$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/537fbff6-f966-31f5-bf03-1e92c5ff1bb4.roa File: 537fbff6-f966-31f5-bf03-1e92c5ff1bb4.roa (raw, json) Hash identifier: z7Lcq9gXJjk6aEnPfuOgQfpl6/Vwf8djWG2YemfXRQE= Subject key identifier: 28:9E:41:E8:1D:4A:39:0B:10:BA:A5:19:00:3C:64:45:37:0E:10:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E08661B1B6DEA232C8BF3FF18 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/537fbff6-f966-31f5-bf03-1e92c5ff1bb4.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.235.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:1b:1b:6d:ea:23:2c:8b:f3:ff:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=c4807cab-6e70-45e4-8c52-e21e71747634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:1a:cc:79:5d:84:de:0d:e5:38:30:da:20: 1e:85:ff:85:63:19:62:3f:49:f4:35:e7:1c:77:95: c2:b6:9f:3a:e3:ad:5a:e5:d9:2f:98:4b:6b:26:ce: 9a:29:8e:58:40:a7:a1:f4:d6:00:9b:9d:d4:8e:ad: 74:81:54:28:4c:d5:56:56:35:cb:45:fe:f2:9c:8f: 20:ed:69:5f:ae:f8:44:02:2f:92:c2:cd:67:af:fb: 2b:53:46:4e:63:e6:3b:3f:60:3e:cb:66:89:4e:ff: 08:e0:54:6e:5d:99:d1:55:e9:65:d1:f5:69:3c:78: 52:80:94:9e:36:c3:2a:10:ca:a5:75:8f:21:8b:91: 30:12:e5:f5:bd:56:00:e4:e8:c3:e5:e1:5a:8a:6d: 7b:0c:e4:63:f3:51:71:95:28:73:5e:1f:04:ff:b0: 78:89:59:40:62:df:a2:2e:2e:c6:8f:37:f1:6d:3f: 66:dd:8f:0e:93:d1:4b:5a:83:35:7d:42:97:c5:5b: aa:1b:48:d8:b0:65:c3:57:7f:e2:cb:06:34:fc:ae: 09:42:8d:24:4b:ce:56:83:d7:83:40:f1:62:a7:bd: 01:2e:3e:dc:06:30:5c:e4:29:1b:24:71:79:d1:0c: 02:bc:93:02:d8:ce:bd:40:72:4f:41:c5:99:8c:ed: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9E:41:E8:1D:4A:39:0B:10:BA:A5:19:00:3C:64:45:37:0E:10:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/537fbff6-f966-31f5-bf03-1e92c5ff1bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:12:44:ea:b5:ba:41:6a:b4:e1:42:cc:ef:2b:ae:3c:d1:7b: b9:b7:a5:1e:25:3d:2a:79:05:ad:ec:77:17:b0:20:01:d8:b9: 0f:45:1a:33:a0:d3:db:85:37:ca:47:7c:8e:1c:51:3b:50:0f: 3e:80:55:c6:03:77:dd:02:a9:2a:e4:d1:a8:86:f8:be:e0:9a: a1:78:a1:0c:c3:80:2c:f6:34:81:81:76:35:cc:95:23:5e:6c: 59:a5:9d:14:9d:78:ff:b2:c1:29:ab:93:ad:91:8c:7a:0d:c9: 9f:34:ea:52:bf:d9:ea:55:ae:44:8a:d2:eb:20:49:2e:80:07: 70:d6:7f:b5:d8:45:78:1e:a1:89:15:f0:30:5d:0b:a5:e3:ab: a5:4b:d2:fc:92:32:18:f8:42:19:c8:41:68:77:c7:f8:d2:11: cf:3a:30:73:c5:2c:ef:2a:67:5f:ac:46:18:cf:35:11:22:8b: 91:7b:d6:8f:b6:e3:b0:9b:65:4b:26:b9:6e:d0:8e:81:f5:42: e9:d7:39:03:40:46:af:e8:b8:6e:32:03:fa:66:23:34:27:bb: ea:a8:a2:71:4e:c4:56:e7:0a:dc:e0:98:03:8e:44:5e:a1:5a: 96:95:e3:99:17:3f:f4:42:56:17:da:61:82:35:6f:72:e0:02: 43:0a:08:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZhsbbeojLIvz/xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YzQ4MDdjYWItNmU3MC00NWU0LThjNTItZTIxZTcxNzQ3NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpUazHldhN4N5Tgw2iAehf+FYxliP0n0Necc d5XCtp86461a5dkvmEtrJs6aKY5YQKeh9NYAm53Ujq10gVQoTNVWVjXLRf7ynI8g 7WlfrvhEAi+Sws1nr/srU0ZOY+Y7P2A+y2aJTv8I4FRuXZnRVell0fVpPHhSgJSe NsMqEMqldY8hi5EwEuX1vVYA5OjD5eFaim17DORj81FxlShzXh8E/7B4iVlAYt+i Li7GjzfxbT9m3Y8Ok9FLWoM1fUKXxVuqG0jYsGXDV3/iywY0/K4JQo0kS85Wg9eD QPFip70BLj7cBjBc5CkbJHF50QwCvJMC2M69QHJPQcWZjO3KzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCieQegdSjkLELqlGQA8ZEU3DhBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTM3ZmJmZjYtZjk2Ni0z MWY1LWJmMDMtMWU5MmM1ZmYxYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBI+vmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0SROq1ukFqtOFCzO8rrjzRe7m3pR4lPSp5Ba3sdxewIAHYuQ9FGjOg 09uFN8pHfI4cUTtQDz6AVcYDd90CqSrk0aiG+L7gmqF4oQzDgCz2NIGBdjXMlSNe bFmlnRSdeP+ywSmrk62RjHoNyZ806lK/2epVrkSK0usgSS6AB3DWf7XYRXgeoYkV 8DBdC6Xjq6VL0vySMhj4QhnIQWh3x/jSEc86MHPFLO8qZ1+sRhjPNREii5F71o+2 47CbZUsmuW7QjoH1QunXOQNARq/ouG4yA/pmIzQnu+qoonFOxFbnCtzgmAOORF6h WpaV45kXP/RCVhfaYYI1b3LgAkMKCLQ= -----END CERTIFICATE-----Generated at Sun Jun 14 00:57:12 2026 by rpki-client