$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc2e9d78-3a00-39bc-8707-5f56a14c43e9.roa File: dc2e9d78-3a00-39bc-8707-5f56a14c43e9.roa (raw, json) Hash identifier: 4HLIlFl+GFNPjUTJd+C9vwi5PtfcKiogB+48fiX2bKw= Subject key identifier: 8D:21:1B:C4:F4:60:07:74:37:1D:EC:94:75:45:B5:F9:FD:19:D3:59 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DCF5DDFC254AFA5499C25E940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc2e9d78-3a00-39bc-8707-5f56a14c43e9.roa Signing time: Tue 12 May 2026 14:43:03 +0000 ROA not before: Tue 12 May 2026 14:43:03 +0000 ROA not after: Mon 10 Aug 2026 14:43:03 +0000 asID: 396982 IP address blocks: 35.217.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:5d:df:c2:54:af:a5:49:9c:25:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 12 14:43:03 2026 GMT Not After : Aug 10 14:43:03 2026 GMT Subject: CN=a62c1daa-5b34-42db-b926-55944d021e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:d5:2f:70:e6:5a:32:0a:b5:93:02:d9:32: 68:07:6b:66:ec:08:f5:06:ef:7c:06:79:17:09:45: f8:98:7d:44:8e:f4:4c:f0:89:20:20:63:d1:4b:11: 87:3e:86:15:b1:43:64:54:5a:a7:39:fe:1b:a3:c9: 5a:01:e7:ff:f4:32:1b:ee:18:a3:7c:f5:35:5e:99: aa:3d:72:28:f9:ac:b0:7a:70:1c:e9:b3:cc:45:c7: 15:2e:d6:8e:05:b5:f6:0c:51:fc:63:b7:91:1a:71: 99:1d:bd:cf:f4:cc:8f:6b:96:f1:ff:6b:11:80:62: 9b:9d:aa:53:d1:a3:53:0c:64:16:03:65:cc:5c:be: 4f:2d:b6:a2:5f:f1:30:39:3c:39:d2:a6:10:24:c2: cc:08:68:55:92:08:9e:24:b4:b4:d3:3d:13:50:df: 5a:d9:6b:c2:68:90:d7:c9:b1:bc:bf:45:52:2e:f6: dd:de:aa:6f:e5:ed:2e:9f:5d:6a:e8:96:5b:d0:86: 06:d3:3e:5f:39:d6:40:f1:26:9c:8c:2a:46:19:f8: 0d:f6:ca:01:38:35:ba:91:ef:e9:27:6b:51:13:6e: f3:d9:82:ee:80:06:82:2e:a7:f0:67:27:ca:86:10: 3c:ae:e9:e0:02:47:56:49:35:02:14:5c:14:35:49: d4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:21:1B:C4:F4:60:07:74:37:1D:EC:94:75:45:B5:F9:FD:19:D3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc2e9d78-3a00-39bc-8707-5f56a14c43e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:54:02:0d:5e:2b:42:39:b2:61:07:3d:89:1b:32:30:36:2e: d5:a6:e3:71:04:f7:1b:c6:56:20:a1:bd:7e:ae:56:b0:ad:8f: 13:cf:4e:f2:0c:a1:95:89:b2:f6:5f:d6:51:f3:4f:96:e4:77: 56:af:ef:e4:d0:3f:7b:af:c3:d5:d8:c0:6e:76:c4:67:ee:d4: 80:68:94:ed:21:65:59:fa:6d:d1:f5:d7:22:f4:5f:9e:b8:4c: c1:1d:0b:55:07:fb:7b:6f:7b:2b:d8:c4:8c:a2:02:b5:9a:02: 8d:98:5b:21:d5:e5:d1:c4:ab:53:c6:2d:6b:0d:13:12:25:a1: 56:75:c1:dc:d9:8f:41:35:b9:bd:56:b9:d3:1b:99:1d:95:41: 7a:6f:94:8a:76:5f:37:e6:e0:ea:b4:46:b3:b7:b2:7f:af:a5: 1e:09:26:2a:42:b2:2d:28:d2:65:22:3d:1c:cb:13:de:13:5b: 73:d2:44:9c:89:b8:6a:42:8c:7a:b7:1c:b3:14:7f:8a:d1:8e: 05:f6:b7:5e:d4:e3:df:4a:6d:72:b1:90:dd:ff:a6:15:91:10: 23:c3:f9:a6:58:24:16:c9:bc:e1:8f:19:98:d9:ca:7a:6b:a0: ee:77:51:f2:76:2b:ed:3f:f0:fb:38:ec:7c:46:aa:5f:ce:5d: 87:be:66:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PXd/CVK+lSZwl6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUxMjE0NDMwM1oXDTI2MDgxMDE0NDMwM1owLzEtMCsGA1UEAxMk YTYyYzFkYWEtNWIzNC00MmRiLWI5MjYtNTU5NDRkMDIxZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2bVL3DmWjIKtZMC2TJoB2tm7Aj1Bu98BnkX CUX4mH1EjvRM8IkgIGPRSxGHPoYVsUNkVFqnOf4bo8laAef/9DIb7hijfPU1Xpmq PXIo+aywenAc6bPMRccVLtaOBbX2DFH8Y7eRGnGZHb3P9MyPa5bx/2sRgGKbnapT 0aNTDGQWA2XMXL5PLbaiX/EwOTw50qYQJMLMCGhVkgieJLS00z0TUN9a2WvCaJDX ybG8v0VSLvbd3qpv5e0un11q6JZb0IYG0z5fOdZA8SacjCpGGfgN9soBODW6ke/p J2tRE27z2YLugAaCLqfwZyfKhhA8rungAkdWSTUCFFwUNUnU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0hG8T0YAd0Nx3slHVFtfn9GdNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGMyZTlkNzgtM2EwMC0z OWJjLTg3MDctNWY1NmExNGM0M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJUAg1eK0I5smEHPYkbMjA2LtWm43EE9xvGViChvX6uVrCtjxPPTvIM oZWJsvZf1lHzT5bkd1av7+TQP3uvw9XYwG52xGfu1IBolO0hZVn6bdH11yL0X564 TMEdC1UH+3tveyvYxIyiArWaAo2YWyHV5dHEq1PGLWsNExIloVZ1wdzZj0E1ub1W udMbmR2VQXpvlIp2Xzfm4Oq0RrO3sn+vpR4JJipCsi0o0mUiPRzLE94TW3PSRJyJ uGpCjHq3HLMUf4rRjgX2t17U499KbXKxkN3/phWRECPD+aZYJBbJvOGPGZjZynpr oO53UfJ2K+0/8Ps47HxGql/OXYe+Zic= -----END CERTIFICATE-----Generated at Wed May 13 14:34:41 2026 by rpki-client