$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa File: ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa (raw, json) Hash identifier: NfflVVIc7fzE3enqsSTMMIhQOp3s6sMEiLVqNY+I8DI= Subject key identifier: 1B:D5:CE:EA:41:88:95:2E:FF:1A:4C:5C:DE:2B:14:20:0F:EF:7D:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E08661185E8485FB705011B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 35.193.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:11:85:e8:48:5f:b7:05:01:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=0a652157-7fa2-45c1-9a12-e7bb967ddcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:90:4c:a2:1f:e4:41:42:ad:e9:c6:66:4c:23: fd:eb:c7:66:17:66:59:92:40:c1:04:84:a0:4b:92: 4f:7b:54:75:24:96:f7:fb:8f:05:62:1b:11:63:83: 0b:82:c0:19:7d:55:47:34:d9:be:00:fa:31:bb:8d: db:e0:15:36:ac:03:45:60:6d:0b:56:9c:bc:b8:35: 1b:cf:3d:ae:dc:cd:ba:03:d5:9c:98:c1:ab:3b:06: 3a:05:4b:fa:0f:59:f2:b6:ae:b2:09:cc:94:a4:09: ff:f8:30:9a:cd:83:63:ff:e3:52:1a:ea:76:d2:b5: 2e:e5:b7:2d:8b:d8:a3:12:fc:98:23:2f:fb:f9:01: 5d:98:b6:89:f0:3b:3b:a7:54:3b:94:6d:f2:19:a3: 4b:30:66:4c:d1:3c:72:aa:ac:0e:55:fd:bd:ae:ed: 15:56:7c:01:10:44:73:04:ce:f1:07:a8:1c:50:22: d6:e1:bf:60:bb:83:2b:17:b6:67:ae:3f:1b:2d:b1: f9:cc:fa:2b:48:02:c3:a3:a7:28:15:86:72:31:7a: 8a:b0:92:99:4e:87:86:cc:a9:09:f2:51:34:b9:cd: 18:e6:a7:5d:c6:9e:bd:b8:96:4b:95:61:0d:44:bb: 1b:5d:69:93:32:9e:4f:25:a8:04:3f:29:21:0e:3e: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D5:CE:EA:41:88:95:2E:FF:1A:4C:5C:DE:2B:14:20:0F:EF:7D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae7b02a3-81cf-3785-abf4-5f6fbcc4c9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.193.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:12:23:43:dd:7c:7d:47:3d:18:60:c9:db:99:71:a9:40:60: e2:6f:ca:4b:e6:24:4d:79:f7:ac:39:d4:60:c4:ce:76:af:2c: d4:cb:e3:05:9a:00:2a:6f:de:d8:6e:0b:8b:36:e3:60:9d:45: fc:21:6c:53:c5:5f:95:da:78:d7:ae:1d:2b:e9:d1:a9:94:bc: a4:03:98:c3:f0:dd:9f:f2:c3:8a:5a:ca:15:0c:5b:b2:be:69: 35:8a:40:22:f0:f3:1b:ae:3f:7f:e2:b6:dc:fd:88:7c:fa:da: ec:79:a5:66:d6:59:4a:23:9e:0d:1f:3b:8d:77:e3:48:78:23: 5e:ea:c7:77:11:45:aa:49:00:7a:7d:68:3a:5e:f8:3a:f7:ac: 9f:96:a8:b5:b4:77:2e:0e:90:36:79:d7:f6:c6:5b:37:3d:6f: ae:c3:92:9a:5d:ed:9a:30:59:01:4d:c5:0d:37:8b:de:6f:17: aa:39:cb:95:5f:4a:2d:c5:ad:71:aa:c8:07:e8:df:d2:bd:b2: 99:78:67:ed:0b:de:5b:fa:0a:1d:bf:06:b1:ae:f2:61:c7:34: 7c:6d:0c:41:25:78:ac:ff:4c:94:0f:63:05:76:e3:5e:9d:d8: 2b:e6:ef:7f:d6:e8:74:d2:3c:e8:39:83:bd:5d:bb:61:92:2f: 3a:6f:cb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZhGF6EhftwUBG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MGE2NTIxNTctN2ZhMi00NWMxLTlhMTItZTdiYjk2N2RkY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZBMoh/kQUKt6cZmTCP968dmF2ZZkkDBBISg S5JPe1R1JJb3+48FYhsRY4MLgsAZfVVHNNm+APoxu43b4BU2rANFYG0LVpy8uDUb zz2u3M26A9WcmMGrOwY6BUv6D1nytq6yCcyUpAn/+DCazYNj/+NSGup20rUu5bct i9ijEvyYIy/7+QFdmLaJ8Ds7p1Q7lG3yGaNLMGZM0TxyqqwOVf29ru0VVnwBEERz BM7xB6gcUCLW4b9gu4MrF7Znrj8bLbH5zPorSALDo6coFYZyMXqKsJKZToeGzKkJ 8lE0uc0Y5qddxp69uJZLlWENRLsbXWmTMp5PJagEPykhDj6NTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvVzupBiJUu/xpMXN4rFCAP732UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWU3YjAyYTMtODFjZi0z Nzg1LWFiZjQtNWY2ZmJjYzRjOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8GgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoSI0PdfH1HPRhgyduZcalAYOJvykvmJE1596w51GDEznavLNTL4wWa ACpv3thuC4s242CdRfwhbFPFX5XaeNeuHSvp0amUvKQDmMPw3Z/yw4payhUMW7K+ aTWKQCLw8xuuP3/ittz9iHz62ux5pWbWWUojng0fO41340h4I17qx3cRRapJAHp9 aDpe+Dr3rJ+WqLW0dy4OkDZ51/bGWzc9b67Dkppd7ZowWQFNxQ03i95vF6o5y5Vf Si3FrXGqyAfo39K9spl4Z+0L3lv6Ch2/BrGu8mHHNHxtDEEleKz/TJQPYwV2416d 2Cvm73/W6HTSPOg5g71du2GSLzpvy/Q= -----END CERTIFICATE-----Generated at Sat Jun 13 22:15:53 2026 by rpki-client