$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f663d224-7c6e-37b6-a397-f3e647e4ad93.roa File: f663d224-7c6e-37b6-a397-f3e647e4ad93.roa (raw, json) Hash identifier: CXTiqmGSRDnHY8gAo3f++D4eLyDfn2moVW3cx8mJ+X4= Subject key identifier: 1A:D3:66:00:E4:02:EA:FA:4B:C7:E3:DF:42:1B:7E:2E:03:21:25:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D5FB569A2C244FA5AEE78DF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f663d224-7c6e-37b6-a397-f3e647e4ad93.roa Signing time: Thu 02 Apr 2026 14:48:54 +0000 ROA not before: Thu 02 Apr 2026 14:48:54 +0000 ROA not after: Wed 01 Jul 2026 14:48:54 +0000 asID: 396982 IP address blocks: 35.252.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:b5:69:a2:c2:44:fa:5a:ee:78:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 2 14:48:54 2026 GMT Not After : Jul 1 14:48:54 2026 GMT Subject: CN=2240e5bb-f3f9-488b-ab32-2fd38bdd0db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:fb:39:04:50:10:84:a2:a6:79:1b:eb:8f: 2d:74:99:9a:84:8e:0e:e8:cc:05:3e:3d:53:d3:02: 76:cf:c7:cd:91:eb:9f:7c:40:d3:06:01:6b:49:63: 80:81:22:03:88:f4:3e:c1:0f:31:41:a7:1d:97:73: 57:5b:9c:5a:45:58:cf:c0:a2:88:c6:5b:85:60:40: 6c:63:69:47:e5:5c:e6:88:e4:5e:6e:18:f8:e7:ad: db:02:cc:2f:7e:ad:63:20:b9:de:d1:2c:0a:21:bb: 21:2d:6e:6c:79:b9:2a:1c:cb:84:c4:39:ac:f0:fb: 97:0d:f0:1c:ae:2e:05:d4:65:17:55:59:ac:34:cc: 00:c1:bc:05:bd:65:ea:e1:04:a7:be:76:62:1a:77: 51:07:ba:6f:97:b9:c5:2d:d7:4c:ca:d0:c4:21:dc: 9a:1b:ca:04:aa:94:27:bc:cc:d4:71:a4:41:ce:ce: 90:3c:46:3a:55:ac:c3:6c:5b:76:b5:36:e1:f5:c5: 2f:38:3e:c2:51:a5:27:dc:50:5f:a7:04:b4:40:a4: b7:17:31:76:3c:29:e1:6f:4d:3a:f5:67:bc:b7:8a: 29:95:ca:70:61:6f:77:01:88:6c:a8:e4:38:27:50: 92:bc:fb:4e:81:a4:f2:a4:8b:c9:93:ef:0b:b8:67: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:66:00:E4:02:EA:FA:4B:C7:E3:DF:42:1B:7E:2E:03:21:25:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f663d224-7c6e-37b6-a397-f3e647e4ad93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.252.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:23:c6:36:b2:41:0d:2c:f7:a6:31:68:3d:c8:67:3a:97:37: f1:bd:bc:c9:2d:4e:04:e0:01:7e:9e:c8:b0:47:64:59:01:c5: 0c:c4:87:d9:8e:84:c8:06:3f:46:83:5b:7a:92:ac:32:c6:b6: 0d:18:ba:6d:2d:ad:91:c9:cd:93:1a:75:b4:e3:82:33:1b:58: 0e:84:0a:1b:e8:a6:3f:9c:74:e9:3c:21:eb:82:8b:10:83:5a: fb:c2:f4:49:a9:74:d8:dd:b9:e4:c0:f9:44:05:ad:66:49:b8: c6:e4:f0:26:07:f7:6e:56:f1:5c:e1:c0:c3:82:74:d0:94:15: 88:78:ab:31:52:88:20:87:e4:d4:7a:6a:ea:c7:ac:23:0b:ce: 67:0a:2e:de:20:92:d1:9a:3f:e4:b2:dc:1a:5a:db:e3:4d:9a: f8:d8:49:24:ea:d3:eb:dc:8f:60:15:09:5b:62:b7:7f:7c:68: 70:15:93:fd:fa:47:d9:af:ff:8f:9f:20:18:b5:3d:c7:1a:ed: c8:e2:ed:42:d1:2b:f2:38:a7:67:a4:fd:67:e1:bd:65:3b:6f: d0:e4:8a:38:56:5c:3c:d1:03:a6:3c:1b:1c:18:e4:d5:6e:1c: 84:be:5f:9c:76:61:b0:f6:06:29:46:47:2a:c6:09:2e:b9:e3: 5e:ca:b9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ftWmiwkT6Wu543wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwMjE0NDg1NFoXDTI2MDcwMTE0NDg1NFowLzEtMCsGA1UEAxMk MjI0MGU1YmItZjNmOS00ODhiLWFiMzItMmZkMzhiZGQwZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfn7OQRQEISipnkb648tdJmahI4O6MwFPj1T 0wJ2z8fNkeuffEDTBgFrSWOAgSIDiPQ+wQ8xQacdl3NXW5xaRVjPwKKIxluFYEBs Y2lH5VzmiORebhj4563bAswvfq1jILne0SwKIbshLW5sebkqHMuExDms8PuXDfAc ri4F1GUXVVmsNMwAwbwFvWXq4QSnvnZiGndRB7pvl7nFLddMytDEIdyaG8oEqpQn vMzUcaRBzs6QPEY6VazDbFt2tTbh9cUvOD7CUaUn3FBfpwS0QKS3FzF2PCnhb006 9We8t4oplcpwYW93AYhsqOQ4J1CSvPtOgaTypIvJk+8LuGdI6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrTZgDkAur6S8fj30Ibfi4DISU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjY2M2QyMjQtN2M2ZS0z N2I2LWEzOTctZjNlNjQ3ZTRhZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI/yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsjxjayQQ0s96YxaD3IZzqXN/G9vMktTgTgAX6eyLBHZFkBxQzEh9mO hMgGP0aDW3qSrDLGtg0Yum0trZHJzZMadbTjgjMbWA6EChvopj+cdOk8IeuCixCD WvvC9EmpdNjdueTA+UQFrWZJuMbk8CYH925W8VzhwMOCdNCUFYh4qzFSiCCH5NR6 aurHrCMLzmcKLt4gktGaP+Sy3Bpa2+NNmvjYSSTq0+vcj2AVCVtit398aHAVk/36 R9mv/4+fIBi1Pcca7cji7ULRK/I4p2ek/WfhvWU7b9DkijhWXDzRA6Y8GxwY5NVu HIS+X5x2YbD2BilGRyrGCS65417Kuao= -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:05 2026 by rpki-client