$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53ac3c1f-b68e-381f-bc1c-e314e9f0e89f.roa File: 53ac3c1f-b68e-381f-bc1c-e314e9f0e89f.roa (raw, json) Hash identifier: Bc5i7GVZyyyKaENn8NIKqhEap5Z/ejtx/LjYYFk3bkM= Subject key identifier: 0C:F2:A0:30:3B:FE:AF:D3:F6:41:EF:A9:84:75:9E:59:41:46:4F:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D63AF9C3FD2A9FE2661A2BD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53ac3c1f-b68e-381f-bc1c-e314e9f0e89f.roa Signing time: Sat 04 Apr 2026 01:00:25 +0000 ROA not before: Sat 04 Apr 2026 01:00:25 +0000 ROA not after: Fri 03 Jul 2026 01:00:25 +0000 asID: 396982 IP address blocks: 35.252.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:63:af:9c:3f:d2:a9:fe:26:61:a2:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 4 01:00:25 2026 GMT Not After : Jul 3 01:00:25 2026 GMT Subject: CN=24ee09cd-368e-49d9-a6f0-a4701c660b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:7d:57:06:6b:d2:e2:18:bf:0b:6b:fa:fe: 94:16:2d:9b:16:08:d1:a8:50:dc:13:17:8a:fa:4d: c7:cc:e5:3d:f6:ee:8f:0f:ed:18:6b:a0:2f:09:cb: bd:20:bc:c9:9d:b1:6f:0e:6b:87:b1:b9:fa:72:70: 33:49:ae:21:ef:17:c4:6b:ae:7d:de:a9:4c:35:97: 5e:7b:0c:1d:d7:11:f2:c8:26:40:af:91:e6:82:1b: 3b:39:18:19:5d:bb:f8:91:78:6d:40:17:a8:a3:32: 54:f5:8a:fd:32:49:00:7d:56:7f:7e:5d:0d:09:43: 67:6e:d0:3c:e1:3f:f1:ac:0d:61:fe:99:ea:7e:57: 23:b7:5f:fa:03:57:89:ee:df:73:90:06:a4:93:45: 2a:ed:6a:23:7f:21:6c:1c:66:d6:1b:39:1d:0d:b1: 3f:ed:e9:6a:d7:11:c0:1a:e8:f1:f1:f5:f6:35:0f: de:25:5d:84:2a:10:79:13:23:8c:4d:73:2e:17:e0: 5c:f7:8b:ef:10:c6:17:36:b5:06:3f:63:be:ea:83: c2:56:23:e3:fe:97:d1:1e:9d:2c:40:36:24:ae:1a: 49:d7:c5:24:53:a8:a9:01:3a:e6:9d:5c:f0:e2:04: f2:c0:35:32:5d:b4:c3:dc:6e:c0:f2:3d:55:c2:57: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:A0:30:3B:FE:AF:D3:F6:41:EF:A9:84:75:9E:59:41:46:4F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53ac3c1f-b68e-381f-bc1c-e314e9f0e89f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.252.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a4:d1:e8:c3:d8:1e:63:f7:84:84:42:42:c7:10:7a:d8:14: ca:df:49:d8:d3:45:0d:12:4b:84:70:a8:af:f7:a4:ec:8d:c2: 19:1e:a2:97:57:70:60:52:92:40:fe:01:e6:65:1f:f6:be:97: 82:e8:35:4f:a6:3b:0e:fc:51:15:da:6c:0d:bf:52:26:f8:de: 9e:0b:79:15:c8:53:bd:69:89:05:82:8f:7e:ea:c0:c1:a4:65: e6:b5:90:68:fb:f8:84:b9:e9:36:77:46:90:31:4a:a7:4e:c3: 61:3a:80:2b:0f:22:47:35:75:7c:36:61:60:84:54:c9:23:ee: fd:63:69:52:6d:f1:79:1b:6b:b1:fd:ab:48:16:9e:a5:59:90: d5:5e:e0:8a:95:8a:48:6e:0b:02:c8:22:b4:49:d6:72:b4:83: 6c:5e:7a:66:f2:cf:bb:34:30:67:28:b6:a8:c1:50:26:d8:bd: a0:d7:82:86:7e:c6:3c:53:7d:ea:b9:8e:a2:64:9c:91:83:14: 15:a4:8c:40:28:9b:3c:72:7a:4f:61:b1:16:3e:4d:50:36:0b: 48:0a:81:ad:4b:7b:1f:41:3d:3e:96:78:cd:c9:94:ee:b9:7c: 83:ea:c1:9f:12:f4:b9:ee:32:3f:f9:a1:77:41:83:a0:0d:32: 13:1a:2e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1jr5w/0qn+JmGivYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwNDAxMDAyNVoXDTI2MDcwMzAxMDAyNVowLzEtMCsGA1UEAxMk MjRlZTA5Y2QtMzY4ZS00OWQ5LWE2ZjAtYTQ3MDFjNjYwYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXF9VwZr0uIYvwtr+v6UFi2bFgjRqFDcExeK +k3HzOU99u6PD+0Ya6AvCcu9ILzJnbFvDmuHsbn6cnAzSa4h7xfEa6593qlMNZde ewwd1xHyyCZAr5Hmghs7ORgZXbv4kXhtQBeoozJU9Yr9MkkAfVZ/fl0NCUNnbtA8 4T/xrA1h/pnqflcjt1/6A1eJ7t9zkAakk0Uq7WojfyFsHGbWGzkdDbE/7elq1xHA Gujx8fX2NQ/eJV2EKhB5EyOMTXMuF+Bc94vvEMYXNrUGP2O+6oPCViPj/pfRHp0s QDYkrhpJ18UkU6ipATrmnVzw4gTywDUyXbTD3G7A8j1Vwld/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzyoDA7/q/T9kHvqYR1nllBRk9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTNhYzNjMWYtYjY4ZS0z ODFmLWJjMWMtZTMxNGU5ZjBlODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI/wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuk0ejD2B5j94SEQkLHEHrYFMrfSdjTRQ0SS4RwqK/3pOyNwhkeopdX cGBSkkD+AeZlH/a+l4LoNU+mOw78URXabA2/Uib43p4LeRXIU71piQWCj37qwMGk Zea1kGj7+IS56TZ3RpAxSqdOw2E6gCsPIkc1dXw2YWCEVMkj7v1jaVJt8Xkba7H9 q0gWnqVZkNVe4IqVikhuCwLIIrRJ1nK0g2xeembyz7s0MGcotqjBUCbYvaDXgoZ+ xjxTfeq5jqJknJGDFBWkjEAomzxyek9hsRY+TVA2C0gKga1Lex9BPT6WeM3JlO65 fIPqwZ8S9LnuMj/5oXdBg6ANMhMaLtM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:30:40 2026 by rpki-client