$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa File: 161d2218-a9be-3c8e-b719-b8cb4143902d.roa (raw, json) Hash identifier: lSG6DYzjlKGYD3Rzc1UhTSCsCs7/pi8hGQZ9/CFTlkQ= Subject key identifier: 3A:95:00:D4:51:96:0D:43:04:3E:4C:BA:92:1A:70:FB:07:7F:06:0A Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584EA7873B0DF113F3F0EE287200 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 237 IP address blocks: 35.38.192.0/18 maxlen: 18 35.39.0.0/19 maxlen: 19 35.39.32.0/19 maxlen: 19 35.39.64.0/19 maxlen: 19 35.39.128.0/19 maxlen: 19 35.39.160.0/19 maxlen: 19 35.39.192.0/19 maxlen: 19 35.39.224.0/19 maxlen: 19 35.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3b:0d:f1:13:f3:f0:ee:28:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1678e5a1-ab61-4290-8ce4-422427400b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:26:3a:48:be:91:9c:23:1c:71:d0:32:d6: 03:d4:d9:e2:44:95:ae:28:0a:00:ac:4d:74:ae:5b: 69:b3:9d:2a:86:be:88:7d:ab:a8:f0:0d:31:c9:30: c0:5e:79:c1:71:14:25:bf:e5:e7:06:ed:05:85:ea: d8:5c:69:b3:1b:59:a5:36:df:a4:e2:65:66:3a:96: 21:25:f3:f2:a8:bd:aa:97:31:80:4e:02:f9:c3:a7: c9:03:19:cc:87:4d:98:2b:5f:74:34:6a:e0:c3:97: 8f:cb:f9:fe:63:f3:cb:54:f9:b6:98:55:d2:e4:d6: 40:7d:41:54:8f:81:58:62:f5:7a:f8:ba:8d:32:64: 88:b9:b4:2b:1f:fb:35:db:73:47:36:9f:31:0c:34: 99:bf:4a:e0:43:2d:f0:6c:ae:39:3e:c5:1c:41:0c: b7:a6:d3:54:d7:7a:69:03:d3:28:95:40:22:9a:09: f1:43:d9:ce:2f:00:9a:88:36:b3:9a:dc:e0:bf:bf: c7:03:23:15:7b:15:05:34:4a:b3:02:46:15:28:62: 70:f4:60:97:61:59:4a:47:76:4a:5f:cb:b2:08:5d: f3:89:b9:83:44:38:a6:a6:ba:22:af:0e:52:ab:13: 6c:2b:05:97:9c:9b:04:07:59:76:0a:95:0b:90:ff: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:00:D4:51:96:0D:43:04:3E:4C:BA:92:1A:70:FB:07:7F:06:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.38.192.0-35.39.95.255 35.39.128.0-35.40.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5b:11:fd:1a:e4:e7:25:21:a0:2c:4c:af:83:15:9c:51:6a: fb:4e:6f:21:46:b3:89:b4:1a:26:46:2d:f9:35:b3:fa:2f:44: f3:43:c6:d1:1f:8d:2a:3d:08:1c:4c:4a:66:86:b4:92:f6:e7: 74:28:13:75:33:8f:19:17:28:77:5a:4e:00:be:56:40:ca:4f: e2:b1:40:60:a2:80:b3:62:7b:b0:5e:af:1d:d4:08:05:1e:6e: 06:45:34:c4:8d:d4:a6:97:49:0a:d9:6f:d3:1b:f8:c4:40:15: 91:ad:4f:ac:22:15:62:2a:f7:73:d2:ba:c2:0a:a4:90:0e:c5: b7:b8:d3:be:8d:6d:e9:1b:7d:48:09:e1:4b:dc:a9:2b:27:3d: 6e:6e:de:45:a9:60:f5:13:aa:83:c9:b5:ae:8e:19:7d:a2:e5: 17:6e:87:08:79:80:d1:5b:f2:e8:c8:87:0e:5a:01:aa:51:4d: 43:45:7d:ae:3d:19:4e:0a:98:65:c7:60:3c:7f:75:11:82:02: 88:99:80:3e:81:d6:70:a7:ca:c1:48:8e:fc:b7:b3:b9:b6:17: e1:a3:7d:af:4a:3e:3d:56:bf:c7:90:a7:13:98:00:bc:9f:24: 20:4d:11:11:c3:ad:c9:83:8b:67:ad:00:a2:91:c3:82:ca:7b: ea:a4:42:87 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6nhzsN8RPz8O4ocgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTY3OGU1YTEtYWI2MS00MjkwLThjZTQtNDIyNDI3NDAwYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9EmOki+kZwjHHHQMtYD1NniRJWuKAoArE10 rltps50qhr6Ifauo8A0xyTDAXnnBcRQlv+XnBu0FherYXGmzG1mlNt+k4mVmOpYh JfPyqL2qlzGATgL5w6fJAxnMh02YK190NGrgw5ePy/n+Y/PLVPm2mFXS5NZAfUFU j4FYYvV6+LqNMmSIubQrH/s123NHNp8xDDSZv0rgQy3wbK45PsUcQQy3ptNU13pp A9MolUAimgnxQ9nOLwCaiDazmtzgv7/HAyMVexUFNEqzAkYVKGJw9GCXYVlKR3ZK X8uyCF3zibmDRDimproirw5SqxNsKwWXnJsEB1l2CpULkP9riQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDqVANRRlg1DBD5MupIacPsHfwYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMTYxZDIyMTgtYTliZS0z YzhlLWI3MTktYjhjYjQxNDM5MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAYjJsAD BAUjJ0AwCwMEByMngAMDACMoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADxbEf0a5OclIaAsTK+DFZxRavtO byFGs4m0GiZGLfk1s/ovRPNDxtEfjSo9CBxMSmaGtJL253QoE3UzjxkXKHdaTgC+ VkDKT+KxQGCigLNie7Berx3UCAUebgZFNMSN1KaXSQrZb9Mb+MRAFZGtT6wiFWIq 93PSusIKpJAOxbe4076NbekbfUgJ4UvcqSsnPW5u3kWpYPUTqoPJta6OGX2i5Rdu hwh5gNFb8ujIhw5aAapRTUNFfa49GU4KmGXHYDx/dRGCAoiZgD6B1nCnysFIjvy3 s7m2F+Gjfa9KPj1Wv8eQpxOYALyfJCBNERHDrcmDi2etAKKRw4LKe+qkQoc= -----END CERTIFICATE-----Generated at Wed Jul 29 22:43:39 2026 by rpki-client