$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa8f27d9-3506-342e-8e67-014523b868ac.roa File: aa8f27d9-3506-342e-8e67-014523b868ac.roa (raw, json) Hash identifier: BVfKlLd+lL+YqX8xEjhwChqD+ADGWY+/U12hE9YbVq4= Subject key identifier: C0:CE:E9:40:8D:E7:B8:BE:C9:0E:43:41:1F:5D:49:0C:2B:3C:02:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF6318CF1B812013FF8E97A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa8f27d9-3506-342e-8e67-014523b868ac.roa Signing time: Tue 12 May 2026 14:53:34 +0000 ROA not before: Tue 12 May 2026 14:53:34 +0000 ROA not after: Mon 10 Aug 2026 14:53:34 +0000 asID: 43515 IP address blocks: 35.217.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:63:18:cf:1b:81:20:13:ff:8e:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:53:34 2026 GMT Not After : Aug 10 14:53:34 2026 GMT Subject: CN=cef90435-b383-4488-9407-e2400ed71802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:91:d9:bd:49:03:99:0e:19:5f:a7:b9:41: ba:5b:12:20:1c:36:0a:8e:85:3e:f1:12:ec:71:05: f1:a1:39:33:e8:aa:64:1c:26:b2:44:85:29:11:83: 5d:0c:44:71:98:f5:b3:14:86:ec:d1:7e:fd:81:57: 06:32:5f:d1:8b:cb:4e:4c:78:94:c9:e1:34:c8:b1: b8:d2:6f:12:27:84:ac:8c:c4:13:42:c1:e4:81:49: 09:4d:22:6a:7b:5f:bc:a2:6a:dd:7e:dd:f7:3a:c4: 30:ac:84:fa:85:09:3d:37:23:85:b1:78:db:93:c0: e6:d5:86:51:ee:96:b0:00:2b:08:44:79:ab:44:99: 32:4d:95:77:55:dc:28:d3:5f:a4:6d:12:e8:54:32: d2:3b:d3:d3:35:a5:2a:d8:86:41:35:0f:d2:37:cd: 2b:3f:9f:6a:6c:c5:c4:71:97:06:7f:e7:16:db:9b: 6c:50:2e:e7:ef:7e:c7:4c:a1:2d:bd:c4:1f:dc:c7: e3:e3:05:5b:97:98:00:dc:6f:33:ed:81:a6:53:00: 64:88:b1:26:0a:dd:43:f1:3e:b4:8a:e4:93:41:22: 19:ee:12:e3:12:dc:9c:e1:f9:02:ff:fc:c1:25:45: c6:a7:07:5d:d4:59:26:c3:ad:eb:b1:a0:be:a8:9a: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CE:E9:40:8D:E7:B8:BE:C9:0E:43:41:1F:5D:49:0C:2B:3C:02:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa8f27d9-3506-342e-8e67-014523b868ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:95:0e:19:54:83:f9:45:79:0a:1e:8a:0f:8f:18:ee:4a:f2: 95:d1:55:bc:07:cd:6e:b2:15:31:1b:05:98:9e:00:b8:a2:c4: 78:62:7d:40:3f:29:5a:09:29:4f:55:2d:1f:69:09:69:c4:22: f5:dd:7f:f3:05:92:ff:ef:e2:89:21:30:48:d1:00:af:fb:79: f8:0d:58:93:1e:67:e6:32:e8:22:56:10:0f:15:59:b0:4b:2e: 3f:82:59:9e:7b:05:29:29:78:60:88:10:a0:7a:ee:17:1d:4d: cd:bd:f3:f0:26:b7:03:9b:94:9b:91:8b:e9:e3:96:09:20:fc: 21:05:d2:ea:3f:1a:01:68:f7:c4:36:d9:6e:7d:b6:01:5d:25: 6b:0b:8f:63:20:87:c1:42:b4:c1:d1:0a:0c:21:1a:a2:af:bb: 8a:f9:45:14:cc:26:a6:a4:df:0c:08:01:90:6e:e2:37:37:d4: 96:8d:78:b1:36:42:e1:5d:0f:72:4a:5b:5c:e5:cd:89:c9:1c: 2f:5a:18:c6:21:c1:b5:ae:3c:12:15:6d:80:e7:db:8b:4b:bd: e6:d8:f5:f6:6f:27:87:b7:33:dd:c0:cb:05:85:cf:f5:77:a1: 97:07:19:1c:4f:c9:5f:b9:38:26:44:a7:d6:34:94:f7:a4:1a: 74:9e:33:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYxjPG4EgE/+Ol6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTMzNFoXDTI2MDgxMDE0NTMzNFowLzEtMCsGA1UEAxMk Y2VmOTA0MzUtYjM4My00NDg4LTk0MDctZTI0MDBlZDcxODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZeR2b1JA5kOGV+nuUG6WxIgHDYKjoU+8RLs cQXxoTkz6KpkHCayRIUpEYNdDERxmPWzFIbs0X79gVcGMl/Ri8tOTHiUyeE0yLG4 0m8SJ4SsjMQTQsHkgUkJTSJqe1+8omrdft33OsQwrIT6hQk9NyOFsXjbk8Dm1YZR 7pawACsIRHmrRJkyTZV3Vdwo01+kbRLoVDLSO9PTNaUq2IZBNQ/SN80rP59qbMXE cZcGf+cW25tsUC7n737HTKEtvcQf3Mfj4wVbl5gA3G8z7YGmUwBkiLEmCt1D8T60 iuSTQSIZ7hLjEtyc4fkC//zBJUXGpwdd1Fkmw63rsaC+qJrB/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDO6UCN57i+yQ5DQR9dSQwrPAL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE4ZjI3ZDktMzUwNi0z NDJlLThlNjctMDE0NTIzYjg2OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKVDhlUg/lFeQoeig+PGO5K8pXRVbwHzW6yFTEbBZieALiixHhifUA/ KVoJKU9VLR9pCWnEIvXdf/MFkv/v4okhMEjRAK/7efgNWJMeZ+Yy6CJWEA8VWbBL Lj+CWZ57BSkpeGCIEKB67hcdTc298/AmtwOblJuRi+njlgkg/CEF0uo/GgFo98Q2 2W59tgFdJWsLj2Mgh8FCtMHRCgwhGqKvu4r5RRTMJqak3wwIAZBu4jc31JaNeLE2 QuFdD3JKW1zlzYnJHC9aGMYhwbWuPBIVbYDn24tLvebY9fZvJ4e3M93AywWFz/V3 oZcHGRxPyV+5OCZEp9Y0lPekGnSeM90= -----END CERTIFICATE-----Generated at Wed May 13 13:26:50 2026 by rpki-client