$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa File: 09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa (raw, json) Hash identifier: 81Qoex5PY8EMiD8hCf8Cg01EIiQW7ShCBLfMCLBv7i8= Subject key identifier: 1C:8E:D0:D1:02:43:D5:82:B6:8E:B3:F4:30:F8:91:81:C2:F1:F8:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBC834B525F400B706900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.203.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bc:83:4b:52:5f:40:0b:70:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3c4cb6d5-048c-494b-8795-279b8e61fad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2e:25:41:ed:42:5b:f0:35:4b:0d:dd:66:fd: 34:08:42:3b:f8:0c:7f:9b:1f:a7:15:14:69:a4:09: 1a:09:60:78:60:4f:39:11:97:2c:fa:12:b0:e5:1e: c3:1a:2c:e7:42:d4:86:da:d5:3e:10:45:15:d0:98: f1:4c:17:26:93:0b:52:78:0a:8f:20:81:56:52:7e: cf:4d:13:e5:45:3f:a5:cf:37:5c:6c:17:83:37:a8: dc:be:d8:1a:83:b5:e7:52:f8:d9:21:a9:7b:63:cd: 95:04:49:b9:ad:da:b9:c3:09:ab:4f:c5:16:c1:0b: a6:08:8d:71:57:f9:51:85:bc:c0:2a:dc:8b:35:58: 85:77:84:90:fb:21:ca:d5:55:6a:eb:65:e5:28:94: 84:97:2a:68:7e:b6:91:80:a2:52:2d:60:bb:1d:a7: cf:cc:64:42:49:c3:17:d4:00:e6:41:d6:e6:c9:1c: 8c:b4:93:e4:39:25:a0:08:e3:af:79:1b:58:ee:6d: 5b:25:6a:1c:86:e5:ae:21:3e:05:b1:97:4b:0f:2c: 67:c7:d3:e0:b8:2d:57:3f:f0:58:0f:dd:65:b7:a5: 3a:2a:aa:e1:12:ed:5b:4f:8f:c0:14:ee:0b:b8:d8: d9:2c:5a:26:cd:a8:4a:cb:3e:31:d4:d7:46:63:a8: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:D0:D1:02:43:D5:82:B6:8E:B3:F4:30:F8:91:81:C2:F1:F8:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:89:34:38:73:2a:81:7f:bc:d9:a5:b1:b9:d5:9d:b7:0f:52: c7:2d:10:73:12:d3:1e:16:1b:bb:f2:59:bf:86:ec:40:86:91: c9:19:42:a8:45:86:03:2c:f6:7e:0d:ef:c5:97:97:dc:89:e4: 0f:ed:ba:6f:fe:14:fb:5c:8b:ea:79:ed:f4:96:f3:ad:14:d3: ce:a6:ab:d6:31:3c:b9:58:f5:55:f9:a5:e9:b7:ba:37:1e:cd: f4:87:70:e4:30:a3:b2:a9:46:f6:f1:a5:79:7a:2d:40:6a:eb: 46:a0:98:ce:d2:cd:2a:b4:8c:fd:6d:54:d2:a7:04:6c:ee:42: 04:4b:b8:d9:15:ed:ed:a7:af:2a:e7:35:87:7c:fd:0c:7f:87: 60:61:4a:b5:f4:5d:2a:26:be:b2:f0:d8:8f:11:ec:f3:0c:a5: c7:3f:f7:4d:56:0e:a1:fe:dd:39:18:ff:c9:4b:ee:f7:99:1a: f6:d8:7c:93:b3:01:da:00:69:c7:09:7f:6a:1f:f6:01:c8:bd: d6:4a:b8:d0:c0:3a:f5:db:c3:24:d4:e0:9a:07:27:c9:ef:7d: 15:ab:04:e5:72:40:cb:65:01:c7:90:98:2c:e8:86:27:dd:8a: 62:92:5d:8d:e7:69:94:95:42:8d:42:41:1f:93:b2:7f:70:08: 5b:11:5b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbyDS1JfQAtwaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk M2M0Y2I2ZDUtMDQ4Yy00OTRiLTg3OTUtMjc5YjhlNjFmYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i4lQe1CW/A1Sw3dZv00CEI7+Ax/mx+nFRRp pAkaCWB4YE85EZcs+hKw5R7DGiznQtSG2tU+EEUV0JjxTBcmkwtSeAqPIIFWUn7P TRPlRT+lzzdcbBeDN6jcvtgag7XnUvjZIal7Y82VBEm5rdq5wwmrT8UWwQumCI1x V/lRhbzAKtyLNViFd4SQ+yHK1VVq62XlKJSElypofraRgKJSLWC7HafPzGRCScMX 1ADmQdbmyRyMtJPkOSWgCOOveRtY7m1bJWochuWuIT4FsZdLDyxnx9PguC1XP/BY D91lt6U6KqrhEu1bT4/AFO4LuNjZLFomzahKyz4x1NdGY6iWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByO0NECQ9WCto6z9DD4kYHC8fhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDljZjNkY2EtMWQzMC0z ZTNiLTk4ODYtZTAzZDZiNjk2MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6JNDhzKoF/vNmlsbnVnbcPUsctEHMS0x4WG7vyWb+G7ECGkckZQqhF hgMs9n4N78WXl9yJ5A/tum/+FPtci+p57fSW860U086mq9YxPLlY9VX5pem3ujce zfSHcOQwo7KpRvbxpXl6LUBq60agmM7SzSq0jP1tVNKnBGzuQgRLuNkV7e2nryrn NYd8/Qx/h2BhSrX0XSomvrLw2I8R7PMMpcc/901WDqH+3TkY/8lL7veZGvbYfJOz AdoAaccJf2of9gHIvdZKuNDAOvXbwyTU4JoHJ8nvfRWrBOVyQMtlAceQmCzohifd imKSXY3naZSVQo1CQR+Tsn9wCFsRW2E= -----END CERTIFICATE-----Generated at Sun Sep 27 21:15:18 2026 by rpki-client