$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa File: a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa (raw, json) Hash identifier: K2nv2O9fFfb7TaoLWaLAU90EAtMeMO97pVa5SiFLfOc= Subject key identifier: 8A:D5:BC:1C:EA:5E:4A:E0:97:18:B9:A9:27:FD:E7:74:40:0C:3A:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E08661A6E8067CCD2B7C23A90 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.245.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:1a:6e:80:67:cc:d2:b7:c2:3a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=8a673ab0-88c2-4f54-b84e-c57225aa5a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:79:af:73:7f:77:db:9b:07:ec:7e:a0:65:52: 5a:7c:fc:ea:fc:66:60:6c:af:d7:7e:32:30:37:04: 00:a2:b3:83:ed:93:3d:82:3b:ee:8e:be:d5:b4:c1: bb:48:e8:68:ae:1c:a1:da:79:42:b2:37:de:eb:6a: 02:f8:64:aa:0c:d1:3e:42:c9:95:ab:64:5d:b9:2e: a3:da:9c:34:59:f6:a4:eb:28:c9:d1:76:ef:a4:01: 37:00:c2:6e:34:dc:eb:29:b7:eb:5c:a8:cd:ea:7b: d4:d5:12:10:9f:1c:33:9b:47:96:ea:15:15:22:32: a3:70:f3:f6:42:49:cb:e9:99:88:9e:00:25:0b:9b: a8:f0:ac:03:b8:83:0f:e8:28:1e:da:5a:35:19:35: ce:3e:d4:94:e6:dd:68:d0:d3:82:2e:3c:d4:b4:7d: aa:50:f1:84:d5:b3:6d:10:82:d7:36:27:e1:58:b9: 50:af:87:5e:af:86:c8:77:a7:b4:98:de:c6:5d:1d: 4f:8f:76:4f:b5:f0:85:c2:f0:99:58:df:9c:4f:80: 03:c9:fb:1b:94:b1:ef:e6:57:0f:31:a2:6d:2c:b4: f5:99:db:11:12:05:82:4a:11:57:8d:2f:33:93:0a: 0c:70:bb:04:a3:a5:d2:b1:44:3f:c0:50:8b:e8:0a: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D5:BC:1C:EA:5E:4A:E0:97:18:B9:A9:27:FD:E7:74:40:0C:3A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.245.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7d:54:99:33:ca:14:47:e9:45:e6:f3:03:ef:6f:2a:3d:ce: 86:5d:2b:03:a1:7f:f9:8a:62:d9:ff:e7:7f:6c:36:06:3f:16: fb:7d:67:00:18:b8:63:82:90:af:12:33:75:45:9b:e6:3b:bd: 9b:49:79:5f:0e:8d:5f:b4:82:6e:4f:cb:1b:34:e1:05:61:c1: 52:22:a3:cf:7c:a1:b8:13:18:59:8f:d6:cc:68:36:15:13:c5: 95:31:0b:8e:1e:73:cf:c0:9e:ed:bd:43:4e:e9:4c:9e:b2:8f: a6:09:30:20:9f:b1:26:e8:41:f3:bd:ed:c1:bb:48:26:e8:4f: 71:2f:6c:e1:82:29:28:6f:a7:d0:0f:5c:a5:ec:ab:7c:16:06: 69:f8:0f:86:d1:54:d1:d9:0d:46:0b:76:ed:86:77:2b:e0:41: 4a:ee:8b:23:64:e0:15:cd:70:f1:5a:51:d7:14:e4:32:e9:82: d2:8e:5f:f2:2d:11:75:e1:27:fb:11:c4:c9:fe:29:09:f5:9f: 73:6a:43:89:c3:15:e9:4c:5b:c2:b0:51:4f:1d:f6:e0:28:55: 74:94:ca:04:ec:4e:52:35:bb:a1:87:ad:5b:28:d1:bc:a8:14: 67:e0:1c:b0:51:88:ee:5b:28:54:ab:2c:36:21:9a:1a:e5:86: be:67:78:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZhpugGfM0rfCOpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk OGE2NzNhYjAtODhjMi00ZjU0LWI4NGUtYzU3MjI1YWE1YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Hmvc39325sH7H6gZVJafPzq/GZgbK/XfjIw NwQAorOD7ZM9gjvujr7VtMG7SOhorhyh2nlCsjfe62oC+GSqDNE+QsmVq2RduS6j 2pw0Wfak6yjJ0XbvpAE3AMJuNNzrKbfrXKjN6nvU1RIQnxwzm0eW6hUVIjKjcPP2 QknL6ZmIngAlC5uo8KwDuIMP6Cge2lo1GTXOPtSU5t1o0NOCLjzUtH2qUPGE1bNt EILXNifhWLlQr4der4bId6e0mN7GXR1Pj3ZPtfCFwvCZWN+cT4ADyfsblLHv5lcP MaJtLLT1mdsREgWCShFXjS8zkwoMcLsEo6XSsUQ/wFCL6ApyswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrVvBzqXkrglxi5qSf953RADDrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTNhY2Y2N2UtMTQwYy0z MWNkLTliYTEtZTM1NWEwZTk4YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR9VJkzyhRH6UXm8wPvbyo9zoZdKwOhf/mKYtn/539sNgY/Fvt9ZwAY uGOCkK8SM3VFm+Y7vZtJeV8OjV+0gm5Pyxs04QVhwVIio898obgTGFmP1sxoNhUT xZUxC44ec8/Anu29Q07pTJ6yj6YJMCCfsSboQfO97cG7SCboT3EvbOGCKShvp9AP XKXsq3wWBmn4D4bRVNHZDUYLdu2GdyvgQUruiyNk4BXNcPFaUdcU5DLpgtKOX/It EXXhJ/sRxMn+KQn1n3NqQ4nDFelMW8KwUU8d9uAoVXSUygTsTlI1u6GHrVso0byo FGfgHLBRiO5bKFSrLDYhmhrlhr5neAM= -----END CERTIFICATE-----Generated at Sat Jun 13 21:43:57 2026 by rpki-client