$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa File: a31dff1c-139d-388a-a3e6-347acb99e941.roa (raw, json) Hash identifier: 1ccr8AVO3BhH5hlJyb++UvXH2k6bUhl1gu7Pw/yYBd8= Subject key identifier: 29:C6:28:33:BE:BB:0E:B0:81:CC:71:70:D1:D2:C3:D8:93:95:C3:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EAA51AC28E9404A0E3368E880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 35.243.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:ac:28:e9:40:4a:0e:33:68:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=b5ebf7f6-ec38-4152-bf8b-7f2645e43c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:99:94:b4:f7:bc:31:c6:b5:44:57:85:d5: 1d:f0:6f:54:d8:df:fd:93:7d:7a:2e:e0:81:8f:41: cc:69:65:cd:39:14:9f:d2:1b:79:cf:48:ae:e9:08: ad:0c:0d:e9:05:61:92:e5:64:20:e4:e1:c4:4f:da: 2d:f3:71:c1:7d:64:c8:0c:4d:df:8f:8b:57:28:81: 50:42:fb:d7:9c:58:c4:99:30:bc:f3:68:55:8d:64: 06:b7:4d:c0:20:80:d6:29:0d:90:df:af:f8:73:bb: d7:59:af:bb:22:1a:18:f7:23:7e:e1:1d:02:40:f4: 16:85:8a:31:74:10:2c:9c:d0:48:8b:16:8d:11:58: 3e:44:d4:fe:4a:45:52:ea:42:86:02:47:ad:4e:eb: 21:39:4a:92:a1:0e:b9:de:ff:28:64:95:73:30:b7: 46:9e:16:c7:1d:5e:74:bd:b6:82:58:26:f4:6b:a3: 24:91:e9:ec:ce:fa:cd:f3:79:4d:3c:2b:de:fd:db: 8c:38:5f:d7:6a:29:eb:21:01:d2:a0:9d:82:f7:a8: 1a:3f:e6:10:04:6f:40:2d:41:b2:ae:3d:87:ae:e3: e6:69:e9:77:53:48:4d:b9:33:34:70:6d:7e:16:3b: 41:a4:74:1b:3a:80:14:89:3f:88:63:04:3f:bb:19: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C6:28:33:BE:BB:0E:B0:81:CC:71:70:D1:D2:C3:D8:93:95:C3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:07:17:28:b3:28:b0:d2:fa:f8:2e:de:d8:a5:91:19:52:00: 43:19:4f:e4:50:10:45:3f:6f:01:1b:62:e0:4f:96:0e:78:81: 66:ff:5b:0f:47:b7:f4:3e:18:d1:1c:1d:97:29:e5:ec:b1:4c: 91:13:34:08:7b:80:a2:53:b3:4b:51:0d:49:29:c7:47:c6:42: 8f:5d:9e:ff:39:e2:ec:24:19:a2:c1:c2:fa:bc:99:1a:a6:14: c8:f9:3b:8a:4f:64:f5:78:7c:a2:21:6e:af:5f:d5:5d:ec:66: e3:6f:81:77:63:43:b1:72:74:38:75:6d:51:35:c4:34:6a:c8: 02:89:41:91:9b:db:45:80:b5:61:f5:ed:91:5c:71:bd:09:dc: 37:9c:69:97:89:a3:51:bf:db:b9:83:05:06:9c:73:3d:4d:e4: ac:7c:c1:9f:03:bb:7b:1f:18:d7:36:5d:8f:4a:3c:db:8e:5f: 10:11:40:26:f3:7d:e5:e6:e1:cc:e5:48:e2:92:ee:2d:2d:32: 17:fb:ca:c3:51:e3:6c:23:b6:99:38:9b:95:dc:36:7c:9b:b2: 64:db:7c:1d:38:ed:61:5d:26:0e:02:5d:b0:69:1b:73:89:73: b9:4e:05:57:bc:5a:50:83:c7:90:c0:6a:06:57:9a:72:cd:27: 32:ce:34:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUawo6UBKDjNo6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk YjVlYmY3ZjYtZWMzOC00MTUyLWJmOGItN2YyNjQ1ZTQzYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKeZlLT3vDHGtURXhdUd8G9U2N/9k316LuCB j0HMaWXNORSf0ht5z0iu6QitDA3pBWGS5WQg5OHET9ot83HBfWTIDE3fj4tXKIFQ QvvXnFjEmTC882hVjWQGt03AIIDWKQ2Q36/4c7vXWa+7IhoY9yN+4R0CQPQWhYox dBAsnNBIixaNEVg+RNT+SkVS6kKGAketTushOUqSoQ653v8oZJVzMLdGnhbHHV50 vbaCWCb0a6MkkenszvrN83lNPCve/duMOF/XainrIQHSoJ2C96gaP+YQBG9ALUGy rj2HruPmael3U0hNuTM0cG1+FjtBpHQbOoAUiT+IYwQ/uxl3JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnGKDO+uw6wgcxxcNHSw9iTlcNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTMxZGZmMWMtMTM5ZC0z ODhhLWEzZTYtMzQ3YWNiOTllOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYHFyizKLDS+vgu3tilkRlSAEMZT+RQEEU/bwEbYuBPlg54gWb/Ww9H t/Q+GNEcHZcp5eyxTJETNAh7gKJTs0tRDUkpx0fGQo9dnv854uwkGaLBwvq8mRqm FMj5O4pPZPV4fKIhbq9f1V3sZuNvgXdjQ7FydDh1bVE1xDRqyAKJQZGb20WAtWH1 7ZFccb0J3DecaZeJo1G/27mDBQaccz1N5Kx8wZ8Du3sfGNc2XY9KPNuOXxARQCbz feXm4czlSOKS7i0tMhf7ysNR42wjtpk4m5XcNnybsmTbfB047WFdJg4CXbBpG3OJ c7lOBVe8WlCDx5DAagZXmnLNJzLONL0= -----END CERTIFICATE-----Generated at Sat Aug 8 01:51:59 2026 by rpki-client