$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa File: 627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa (raw, json) Hash identifier: yk4ikX4bZ/K43U7TGjsyAReru4aOXCISsEY27mTk/IU= Subject key identifier: 97:9A:6C:0E:BB:54:6E:AD:46:DE:62:AE:73:54:37:87:EB:B2:93:E5 Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584DBBA0455793F902C9AB28F0C0 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 231 IP address blocks: 35.8.0.0/13 maxlen: 24 35.20.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:45:57:93:f9:02:c9:ab:28:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=2f5db8a3-c600-4a5b-883a-429bb9b98096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:d3:43:86:34:45:2b:09:a2:63:b8:b0:6a: e5:9f:6f:bb:34:1f:d6:0a:60:13:ff:4f:d1:71:19: 13:a2:4e:c5:43:b9:01:80:44:ff:33:ea:46:b5:6a: 6c:8e:1b:d0:3b:64:25:15:39:04:36:26:08:90:6c: d5:32:3a:b4:fd:35:0b:1f:5d:61:c4:4a:87:43:ed: 31:eb:f0:f5:03:c1:7e:97:8c:67:1b:f9:6a:d6:25: 25:a3:d5:ad:f8:05:b8:ba:6a:57:24:fe:df:73:4d: bf:27:64:2e:e7:53:00:60:1e:59:6b:6f:02:67:b1: 16:e5:ce:9c:4d:0d:46:64:46:8b:d4:b6:d9:92:13: 29:39:95:b8:24:c5:52:4c:28:e3:d5:25:7a:8f:01: 4a:01:ae:0d:24:9a:2a:79:af:a7:be:43:f1:58:a2: 6f:9c:e0:83:8f:28:c0:0a:58:ee:ef:38:b8:61:d9: 93:aa:53:d2:5e:58:4c:9f:bc:6a:15:74:5a:37:66: 9d:6b:82:3a:aa:f2:1f:ee:f6:d2:86:8f:97:5d:7f: ff:c4:a1:8a:7f:01:f5:b6:55:ef:36:e7:16:5a:e3: b0:e8:72:f5:76:2f:2c:d6:ed:ee:5f:66:26:86:f8: e3:5d:0b:08:60:10:89:8a:59:fb:87:bc:80:d5:8d: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9A:6C:0E:BB:54:6E:AD:46:DE:62:AE:73:54:37:87:EB:B2:93:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.8.0.0/13 35.20.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5f:17:ed:88:58:dd:5c:34:3a:1a:3a:87:f1:57:d7:98:97: 75:25:6d:ab:f6:a1:82:23:97:10:87:63:6f:a9:a1:ed:3a:d6: 10:35:2f:20:9f:52:89:2c:f7:e9:4f:bf:dc:28:96:68:ca:0a: 70:46:be:45:7a:e4:63:03:af:5b:87:24:d4:6a:e5:86:2c:cd: 06:e3:e5:9b:50:57:5c:1b:5a:f9:e5:57:f8:c2:f2:2e:97:e7: ff:d6:9a:5a:d7:92:c4:14:e5:1b:90:55:d1:bc:2a:4d:44:92: e2:23:28:16:75:94:02:2b:3c:71:dd:ce:c0:83:52:2f:b8:77: 6d:b9:d8:8f:ff:5f:9b:9a:49:75:64:f9:ce:1b:e1:e2:b4:3d: 54:95:07:0e:cf:50:a4:af:5e:cd:01:60:80:50:62:6a:4b:93: 77:54:76:b7:d4:81:ff:0f:32:e1:b1:62:a2:47:47:5b:97:ae: d2:c2:f2:d9:97:4a:1d:05:a7:35:0d:94:59:8d:a6:e0:46:62: 6c:82:35:2e:23:e8:85:48:e0:5f:3d:49:56:28:56:54:2b:b7: 5b:6d:ca:10:9d:77:a6:75:f4:e3:03:77:8b:17:88:bf:e6:ff: d9:81:8d:c1:15:0f:d4:b3:ff:01:8e:4c:f3:d7:92:4d:2d:45: fa:82:e1:46 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE27oEVXk/kCyaso8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk MmY1ZGI4YTMtYzYwMC00YTViLTg4M2EtNDI5YmI5Yjk4MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1LTQ4Y0RSsJomO4sGrln2+7NB/WCmAT/0/R cRkTok7FQ7kBgET/M+pGtWpsjhvQO2QlFTkENiYIkGzVMjq0/TULH11hxEqHQ+0x 6/D1A8F+l4xnG/lq1iUlo9Wt+AW4umpXJP7fc02/J2Qu51MAYB5Za28CZ7EW5c6c TQ1GZEaL1LbZkhMpOZW4JMVSTCjj1SV6jwFKAa4NJJoqea+nvkPxWKJvnOCDjyjA Clju7zi4YdmTqlPSXlhMn7xqFXRaN2ada4I6qvIf7vbSho+XXX//xKGKfwH1tlXv NucWWuOw6HL1di8s1u3uX2YmhvjjXQsIYBCJiln7h7yA1Y1TTwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFJeabA67VG6tRt5irnNUN4frspPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvNjI3NzExY2YtMGM0Ni0z MTAyLWE3YmYtNzk0MWEwYTFmYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMDIwgDAwIj FDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCrXxftiFjdXDQ6GjqH8VfXmJd1JW2r9qGCI5cQh2NvqaHtOtYQ NS8gn1KJLPfpT7/cKJZoygpwRr5FeuRjA69bhyTUauWGLM0G4+WbUFdcG1r55Vf4 wvIul+f/1ppa15LEFOUbkFXRvCpNRJLiIygWdZQCKzxx3c7Ag1IvuHdtudiP/1+b mkl1ZPnOG+HitD1UlQcOz1Ckr17NAWCAUGJqS5N3VHa31IH/DzLhsWKiR0dbl67S wvLZl0odBac1DZRZjabgRmJsgjUuI+iFSOBfPUlWKFZUK7dbbcoQnXemdfTjA3eL F4i/5v/ZgY3BFQ/Us/8Bjkzz15JNLUX6guFG -----END CERTIFICATE-----Generated at Wed May 13 11:28:15 2026 by rpki-client