$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa File: 17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa (raw, json) Hash identifier: U9o0HK2qT+1zFWvwz9phlWlOnyFn1MgWNc4e0X35kzM= Subject key identifier: E1:08:17:BA:9C:E9:81:0E:82:16:CA:83:CB:C9:E1:37:C8:42:B0:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51CF868847B237F15CBFC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 35.198.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:cf:86:88:47:b2:37:f1:5c:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=66d23cad-00b7-487c-b48e-a14007e0ee27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:d1:1a:e2:9b:60:0c:c1:27:88:3b:09:dd: b9:f7:91:54:74:34:76:ff:db:75:26:6f:05:b3:52: 78:c5:e0:14:ba:51:c3:46:32:69:c1:08:42:dd:76: 5e:4b:76:ce:3e:16:b0:1c:3e:a3:59:df:b4:e7:58: 47:e0:62:5c:53:0c:5b:1c:21:a4:d2:1f:6b:f8:be: a6:a6:65:7a:44:1f:5f:7b:a9:49:c4:95:72:1f:51: 0f:4c:26:ff:bd:1f:89:6c:dd:f0:9f:98:62:05:78: 2a:12:14:da:d1:42:be:dd:13:94:8a:df:1a:09:a6: f6:a9:01:33:c0:e1:2c:c8:f9:19:21:0e:f1:ed:69: c1:74:23:fc:c2:10:4e:c6:26:e5:a2:3f:d4:19:af: ae:79:19:f2:76:c0:7c:62:04:4a:d9:fe:c2:40:b4: 4d:96:a2:02:c0:ff:5d:37:ef:13:86:25:4b:2c:9c: 21:00:51:18:1c:a7:ce:5c:48:32:00:9b:ad:fa:30: 99:cc:56:6f:ab:7a:61:98:e7:31:c6:df:ee:d8:a3: df:69:08:42:6d:ce:24:5b:0f:96:89:f2:4f:05:c1: 35:16:4c:cf:02:c7:d0:39:dd:aa:62:22:5f:6a:17: 18:79:29:c3:9b:fc:56:a1:20:b3:91:e2:7f:7a:1f: 82:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:08:17:BA:9C:E9:81:0E:82:16:CA:83:CB:C9:E1:37:C8:42:B0:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:39:1b:6b:37:04:9b:67:fc:89:0f:5e:1a:07:24:b7:ec:30: ba:2d:e7:8c:b5:bf:21:54:bc:73:27:d2:81:a8:92:90:9e:68: 59:fd:cd:24:c5:72:5b:e8:e3:08:6b:16:45:b9:d2:23:3f:e9: 75:31:aa:a8:ad:8d:92:24:b8:00:74:31:f3:80:76:79:06:79: e4:c9:a4:97:10:ff:22:af:bb:6a:a2:ba:5d:8e:f4:32:b3:e9: a8:3d:97:35:b3:69:a5:c8:69:cf:37:16:16:58:f8:fe:ee:5f: da:96:b6:dc:57:a0:0b:8f:95:9d:66:07:79:e5:10:0e:64:30: 8b:fe:64:cf:f0:45:d7:64:6a:18:4d:37:cd:02:b5:82:24:fb: 52:db:d0:39:21:71:ad:2d:2d:47:2c:3e:60:e9:ca:30:32:12: 9e:c7:d4:9b:8a:62:d3:34:8f:35:fb:b7:6b:bc:fb:1f:f5:b7: b2:94:1b:11:d7:68:e2:68:ce:02:ab:cb:60:a0:40:bf:87:d0: 5c:0b:d3:83:95:57:b8:37:c3:9f:b7:81:f5:de:dc:8e:83:65: e1:58:16:2e:7d:8b:84:84:d5:7c:ea:f0:42:ba:f5:6f:33:59: c3:28:88:7a:ac:7d:20:bf:5d:f4:12:18:4f:77:d5:c3:8f:14: b5:45:d6:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUc+GiEeyN/Fcv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk NjZkMjNjYWQtMDBiNy00ODdjLWI0OGUtYTE0MDA3ZTBlZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02rRGuKbYAzBJ4g7Cd2595FUdDR2/9t1Jm8F s1J4xeAUulHDRjJpwQhC3XZeS3bOPhawHD6jWd+051hH4GJcUwxbHCGk0h9r+L6m pmV6RB9fe6lJxJVyH1EPTCb/vR+JbN3wn5hiBXgqEhTa0UK+3ROUit8aCab2qQEz wOEsyPkZIQ7x7WnBdCP8whBOxibloj/UGa+ueRnydsB8YgRK2f7CQLRNlqICwP9d N+8ThiVLLJwhAFEYHKfOXEgyAJut+jCZzFZvq3phmOcxxt/u2KPfaQhCbc4kWw+W ifJPBcE1FkzPAsfQOd2qYiJfahcYeSnDm/xWoSCzkeJ/eh+C9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEIF7qc6YEOghbKg8vJ4TfIQrDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTdjMGQ1OWUtNTgxMS0z Yjc0LThhNWUtOWE1ZjYxMWUyZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA5G2s3BJtn/IkPXhoHJLfsMLot54y1vyFUvHMn0oGokpCeaFn9zSTF clvo4whrFkW50iM/6XUxqqitjZIkuAB0MfOAdnkGeeTJpJcQ/yKvu2qiul2O9DKz 6ag9lzWzaaXIac83FhZY+P7uX9qWttxXoAuPlZ1mB3nlEA5kMIv+ZM/wRddkahhN N80CtYIk+1Lb0Dkhca0tLUcsPmDpyjAyEp7H1JuKYtM0jzX7t2u8+x/1t7KUGxHX aOJozgKry2CgQL+H0FwL04OVV7g3w5+3gfXe3I6DZeFYFi59i4SE1Xzq8EK69W8z WcMoiHqsfSC/XfQSGE931cOPFLVF1l8= -----END CERTIFICATE-----Generated at Sat Aug 8 02:53:50 2026 by rpki-client