$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa File: 89456874-8985-397a-9b6d-53996e8fd57a.roa (raw, json) Hash identifier: Dae1kM59xcQUwNtS/0mpnt+0eF++LfORgIrDTjT3CV0= Subject key identifier: 36:3E:91:67:D9:A6:83:73:0F:09:BC:ED:D0:CB:6E:65:CF:3C:CA:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E086623E86F3C48C04AB2F600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.223.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:23:e8:6f:3c:48:c0:4a:b2:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=0d63a521-db29-415a-a681-b3534d92af52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:45:a2:ee:b8:1c:34:d1:d8:33:35:2d:02: b7:2e:45:7a:88:e0:a7:34:ec:f7:9e:5b:18:c4:ae: d8:d9:c8:fb:16:ec:91:53:2e:ca:c0:e0:6e:d4:f0: b8:4f:18:bf:53:e6:87:a8:52:31:37:b5:9a:a6:e9: 14:78:6a:a0:b2:f3:24:74:c0:04:d6:0e:19:71:0c: 0a:d6:89:91:30:bf:2c:2e:e9:af:a4:7a:d6:be:6c: 15:53:57:da:6b:fb:81:71:28:ac:22:49:55:a8:9e: 85:94:b6:c2:cf:1c:b3:06:53:a3:26:9b:b9:e4:f3: 07:10:d7:b1:2b:8f:a9:ef:0b:89:97:cf:42:b7:f2: dd:ed:ea:53:28:0c:1f:36:2c:84:85:b2:b7:68:18: 5d:c1:fc:18:7e:e0:4d:47:bb:d1:db:e4:9d:56:be: 12:3f:9d:1f:e0:1f:71:34:6c:3d:ba:c5:a9:78:93: 8f:cd:01:de:ce:06:f0:13:59:5c:18:49:d8:70:79: dd:d5:06:61:77:b9:a5:a8:a5:d9:c1:46:ce:4f:52: 3a:d1:e3:c3:55:c7:5e:53:22:db:c7:0e:46:70:cb: df:44:89:26:b9:2d:5a:87:12:3c:6e:2d:40:68:07: 40:be:2e:8f:5e:de:5e:ef:7d:64:5b:20:94:c6:4c: 2c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3E:91:67:D9:A6:83:73:0F:09:BC:ED:D0:CB:6E:65:CF:3C:CA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:12:07:c2:5b:52:24:66:ad:04:16:a2:5b:ae:03:30:35:dd: 9f:86:b3:f7:3d:56:d6:e2:01:d7:4c:08:81:af:b6:61:f2:d4: a8:20:a2:a4:b2:ee:2a:be:d3:ac:b1:ed:aa:53:16:41:72:57: 3b:69:73:ea:74:30:36:c5:e0:7e:a0:a0:03:f7:94:ee:53:78: bd:cd:e9:49:f1:79:0a:5d:71:d8:59:db:74:72:e4:68:c4:6f: a6:40:49:77:a9:c3:3f:2b:a6:d9:c1:bd:23:32:71:77:3f:8c: 5b:ff:3d:16:eb:48:88:a8:1d:d3:74:f7:a3:83:1f:52:89:6a: 99:70:84:a7:d9:67:be:30:4d:91:74:26:a2:40:10:cf:0a:77: 5c:b8:ca:a8:79:69:fd:65:de:cf:ba:8f:09:e3:9e:8d:59:40: e3:78:01:6d:c7:34:47:76:79:fb:0b:b2:2d:13:25:e8:be:80: 8d:49:e9:07:af:41:f1:ae:60:44:b3:3e:6b:8f:8f:4d:b2:75: 32:21:95:d8:76:be:e8:c4:03:79:d0:1e:15:aa:bb:d3:09:35: a4:7a:89:10:f4:7d:c7:00:d8:7a:73:4d:c2:16:cd:97:12:51: 34:61:92:ea:2f:ae:94:fc:48:7b:6b:90:16:c6:9f:a0:6b:33: 40:36:6c:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZiPobzxIwEqy9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MGQ2M2E1MjEtZGIyOS00MTVhLWE2ODEtYjM1MzRkOTJhZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYFFou64HDTR2DM1LQK3LkV6iOCnNOz3nlsY xK7Y2cj7FuyRUy7KwOBu1PC4Txi/U+aHqFIxN7WapukUeGqgsvMkdMAE1g4ZcQwK 1omRML8sLumvpHrWvmwVU1faa/uBcSisIklVqJ6FlLbCzxyzBlOjJpu55PMHENex K4+p7wuJl89Ct/Ld7epTKAwfNiyEhbK3aBhdwfwYfuBNR7vR2+SdVr4SP50f4B9x NGw9usWpeJOPzQHezgbwE1lcGEnYcHnd1QZhd7mlqKXZwUbOT1I60ePDVcdeUyLb xw5GcMvfRIkmuS1ahxI8bi1AaAdAvi6PXt5e731kWyCUxkwsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY+kWfZpoNzDwm87dDLbmXPPMoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk0NTY4NzQtODk4NS0z OTdhLTliNmQtNTM5OTZlOGZkNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI98gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0SB8JbUiRmrQQWoluuAzA13Z+Gs/c9VtbiAddMCIGvtmHy1KggoqSy 7iq+06yx7apTFkFyVztpc+p0MDbF4H6goAP3lO5TeL3N6UnxeQpdcdhZ23Ry5GjE b6ZASXepwz8rptnBvSMycXc/jFv/PRbrSIioHdN096ODH1KJaplwhKfZZ74wTZF0 JqJAEM8Kd1y4yqh5af1l3s+6jwnjno1ZQON4AW3HNEd2efsLsi0TJei+gI1J6Qev QfGuYESzPmuPj02ydTIhldh2vujEA3nQHhWqu9MJNaR6iRD0fccA2HpzTcIWzZcS UTRhkuovrpT8SHtrkBbGn6BrM0A2bL8= -----END CERTIFICATE-----Generated at Sun Jun 14 00:56:47 2026 by rpki-client