$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa File: 3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa (raw, json) Hash identifier: QRpTYKHEScD9ZA6sUZd9sv+Rnwd7BMO7c6zquU5hbGI= Subject key identifier: 4D:A9:05:8D:88:87:C8:55:BB:27:20:E3:45:32:65:DB:FA:04:29:23 Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F4328584F3E47D5F26F8C7A25B1E1E900 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 62676 IP address blocks: 35.7.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d5:f2:6f:8c:7a:25:b1:e1:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=dcf52e2a-7a7d-4a52-ba86-d59d66c07b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:6a:92:6a:77:4f:e7:cc:13:bb:80:73:21: b6:f9:43:85:d7:29:51:6d:5d:14:f8:e9:65:3d:4c: 93:40:c6:a3:b8:91:73:96:c5:3e:6f:aa:e4:81:79: c9:cc:0d:59:6e:e6:ef:3c:d4:e9:6f:bc:6e:90:81: c6:56:7a:6b:71:05:07:d4:b5:38:cd:21:f3:77:55: 81:1b:f8:68:40:f1:5e:bb:8f:65:1a:7c:14:f6:60: 45:87:5b:ae:5d:47:b0:b1:99:51:68:49:db:97:ce: b1:be:04:20:1b:51:d6:f8:03:2e:a8:ad:40:f4:4b: 76:55:84:b6:e4:b8:44:8c:7d:de:ff:16:c4:27:7e: f0:57:30:98:e1:ad:3c:59:14:53:7d:9b:e3:65:92: c4:02:d7:52:f4:61:23:bb:71:02:c7:b7:da:c2:cf: 49:4a:66:ca:68:3a:7a:3d:ae:36:7f:53:bf:bc:e9: 0f:68:1b:20:88:67:73:87:15:cb:15:3c:71:67:7b: 6d:a0:5a:f8:0d:96:0d:d6:ca:6e:00:b4:a8:87:fd: 0f:dd:d5:8a:8d:1b:d3:c7:0f:2f:4a:b1:98:d6:3e: e1:ae:aa:ac:4a:d0:cb:49:36:91:10:43:82:49:04: a3:94:d0:3c:83:65:a2:4e:4a:f6:d4:9b:8c:a5:bb: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:05:8D:88:87:C8:55:BB:27:20:E3:45:32:65:DB:FA:04:29:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.7.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8c:5c:60:f9:d8:e2:80:b6:fd:aa:ca:45:da:23:78:61:2d: 52:af:e5:ab:cc:69:c3:80:b3:5f:d9:3a:a7:e3:bb:40:24:e2: c1:b0:e7:79:22:43:57:3b:15:77:a5:92:79:54:cf:48:75:3d: a5:a7:50:47:7e:62:cc:6c:d9:10:91:2f:c7:c7:78:7a:9e:b8: 3c:d6:f8:dc:0c:d2:9c:c7:70:c4:69:bc:ea:2b:ac:a2:ec:72: 01:9a:24:7e:d7:60:8c:db:62:6c:aa:46:e4:46:bd:f2:5c:21: 50:65:47:1d:6b:44:1d:aa:ab:90:46:4b:4f:71:07:9a:a5:75: 9a:94:2c:32:ab:d6:c2:67:3d:78:bc:27:2b:7d:42:1e:ac:d5: 55:5d:e3:5d:61:b0:e1:77:c6:a0:f0:f9:29:c4:9f:f7:01:3d: 8d:23:20:5b:f6:15:4b:3c:da:97:cb:aa:9f:af:1a:d5:50:9c: 78:46:19:13:1b:b5:90:61:25:99:f2:f4:43:91:1a:c5:90:4d: 9c:7b:5b:62:83:03:cd:ce:fd:60:20:5d:01:c8:75:0d:ab:6e: ba:54:60:70:cc:12:e9:45:b1:a2:18:9d:31:e5:76:f6:de:82: 71:72:db:33:f5:6d:dd:65:75:bd:08:28:e6:db:a1:4a:2a:5d: 9a:ae:fd:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9Xyb4x6JbHh6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZGNmNTJlMmEtN2E3ZC00YTUyLWJhODYtZDU5ZDY2YzA3YjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqapqkmp3T+fME7uAcyG2+UOF1ylRbV0U+Oll PUyTQMajuJFzlsU+b6rkgXnJzA1ZbubvPNTpb7xukIHGVnprcQUH1LU4zSHzd1WB G/hoQPFeu49lGnwU9mBFh1uuXUewsZlRaEnbl86xvgQgG1HW+AMuqK1A9Et2VYS2 5LhEjH3e/xbEJ37wVzCY4a08WRRTfZvjZZLEAtdS9GEju3ECx7faws9JSmbKaDp6 Pa42f1O/vOkPaBsgiGdzhxXLFTxxZ3ttoFr4DZYN1spuALSoh/0P3dWKjRvTxw8v SrGY1j7hrqqsStDLSTaREEOCSQSjlNA8g2WiTkr21JuMpbukfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2pBY2Ih8hVuycg40UyZdv6BCkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvM2M4ZDRjN2UtMGVlYS0z MjE3LWJiZjctMTk1MWJmZjdkYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIwfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWMXGD52OKAtv2qykXaI3hhLVKv5avMacOAs1/ZOqfju0Ak4sGw53ki Q1c7FXelknlUz0h1PaWnUEd+Ysxs2RCRL8fHeHqeuDzW+NwM0pzHcMRpvOorrKLs cgGaJH7XYIzbYmyqRuRGvfJcIVBlRx1rRB2qq5BGS09xB5qldZqULDKr1sJnPXi8 Jyt9Qh6s1VVd411hsOF3xqDw+SnEn/cBPY0jIFv2FUs82pfLqp+vGtVQnHhGGRMb tZBhJZny9EORGsWQTZx7W2KDA83O/WAgXQHIdQ2rbrpUYHDMEulFsaIYnTHldvbe gnFy2zP1bd1ldb0IKObboUoqXZqu/SM= -----END CERTIFICATE-----Generated at Thu Sep 24 15:50:26 2026 by rpki-client