$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa File: 43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa (raw, json) Hash identifier: Gg3S+TU2QmT7F24tUjDXfG/Shyh3yb0S2KoBwVS2pFQ= Subject key identifier: 32:6F:6E:AC:E2:0F:3B:68:F4:59:F7:29:D4:6E:CB:16:B9:6D:69:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E0865EF8AC9617C24554F5940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.239.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:ef:8a:c9:61:7c:24:55:4f:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=860d40f3-daf1-4311-b4b7-9b9963bf75f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:00:35:be:65:5e:89:28:8a:c4:bb:5d:f1: 79:64:6c:0d:24:9d:e9:85:45:86:ff:c4:6a:02:98: a4:ba:ce:49:42:b2:b8:ef:aa:91:40:11:25:70:36: 07:56:f7:6a:51:6d:7e:9e:e2:05:49:ed:f1:08:1e: bb:2c:8a:f2:f5:3f:f6:ea:7e:6e:29:69:49:88:85: 3f:81:e2:c1:12:53:57:f7:8a:e3:47:23:c3:69:e7: ba:e2:51:3a:55:95:fb:26:97:3e:b8:3a:7f:00:d6: d8:4c:7d:66:96:92:3b:c0:bd:d4:aa:5d:a9:fa:02: e5:5d:2b:0b:a6:02:78:a8:cd:a2:bc:c5:13:42:dd: 3f:34:09:fa:5f:09:3e:e0:33:d9:00:09:cb:4b:55: be:af:9b:40:d3:23:c7:6c:ce:3e:db:35:5a:ed:44: 75:9c:53:09:9b:95:65:3c:56:28:be:e9:c0:c2:ef: 2a:d3:c5:0b:ff:01:a3:39:bf:9c:d1:2a:bc:2e:ed: 6f:9c:3d:d8:93:f7:58:86:10:dc:5c:9a:0f:68:14: fe:61:b8:63:16:b5:d3:90:00:29:4c:bd:7f:52:95: 27:04:3a:91:6a:40:c2:23:f0:f5:61:88:a0:14:0d: 4b:ff:54:d5:ce:19:ad:58:d1:8b:48:9c:74:85:4d: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6F:6E:AC:E2:0F:3B:68:F4:59:F7:29:D4:6E:CB:16:B9:6D:69:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8b:bf:90:2a:d3:96:37:d1:3b:c3:2f:4e:ef:10:ac:17:0e: 21:84:1a:f2:19:92:25:6d:e1:39:89:08:21:2a:f5:69:a2:21: 07:5c:71:c5:81:7e:68:ac:27:d3:65:29:46:f2:f6:26:c1:10: 31:58:fa:28:24:57:75:8c:f9:da:0f:1e:04:bf:d0:cc:74:d1: 92:12:f6:6c:7d:59:f7:3d:94:59:a8:6e:fb:a5:59:a0:b5:ad: 14:99:a3:59:b8:85:97:88:47:b1:62:f0:6b:20:78:dc:da:51: a3:b6:cd:77:1d:26:9c:3c:3f:17:b5:e0:2f:03:0c:47:0f:7d: f5:01:77:83:c3:96:5a:76:24:a3:0b:b0:98:23:35:f5:67:69: fd:7e:85:0e:2c:52:48:e7:c4:ee:25:d6:e8:e8:2f:cb:be:2f: 2c:7f:f2:1c:34:34:0e:6b:f6:dc:88:ac:6f:c0:f7:eb:f7:7c: a4:00:11:67:80:18:f1:e6:ee:6b:05:de:dc:f5:5e:8a:db:21: 59:6e:36:dd:0f:69:62:fa:f3:5c:8d:98:60:3e:23:cc:c0:ee: 5e:89:0d:70:b7:40:c9:29:22:8e:4f:0e:0a:bd:10:30:c3:1f: 81:c5:4b:e0:90:86:f5:6c:de:47:59:0a:6c:5f:37:99:24:6d: 21:a2:e7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZe+KyWF8JFVPWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ODYwZDQwZjMtZGFmMS00MzExLWI0YjctOWI5OTYzYmY3NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmkANb5lXokoisS7XfF5ZGwNJJ3phUWG/8Rq Apikus5JQrK476qRQBElcDYHVvdqUW1+nuIFSe3xCB67LIry9T/26n5uKWlJiIU/ geLBElNX94rjRyPDaee64lE6VZX7Jpc+uDp/ANbYTH1mlpI7wL3Uql2p+gLlXSsL pgJ4qM2ivMUTQt0/NAn6Xwk+4DPZAAnLS1W+r5tA0yPHbM4+2zVa7UR1nFMJm5Vl PFYovunAwu8q08UL/wGjOb+c0Sq8Lu1vnD3Yk/dYhhDcXJoPaBT+YbhjFrXTkAAp TL1/UpUnBDqRakDCI/D1YYigFA1L/1TVzhmtWNGLSJx0hU32aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJvbqziDzto9Fn3KdRuyxa5bWmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDNhNDllZTMtOGFhNC0z M2JjLThkNTItZDgwMWU1ZjBhMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2Lv5Aq05Y30TvDL07vEKwXDiGEGvIZkiVt4TmJCCEq9WmiIQdcccWB fmisJ9NlKUby9ibBEDFY+igkV3WM+doPHgS/0Mx00ZIS9mx9Wfc9lFmobvulWaC1 rRSZo1m4hZeIR7Fi8GsgeNzaUaO2zXcdJpw8Pxe14C8DDEcPffUBd4PDllp2JKML sJgjNfVnaf1+hQ4sUkjnxO4l1ujoL8u+Lyx/8hw0NA5r9tyIrG/A9+v3fKQAEWeA GPHm7msF3tz1XorbIVluNt0PaWL681yNmGA+I8zA7l6JDXC3QMkpIo5PDgq9EDDD H4HFS+CQhvVs3kdZCmxfN5kkbSGi53U= -----END CERTIFICATE-----Generated at Sat Jun 13 23:37:16 2026 by rpki-client