$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa File: 49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa (raw, json) Hash identifier: LpuwApJRPOtd72q7iSFLHicLuFkKNBk/ktXnA8SH1J0= Subject key identifier: 92:D4:37:38:8F:89:51:5F:12:AA:09:68:E1:6B:C4:4A:A8:E0:FD:96 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E0866311BE59A3A698D652000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.238.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:31:1b:e5:9a:3a:69:8d:65:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=c5fd4f22-faa0-45a5-8ffa-f99e993e36e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:fa:51:6a:c8:4f:38:c4:a0:3e:08:5c:20: b8:a4:9d:23:18:47:fc:38:df:da:bf:7f:fa:13:38: b3:1f:7b:cb:21:89:8b:3e:11:5d:90:2e:ec:c7:19: 52:d2:20:36:47:29:8e:02:81:66:75:fd:db:3c:b9: 34:f7:2d:51:32:3d:6b:64:44:fe:9f:7a:af:a6:04: 43:2e:58:bc:1b:8a:c1:b5:ea:ba:40:13:5e:8e:38: a1:9b:29:8a:47:8b:1a:68:55:32:e6:76:8a:dd:e0: 78:ec:1b:9a:8c:eb:20:e9:cf:34:df:36:84:2c:52: 18:b2:79:ea:78:cf:3a:5b:f8:e6:e2:d2:ac:ad:0a: 88:24:3e:14:bc:a7:68:57:f3:d0:c2:da:6d:1f:15: 3b:6f:d8:07:69:1d:15:71:63:55:75:bf:b0:02:0c: 24:4e:8b:d8:57:4b:5a:d5:90:7b:e4:a5:18:c8:28: d3:98:bc:d9:33:29:27:05:4a:3e:c9:16:0d:3f:2c: 5f:2c:60:9a:61:fa:8a:ef:de:2e:b7:80:80:5e:23: d8:42:f6:96:6b:35:23:ca:3b:a7:ff:a5:42:3f:7b: 2f:1e:f3:90:89:3f:21:ec:52:fc:f3:1a:e8:a7:2f: 22:07:fa:4a:50:f2:13:02:f5:d2:a6:d7:33:3b:88: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D4:37:38:8F:89:51:5F:12:AA:09:68:E1:6B:C4:4A:A8:E0:FD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:79:0b:7f:0c:6d:78:c0:94:c2:3d:49:01:b0:99:ae:4c:d6: f8:16:f3:4d:8e:1a:1d:1e:49:d8:0f:1d:0c:86:e8:b7:43:f9: 54:60:e3:c0:3f:ab:4a:68:a5:91:f7:6e:a3:47:09:22:1c:50: 7b:dc:36:8d:24:1e:40:e1:8a:b5:3d:42:79:41:1a:43:a6:12: 68:d7:d0:51:e0:c4:40:fe:42:74:ea:ee:a9:ef:34:b5:04:e3: 7c:56:60:4e:b3:b4:f2:0b:6f:a0:33:19:c4:00:d9:e8:06:82: 46:98:5f:12:b7:29:c4:dc:3a:62:4e:c1:f5:3c:2f:7d:dd:03: c1:29:1e:50:da:48:87:56:b7:c9:c0:86:e1:5b:9f:59:96:dc: 4e:9c:1a:16:6d:2c:be:c7:25:ad:2d:a5:77:d3:bb:47:05:63: 35:bd:fc:6b:14:49:98:81:f5:dd:20:5f:f5:a8:00:1d:c6:83: 57:01:96:1f:af:9a:7f:5f:51:6c:67:6f:3a:3d:ac:de:a5:a8: 69:e6:df:bc:5c:c3:f8:97:6a:77:92:d8:19:50:98:17:22:09: 13:e7:85:8b:00:c9:4b:e6:ba:ee:dc:7f:5e:6c:24:ec:cd:f3: cd:d4:98:d4:36:c6:f5:b0:d6:9b:b2:e1:3d:eb:59:2e:da:f6: 33:ea:86:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZjEb5Zo6aY1lIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YzVmZDRmMjItZmFhMC00NWE1LThmZmEtZjk5ZTk5M2UzNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/b6UWrITzjEoD4IXCC4pJ0jGEf8ON/av3/6 EzizH3vLIYmLPhFdkC7sxxlS0iA2RymOAoFmdf3bPLk09y1RMj1rZET+n3qvpgRD Lli8G4rBteq6QBNejjihmymKR4saaFUy5naK3eB47BuajOsg6c803zaELFIYsnnq eM86W/jm4tKsrQqIJD4UvKdoV/PQwtptHxU7b9gHaR0VcWNVdb+wAgwkTovYV0ta 1ZB75KUYyCjTmLzZMyknBUo+yRYNPyxfLGCaYfqK794ut4CAXiPYQvaWazUjyjun /6VCP3svHvOQiT8h7FL88xropy8iB/pKUPITAvXSptczO4gtjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLUNziPiVFfEqoJaOFrxEqo4P2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDlmOGNiY2QtMzFiYS0z NWYxLWJlOWUtNTcyYWEyYzdhZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF5C38MbXjAlMI9SQGwma5M1vgW802OGh0eSdgPHQyG6LdD+VRg48A/ q0popZH3bqNHCSIcUHvcNo0kHkDhirU9QnlBGkOmEmjX0FHgxED+QnTq7qnvNLUE 43xWYE6ztPILb6AzGcQA2egGgkaYXxK3KcTcOmJOwfU8L33dA8EpHlDaSIdWt8nA huFbn1mW3E6cGhZtLL7HJa0tpXfTu0cFYzW9/GsUSZiB9d0gX/WoAB3Gg1cBlh+v mn9fUWxnbzo9rN6lqGnm37xcw/iXaneS2BlQmBciCRPnhYsAyUvmuu7cf15sJOzN 883UmNQ2xvWw1puy4T3rWS7a9jPqhjM= -----END CERTIFICATE-----Generated at Sat Jun 13 21:38:40 2026 by rpki-client