$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c666720c-c4a6-3c57-a83f-23e2786a99c2.roa File: c666720c-c4a6-3c57-a83f-23e2786a99c2.roa (raw, json) Hash identifier: A2rgTkDvx66/3gHd/RgKfMeU+Z+XPagT4EZ/f7NUfiA= Subject key identifier: 48:58:DB:BC:C2:1C:56:E5:86:2C:8B:24:71:CC:15:80:46:67:12:7A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF615A74E645AA720A244800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c666720c-c4a6-3c57-a83f-23e2786a99c2.roa Signing time: Tue 12 May 2026 14:50:03 +0000 ROA not before: Tue 12 May 2026 14:50:03 +0000 ROA not after: Mon 10 Aug 2026 14:50:03 +0000 asID: 43515 IP address blocks: 35.206.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:61:5a:74:e6:45:aa:72:0a:24:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:50:03 2026 GMT Not After : Aug 10 14:50:03 2026 GMT Subject: CN=8cc7d682-b904-4f3e-9cb5-7f5d48a0b4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:53:2f:38:bf:af:d6:af:f3:c2:d0:1d:2d:ce: f8:72:c9:7a:eb:b8:3b:4c:25:7d:a5:55:d9:77:cc: 32:06:ff:05:08:73:f2:97:bb:e3:0f:35:49:dc:11: ed:70:17:4f:ba:41:c2:14:ab:ea:64:84:47:66:72: ef:c2:e9:0b:e0:98:da:7d:0d:ef:0a:32:05:01:eb: c3:13:e1:48:db:ec:4c:0a:a5:31:90:dd:e7:a0:d8: ff:36:c7:8b:1c:c6:ba:0f:23:ce:b7:f7:ff:e9:2b: 98:01:c3:08:a5:40:27:74:62:c1:dc:f8:5f:7c:3a: 6d:b4:ce:09:43:3f:b6:02:1a:45:1f:7c:65:1d:b3: 75:3c:e4:ab:4a:7d:de:f1:4d:75:5c:6c:49:a0:4c: be:e1:5a:3d:08:d9:fb:67:8c:bf:ed:75:a2:b7:1e: 2b:82:16:23:0c:4d:ce:49:dd:95:ae:66:54:61:c4: fb:63:99:3a:70:4c:45:7f:53:cd:5c:a1:84:b6:4e: f7:5e:8e:42:08:f0:c2:7c:14:33:0c:00:0c:ef:4a: 0e:b1:97:3c:c9:d0:30:62:35:3e:f8:a1:e1:89:4d: 76:0c:db:82:22:ba:e9:4a:4f:43:c3:55:77:bb:da: 6b:db:9d:a2:50:6f:e9:1a:c5:11:a9:74:40:cd:83: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:58:DB:BC:C2:1C:56:E5:86:2C:8B:24:71:CC:15:80:46:67:12:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c666720c-c4a6-3c57-a83f-23e2786a99c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:47:98:47:3f:3d:71:9f:27:92:4f:1b:87:39:34:10:37:7b: 9c:ca:2a:83:05:16:ac:d8:ac:80:f4:c1:5c:2b:3f:f2:0c:a8: d4:ee:16:a1:57:81:1e:53:d9:de:9f:15:54:7b:74:7a:f5:41: c4:d0:bd:dd:d9:09:35:10:0a:fc:e3:b1:b5:c1:34:a8:ca:8f: d5:e5:a2:38:30:b9:8a:a3:c7:66:5f:e3:ad:2b:44:d3:44:14: f0:03:2c:3d:bb:8c:9e:0e:cc:79:6c:5e:34:70:22:9b:57:a5: b8:d4:23:03:c2:39:b3:62:44:46:a9:28:a5:d6:a1:40:af:e8: 47:0f:f4:6a:d3:12:97:71:a8:b5:2f:8e:07:da:ea:5d:0f:44: e8:2b:29:cd:59:4e:4c:a2:b2:bd:53:be:03:b8:57:88:ff:e4: 69:e7:61:db:a0:96:7a:ea:a5:6d:70:4d:97:60:95:a1:f4:c7: fd:68:9b:a9:b2:ca:ed:a5:da:80:e5:9f:bb:a4:d9:d6:2b:10: da:cf:66:50:1b:63:dd:cf:d9:5e:70:cf:d2:17:d1:1a:2a:54: 6a:36:5c:7d:98:61:0d:d8:86:54:4d:96:4b:9f:d1:37:8e:4a: 1a:d8:fd:43:78:09:9a:35:6b:c2:de:93:42:18:7d:75:8e:0f: d6:65:be:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYVp05kWqcgokSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NTAwM1oXDTI2MDgxMDE0NTAwM1owLzEtMCsGA1UEAxMk OGNjN2Q2ODItYjkwNC00ZjNlLTljYjUtN2Y1ZDQ4YTBiNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1MvOL+v1q/zwtAdLc74csl667g7TCV9pVXZ d8wyBv8FCHPyl7vjDzVJ3BHtcBdPukHCFKvqZIRHZnLvwukL4JjafQ3vCjIFAevD E+FI2+xMCqUxkN3noNj/NseLHMa6DyPOt/f/6SuYAcMIpUAndGLB3PhffDpttM4J Qz+2AhpFH3xlHbN1POSrSn3e8U11XGxJoEy+4Vo9CNn7Z4y/7XWitx4rghYjDE3O Sd2VrmZUYcT7Y5k6cExFf1PNXKGEtk73Xo5CCPDCfBQzDAAM70oOsZc8ydAwYjU+ +KHhiU12DNuCIrrpSk9Dw1V3u9pr252iUG/pGsURqXRAzYOUmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhY27zCHFblhiyLJHHMFYBGZxJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzY2NjcyMGMtYzRhNi0z YzU3LWE4M2YtMjNlMjc4NmE5OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5HmEc/PXGfJ5JPG4c5NBA3e5zKKoMFFqzYrID0wVwrP/IMqNTuFqFX gR5T2d6fFVR7dHr1QcTQvd3ZCTUQCvzjsbXBNKjKj9XlojgwuYqjx2Zf460rRNNE FPADLD27jJ4OzHlsXjRwIptXpbjUIwPCObNiREapKKXWoUCv6EcP9GrTEpdxqLUv jgfa6l0PROgrKc1ZTkyisr1TvgO4V4j/5GnnYduglnrqpW1wTZdglaH0x/1om6my yu2l2oDln7uk2dYrENrPZlAbY93P2V5wz9IX0RoqVGo2XH2YYQ3YhlRNlkuf0TeO ShrY/UN4CZo1a8Lek0IYfXWOD9ZlvoM= -----END CERTIFICATE-----Generated at Wed May 13 13:46:19 2026 by rpki-client