$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43d9ebec-edeb-3526-bf66-0502bcc7a914.roa File: 43d9ebec-edeb-3526-bf66-0502bcc7a914.roa (raw, json) Hash identifier: nrG1i3hzIaTmjHTlGqHOKnA8xtp1fonmUKkcpdLhOjk= Subject key identifier: 59:CD:E5:9B:15:49:21:8A:08:D9:08:C0:C2:3E:81:16:B3:17:9F:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51C0C640E059F77A576680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43d9ebec-edeb-3526-bf66-0502bcc7a914.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 35.244.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:c0:c6:40:e0:59:f7:7a:57:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=929fbb9d-3333-4b20-ae0d-dca5dc841beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:fc:b9:d9:8d:51:a2:7d:0a:59:cb:1b:ff: 3e:94:e9:d3:cd:b1:7b:1a:12:81:9c:39:1d:4c:f1: 98:bf:94:4d:ea:28:41:26:16:54:44:b7:09:38:a8: bc:20:e1:b6:73:af:f1:86:98:84:f4:72:00:77:8c: 0f:0b:7a:d3:c3:de:35:fb:06:eb:da:19:a7:3d:9d: 37:ce:bf:3e:19:9e:f7:7a:12:b5:c8:f8:61:1b:d4: 0a:21:2e:ec:b5:3f:db:d4:6e:af:19:5c:ca:de:27: 9d:9d:39:3a:ab:80:54:c0:e3:98:8d:6f:61:54:a4: 5a:46:10:fb:65:d6:3e:31:e0:80:49:11:9e:1a:3d: 0e:d7:b7:b3:0d:aa:d1:02:e9:47:e2:3c:b6:38:70: 1f:19:29:72:9d:cd:b6:8e:30:26:d1:09:1f:d4:e9: f6:6d:8f:ac:0e:ff:6c:54:f3:70:50:05:ab:2e:49: de:22:cf:ac:8b:2d:3e:73:13:34:f3:e9:51:a0:08: 14:83:49:eb:f6:44:d8:80:01:06:0f:06:61:e3:bf: 27:cf:53:7d:7f:81:67:b2:47:26:a9:6f:4b:39:09: 20:4d:90:66:fe:98:4f:ba:8e:1a:1b:1b:a1:f0:17: e4:13:b1:24:b7:c1:ad:af:0d:30:57:cd:5a:8a:18: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:E5:9B:15:49:21:8A:08:D9:08:C0:C2:3E:81:16:B3:17:9F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43d9ebec-edeb-3526-bf66-0502bcc7a914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.244.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:df:b4:df:c5:48:75:d1:16:48:28:c3:79:04:7a:69:a0:2f: 3a:46:47:46:54:1b:29:3b:fa:d4:05:50:1a:96:6c:f3:59:f3: af:ad:d3:ae:0d:9e:0e:8f:42:aa:91:a5:b1:c7:4a:19:ac:0e: 9f:ba:83:ea:58:7f:3f:cb:e5:a6:d3:ee:07:d3:08:28:d0:8c: dd:f5:54:06:cb:74:c8:32:1a:3b:f8:79:0b:48:51:5b:be:36: 1f:f6:dd:c6:c7:71:91:68:19:5a:57:a9:6b:ff:fd:54:0e:8e: df:7b:e1:68:f0:c6:f6:60:b4:60:f8:32:21:88:a2:9d:ab:da: 29:c8:84:cc:14:76:10:1e:5b:c7:7a:de:2c:70:5d:29:83:4a: d5:58:84:9e:f4:e6:d7:ef:52:7c:58:12:96:83:dd:fd:dc:75: 72:6c:a5:a3:89:e3:bf:c2:ee:2e:05:d9:85:2a:14:6a:03:ff: af:54:8b:74:97:31:5a:c7:bb:99:d5:d0:7e:2c:b6:14:15:35: d4:89:52:26:bc:b9:51:8c:d2:0a:88:71:ee:46:f5:27:5c:eb: 96:0c:97:ff:47:5d:3b:34:4f:62:34:99:2f:66:0d:1d:33:86: d0:e6:37:18:d4:0c:3d:f2:98:a3:8e:50:25:8d:95:08:9c:ff: 56:9b:b2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUcDGQOBZ93pXZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk OTI5ZmJiOWQtMzMzMy00YjIwLWFlMGQtZGNhNWRjODQxYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYj8udmNUaJ9ClnLG/8+lOnTzbF7GhKBnDkd TPGYv5RN6ihBJhZURLcJOKi8IOG2c6/xhpiE9HIAd4wPC3rTw941+wbr2hmnPZ03 zr8+GZ73ehK1yPhhG9QKIS7stT/b1G6vGVzK3iednTk6q4BUwOOYjW9hVKRaRhD7 ZdY+MeCASRGeGj0O17ezDarRAulH4jy2OHAfGSlync22jjAm0Qkf1On2bY+sDv9s VPNwUAWrLkneIs+siy0+cxM08+lRoAgUg0nr9kTYgAEGDwZh478nz1N9f4Fnskcm qW9LOQkgTZBm/phPuo4aGxuh8BfkE7Ekt8Gtrw0wV81aihgqiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnN5ZsVSSGKCNkIwMI+gRazF58yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDNkOWViZWMtZWRlYi0z NTI2LWJmNjYtMDUwMmJjYzdhOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/QgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrftN/FSHXRFkgow3kEemmgLzpGR0ZUGyk7+tQFUBqWbPNZ86+t064N ng6PQqqRpbHHShmsDp+6g+pYfz/L5abT7gfTCCjQjN31VAbLdMgyGjv4eQtIUVu+ Nh/23cbHcZFoGVpXqWv//VQOjt974WjwxvZgtGD4MiGIop2r2inIhMwUdhAeW8d6 3ixwXSmDStVYhJ705tfvUnxYEpaD3f3cdXJspaOJ47/C7i4F2YUqFGoD/69Ui3SX MVrHu5nV0H4sthQVNdSJUia8uVGM0gqIce5G9Sdc65YMl/9HXTs0T2I0mS9mDR0z htDmNxjUDD3ymKOOUCWNlQic/1absqA= -----END CERTIFICATE-----Generated at Sat Aug 22 19:34:13 2026 by rpki-client