$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d16a2338-64ea-3717-b7e1-9b6636be480a.roa File: d16a2338-64ea-3717-b7e1-9b6636be480a.roa (raw, json) Hash identifier: ddsl8Grfjj9lAKwT0X0jRQsQENMhM597n6MY/WO3S0s= Subject key identifier: DA:7A:63:09:B0:14:00:3B:21:78:B5:68:0C:B9:80:32:8D:5D:28:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DA11ABA19B88D858CF4723900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d16a2338-64ea-3717-b7e1-9b6636be480a.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 396982 IP address blocks: 8.228.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:ba:19:b8:8d:85:8c:f4:72:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=3e3c7b1c-ff9f-4805-8e8c-d8548a9904a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:ea:cc:34:3a:5c:54:b2:c5:43:3f:ab:88: 34:4a:95:7b:79:76:7f:7d:5d:76:68:d2:c0:be:1e: 8e:5a:83:9c:b0:1c:a7:b4:8d:8a:86:ec:25:10:c8: 48:f1:c4:27:9c:22:6d:72:65:3f:bc:d7:be:65:64: c4:9f:00:49:35:3e:c3:37:c0:de:5b:2c:cd:49:5e: 33:9d:13:fe:b6:9b:aa:e9:9d:d2:0b:69:2e:8b:3b: 37:e2:23:52:5b:2d:90:d3:18:38:66:3d:0d:4f:08: d2:b8:a4:64:92:fb:1d:80:70:96:3f:13:8a:5f:40: d3:26:df:0f:66:1e:10:16:47:55:3b:de:49:1c:a5: 33:1a:1c:8a:4c:ef:8d:3e:78:03:c4:92:12:2c:87: 0d:1d:ef:b3:91:17:73:12:79:ae:91:0f:ad:98:da: e3:2a:aa:e3:78:d9:f8:1c:83:16:43:a8:8f:95:c0: d7:8e:cf:6b:bb:c0:2f:8b:a8:a0:85:89:62:9b:6c: 2b:eb:85:c0:40:fb:9d:bb:2d:1c:fd:46:d5:ba:10: 91:b5:63:d1:4a:f3:f4:1b:3f:f6:f2:32:d3:bf:11: ae:53:5a:89:11:9b:04:8b:ab:79:8d:a5:2b:ab:7c: 13:dd:53:c4:af:d6:73:4a:84:4b:25:a5:dd:c8:4d: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:63:09:B0:14:00:3B:21:78:B5:68:0C:B9:80:32:8D:5D:28:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d16a2338-64ea-3717-b7e1-9b6636be480a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 8.228.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8f:b9:e8:f8:b2:3e:8d:3c:d0:7e:1c:2e:ab:c8:b8:d5:e5: 84:80:7d:02:67:cd:6d:c3:b6:be:73:7e:2a:f2:9f:91:32:33: d4:5d:d8:de:88:df:ba:b1:6b:96:dd:b4:fb:10:4b:37:85:ee: 73:73:dd:9b:51:7b:da:a5:2b:eb:63:56:87:66:b5:d7:85:74: 5d:7c:fb:b7:7c:cc:45:45:fa:25:5b:8f:e2:98:6a:9f:3f:d2: 6b:40:51:f0:0e:85:f0:05:d4:1d:ce:5e:3a:e5:8c:1b:6b:32: c9:b3:b9:c6:a2:4c:b1:76:1d:fe:b6:8c:62:5c:44:ae:b3:d3: 54:4b:10:14:b6:69:c2:3e:6d:55:65:40:59:62:87:be:50:2b: bd:c7:0d:6f:4b:28:5d:c5:37:62:04:06:03:a9:bb:4e:28:d7: f2:3f:0e:61:b2:b0:3e:e7:66:8a:27:48:d8:9a:d5:17:9e:0c: f3:42:9c:a2:a5:ce:f7:2d:3e:a9:c3:05:b0:1b:63:02:64:ff: b0:1f:e6:f5:e3:9a:52:44:1a:03:4d:cf:00:44:d6:cd:cf:15: ae:0a:ac:5c:dd:fe:59:c3:71:c9:a3:78:78:2f:de:b6:ee:eb: 73:ba:43:18:32:16:bc:df:70:4a:ca:c6:41:97:6c:1f:55:51: bf:a3:04:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGroZuI2FjPRyOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk M2UzYzdiMWMtZmY5Zi00ODA1LThlOGMtZDg1NDhhOTkwNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxDqzDQ6XFSyxUM/q4g0SpV7eXZ/fV12aNLA vh6OWoOcsByntI2KhuwlEMhI8cQnnCJtcmU/vNe+ZWTEnwBJNT7DN8DeWyzNSV4z nRP+tpuq6Z3SC2kuizs34iNSWy2Q0xg4Zj0NTwjSuKRkkvsdgHCWPxOKX0DTJt8P Zh4QFkdVO95JHKUzGhyKTO+NPngDxJISLIcNHe+zkRdzEnmukQ+tmNrjKqrjeNn4 HIMWQ6iPlcDXjs9ru8Avi6ighYlim2wr64XAQPuduy0c/UbVuhCRtWPRSvP0Gz/2 8jLTvxGuU1qJEZsEi6t5jaUrq3wT3VPEr9ZzSoRLJaXdyE1XUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp6YwmwFAA7IXi1aAy5gDKNXSjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDE2YTIzMzgtNjRlYS0z NzE3LWI3ZTEtOWI2NjM2YmU0ODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFCOQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiPuej4sj6NPNB+HC6ryLjV5YSAfQJnzW3Dtr5zfiryn5EyM9Rd2N6I 37qxa5bdtPsQSzeF7nNz3ZtRe9qlK+tjVodmtdeFdF18+7d8zEVF+iVbj+KYap8/ 0mtAUfAOhfAF1B3OXjrljBtrMsmzucaiTLF2Hf62jGJcRK6z01RLEBS2acI+bVVl QFlih75QK73HDW9LKF3FN2IEBgOpu04o1/I/DmGysD7nZoonSNia1ReeDPNCnKKl zvctPqnDBbAbYwJk/7Af5vXjmlJEGgNNzwBE1s3PFa4KrFzd/lnDccmjeHgv3rbu 63O6QxgyFrzfcErKxkGXbB9VUb+jBOA= -----END CERTIFICATE-----Generated at Sun May 3 22:41:30 2026 by rpki-client