 2026 by rpki-client