$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa File: 4867dc89-6f52-3a23-9d9c-4e26531651da.roa (raw, json) Hash identifier: FZ6L/31i/+mXWuVvwihGSr0wpq+DsIo2Kv1kX3r7Ubc= Subject key identifier: 76:EB:B0:AC:0B:BD:3D:74:AC:C8:BF:88:00:32:7A:A2:DC:E0:B8:C0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51C6D393996EDFE1439BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 35.235.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:c6:d3:93:99:6e:df:e1:43:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=586f09c6-c79d-4f89-9241-a2290f4788a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:95:04:b4:81:3a:cf:f3:86:88:17:dc:9c: 27:21:77:f3:db:2c:a2:61:26:13:16:72:ce:0e:3d: 02:25:84:1a:ee:82:e7:1f:50:a6:44:d6:e8:b7:60: f5:c0:86:59:4b:8e:63:44:f5:b1:60:a3:cc:be:6f: 6a:92:2d:d7:21:eb:da:82:57:2f:09:bc:be:5d:17: bd:aa:e7:25:96:0e:0e:e1:d0:80:c1:a0:04:84:fb: 8a:54:ee:9d:74:2e:f5:98:bb:9a:9a:a3:3e:b9:c2: a9:55:6f:a2:90:10:f1:76:db:81:9d:e0:8d:25:13: de:f5:d2:05:68:04:ea:ad:0e:20:ed:3a:15:7b:65: 7d:55:01:19:db:b6:bf:e7:ff:ee:ad:48:3e:e6:f3: 8c:75:ea:27:2a:5a:a1:5e:73:9f:af:a0:46:b1:94: a0:86:1e:42:6c:a7:b9:8b:99:c0:79:72:db:0d:38: 04:cc:9b:ae:b8:68:ae:88:38:6c:2f:42:71:69:4e: 2a:2a:d5:71:5b:0d:fb:df:b2:ec:bb:08:b4:8a:53: b5:2b:df:87:4c:cd:11:47:dd:13:3b:40:6e:48:2b: 1f:a6:f2:e9:41:47:43:78:bf:b2:9f:1e:4d:25:09: 93:38:17:ae:d2:4a:ee:75:c3:b4:a0:13:55:9c:0b: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EB:B0:AC:0B:BD:3D:74:AC:C8:BF:88:00:32:7A:A2:DC:E0:B8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e3:d2:e4:d4:b4:74:32:fb:f6:ad:2b:5a:68:bc:47:cd:ed: 03:70:50:40:86:2e:55:1b:5d:5f:3f:6c:14:a0:8b:1b:94:14: bc:fc:91:6c:bf:94:d6:ed:40:f8:d8:c0:b1:3b:5c:bd:1f:68: 91:64:45:92:91:2e:05:3e:3a:e6:8c:6f:b1:0d:67:75:db:82: 6b:f3:f4:d4:54:4a:ca:54:89:23:9e:92:f3:8d:80:51:52:73: 44:a5:04:8b:dc:b7:9a:3c:d3:a4:f4:30:fa:6e:37:1b:b7:e5: 8a:79:b9:50:c0:11:74:1a:9f:61:aa:d5:0a:a6:34:21:a8:71: 54:7b:fa:66:85:f0:67:29:7e:88:cc:01:f8:54:e3:d7:3c:f7: 6d:bd:90:1b:0e:d0:22:26:2b:1b:51:74:00:1c:af:d1:5b:09: c2:b0:63:3f:71:d7:3a:ed:d5:8e:61:04:ae:db:62:80:a2:a1: a3:35:67:4a:30:6e:ee:9c:d4:75:63:e1:a5:ef:ad:c4:a1:3e: db:7f:97:d7:12:b2:9f:be:9f:d0:bd:67:aa:1d:9b:3c:95:1a: 25:6c:bb:25:f0:ec:82:20:2e:e3:72:35:f7:a8:d5:11:c3:3b: ae:61:8f:50:51:8d:d8:97:95:cd:86:8d:04:fd:0f:3e:c7:06: 5a:47:8f:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUcbTk5lu3+FDm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk NTg2ZjA5YzYtYzc5ZC00Zjg5LTkyNDEtYTIyOTBmNDc4OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF+VBLSBOs/zhogX3JwnIXfz2yyiYSYTFnLO Dj0CJYQa7oLnH1CmRNbot2D1wIZZS45jRPWxYKPMvm9qki3XIevaglcvCby+XRe9 qucllg4O4dCAwaAEhPuKVO6ddC71mLuamqM+ucKpVW+ikBDxdtuBneCNJRPe9dIF aATqrQ4g7ToVe2V9VQEZ27a/5//urUg+5vOMdeonKlqhXnOfr6BGsZSghh5CbKe5 i5nAeXLbDTgEzJuuuGiuiDhsL0JxaU4qKtVxWw3737Lsuwi0ilO1K9+HTM0RR90T O0BuSCsfpvLpQUdDeL+ynx5NJQmTOBeu0krudcO0oBNVnAukzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbrsKwLvT10rMi/iAAyeqLc4LjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDg2N2RjODktNmY1Mi0z YTIzLTlkOWMtNGUyNjUzMTY1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfj0uTUtHQy+/atK1povEfN7QNwUECGLlUbXV8/bBSgixuUFLz8kWy/ lNbtQPjYwLE7XL0faJFkRZKRLgU+OuaMb7ENZ3Xbgmvz9NRUSspUiSOekvONgFFS c0SlBIvct5o806T0MPpuNxu35Yp5uVDAEXQan2Gq1QqmNCGocVR7+maF8GcpfojM AfhU49c89229kBsO0CImKxtRdAAcr9FbCcKwYz9x1zrt1Y5hBK7bYoCioaM1Z0ow bu6c1HVj4aXvrcShPtt/l9cSsp++n9C9Z6odmzyVGiVsuyXw7IIgLuNyNfeo1RHD O65hj1BRjdiXlc2GjQT9Dz7HBlpHjxk= -----END CERTIFICATE-----Generated at Sat Aug 22 19:34:21 2026 by rpki-client