$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa File: 238ca3a5-8db5-3863-9fea-5084e4dd311e.roa (raw, json) Hash identifier: RyAENw4nYJAsNazCuB6IrTsD2t4n+UGaRrEiQ+36wBE= Subject key identifier: 61:2D:1D:F5:ED:BD:36:2C:13:51:DB:96:02:DB:40:28:8B:92:0E:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51F011053ECC303B683300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 35.189.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:f0:11:05:3e:cc:30:3b:68:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=ce4f6da3-f196-4b04-8bba-57cd28e05c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:f8:94:18:31:fc:36:94:d4:a5:d4:9b:67: 4a:f9:d8:36:70:df:cb:5f:fd:00:f5:4a:da:3a:c7: 19:5e:2c:5b:ff:8c:77:78:93:20:43:a7:f0:4c:71: c3:36:15:ff:c4:a0:55:22:9d:78:2e:29:20:b4:79: 98:b4:65:13:a1:fd:28:e0:e5:23:ac:c8:32:dc:2d: 5d:a8:6a:07:cf:e1:36:f1:f0:03:ba:6a:3b:e0:1d: 51:1f:6d:19:aa:94:3f:62:38:94:fa:72:00:2b:54: 0b:33:fb:b4:78:43:08:ed:86:b4:73:e8:d6:d1:61: cc:7f:f4:96:a0:e1:30:e8:cd:8f:ca:a1:b7:bd:bc: 9d:d8:89:c6:66:b8:1c:9d:1c:2e:45:a0:ad:2b:ae: 1b:60:52:28:e9:62:36:fe:49:6d:27:7e:2e:9f:52: aa:7f:bd:10:bf:9b:2f:84:91:f7:0f:18:f2:a9:a8: 5b:e5:bc:1f:94:a6:df:7f:11:c1:e2:6b:48:b9:0b: 03:f4:7a:f5:bf:c7:5a:17:ad:21:ae:d7:83:10:95: bb:58:90:a0:12:1c:55:65:0a:3c:37:de:89:19:e6: 80:f1:e4:29:2f:64:5e:4d:44:31:ff:a1:b5:05:fa: 2e:22:0a:16:50:05:fd:c5:04:10:d1:63:6b:e3:2b: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2D:1D:F5:ED:BD:36:2C:13:51:DB:96:02:DB:40:28:8B:92:0E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:df:20:58:be:85:3e:55:98:3e:a5:1a:af:de:77:a7:c4:f0: c2:ff:e8:9c:44:ca:c5:5e:f6:0f:98:e2:76:93:9a:83:58:77: 4d:c6:92:70:e2:4b:11:9c:d0:71:c3:17:63:05:b9:09:23:8a: 94:75:d7:4e:a2:48:f3:70:c0:20:d9:c1:e1:36:30:b2:d9:6a: 91:0d:78:b2:ff:6d:f6:5d:6c:67:62:cd:51:0f:c8:97:50:b1: e7:80:76:49:da:7a:89:a8:56:f8:56:5a:d4:a0:69:cf:ca:bb: 20:72:17:f1:52:48:75:17:2e:41:4f:1c:54:a0:dd:33:01:5e: ff:30:4c:f8:aa:cd:cc:74:61:9a:de:70:ee:9e:f2:da:ef:1c: fb:22:cd:e4:9a:48:5b:2e:3c:88:c3:4c:71:64:a7:8d:21:52: 1b:df:2a:4c:be:0f:44:22:a7:1d:6f:a7:55:c7:f6:91:1b:f3: 25:69:fd:db:17:cf:8a:9e:8a:5a:93:da:8b:af:69:fa:19:d8: 30:14:71:0d:85:bb:d9:a9:cf:bf:de:f4:b3:76:02:d3:2a:81: 7b:c3:67:c7:44:2c:0c:8d:3c:17:ca:e7:12:cf:02:a3:1b:69: 7e:d9:2e:56:35:93:50:59:0f:9d:2b:fb:39:b7:12:cf:57:13: c9:bf:57:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUfARBT7MMDtoMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk Y2U0ZjZkYTMtZjE5Ni00YjA0LThiYmEtNTdjZDI4ZTA1YzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1T4lBgx/DaU1KXUm2dK+dg2cN/LX/0A9Ura OscZXixb/4x3eJMgQ6fwTHHDNhX/xKBVIp14LikgtHmYtGUTof0o4OUjrMgy3C1d qGoHz+E28fADumo74B1RH20ZqpQ/YjiU+nIAK1QLM/u0eEMI7Ya0c+jW0WHMf/SW oOEw6M2PyqG3vbyd2InGZrgcnRwuRaCtK64bYFIo6WI2/kltJ34un1Kqf70Qv5sv hJH3Dxjyqahb5bwflKbffxHB4mtIuQsD9Hr1v8daF60hrteDEJW7WJCgEhxVZQo8 N96JGeaA8eQpL2ReTUQx/6G1BfouIgoWUAX9xQQQ0WNr4yuHFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEtHfXtvTYsE1HblgLbQCiLkg4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM4Y2EzYTUtOGRiNS0z ODYzLTlmZWEtNTA4NGU0ZGQzMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI70AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGffIFi+hT5VmD6lGq/ed6fE8ML/6JxEysVe9g+Y4naTmoNYd03GknDi SxGc0HHDF2MFuQkjipR1106iSPNwwCDZweE2MLLZapENeLL/bfZdbGdizVEPyJdQ seeAdknaeomoVvhWWtSgac/KuyByF/FSSHUXLkFPHFSg3TMBXv8wTPiqzcx0YZre cO6e8trvHPsizeSaSFsuPIjDTHFkp40hUhvfKky+D0Qipx1vp1XH9pEb8yVp/dsX z4qeilqT2ouvafoZ2DAUcQ2Fu9mpz7/e9LN2AtMqgXvDZ8dELAyNPBfK5xLPAqMb aX7ZLlY1k1BZD50r+zm3Es9XE8m/V4Q= -----END CERTIFICATE-----Generated at Sat Aug 8 02:55:10 2026 by rpki-client