$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09e4773c-8256-31c8-994f-955dd6b4e7ec.roa File: 09e4773c-8256-31c8-994f-955dd6b4e7ec.roa (raw, json) Hash identifier: SJTYBl2tCJfjV+iH4kVom8DZYkJ7VieuZvrjzwhyBxI= Subject key identifier: 37:CA:E4:C3:37:2F:BE:71:AE:B9:C5:F7:76:A3:62:E1:CA:51:33:00 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4988FAD2C980B64E01DCF300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09e4773c-8256-31c8-994f-955dd6b4e7ec.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 35.217.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:fa:d2:c9:80:b6:4e:01:dc:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ab186498-c1f9-44e4-8f1f-2021af44754c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:69:7b:f2:aa:a4:67:b2:9a:e5:9f:bd:6d: cf:f9:02:2f:06:34:23:cc:c9:89:8c:f4:ad:f8:19: 64:88:b2:aa:d1:f8:0b:e1:96:2f:33:0f:b3:54:79: 05:bd:59:08:42:86:2d:49:72:63:d1:16:ce:bb:17: 3d:bb:68:59:4f:8c:71:16:6f:68:a6:41:70:33:64: 9b:0f:e0:4f:48:68:f7:8c:cd:0d:c1:6c:d6:8a:b8: b8:9d:ea:3e:11:ed:94:5f:c3:c2:59:64:d8:51:bc: 80:7a:7a:38:d1:99:66:80:45:7d:35:2c:f6:26:84: a9:29:0d:a7:2f:1f:07:ea:47:05:3f:0a:6f:7d:fd: 09:93:30:ee:27:62:5f:bc:7e:28:4b:81:86:89:56: 6b:e1:06:22:2a:1f:80:d9:a4:45:82:3f:6e:68:49: b1:33:06:6f:3f:c6:42:16:ec:74:a3:1c:0b:82:54: c5:68:44:e6:cb:f8:85:da:d2:a8:88:f2:c4:cd:df: 2d:df:de:95:2c:ad:05:60:e0:1e:df:cd:86:bf:38: a5:13:42:85:2d:64:f0:a3:65:ab:7a:d6:01:c4:ba: 45:b5:69:e1:d3:a7:b6:9f:f3:6c:ec:b9:11:2e:0c: 3a:17:66:21:33:98:a4:67:04:80:0c:05:95:87:94: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CA:E4:C3:37:2F:BE:71:AE:B9:C5:F7:76:A3:62:E1:CA:51:33:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09e4773c-8256-31c8-994f-955dd6b4e7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:47:4c:04:2f:eb:1e:ed:c3:84:3a:27:ef:fe:fd:c0:b0:bb: 1c:35:4f:48:a1:74:76:60:f2:50:27:26:cc:3e:31:be:01:2b: 2e:bd:a1:50:20:e1:e5:c8:fa:31:9f:f5:41:a6:41:61:88:0b: a6:25:ae:d0:e9:6b:54:67:d3:91:6b:c9:5d:5e:6c:35:5c:4b: 02:eb:bb:88:7f:6e:e8:91:a1:f0:12:9f:9f:3d:61:ed:53:da: ca:e8:36:7c:6e:45:e8:10:08:15:a3:a6:6e:62:a1:50:f6:9f: 71:d3:3d:fb:ef:83:5f:29:25:6f:d3:5e:12:d4:1a:1a:89:20: 0c:06:a8:66:61:63:13:56:c2:51:2b:b1:ff:5c:71:11:cc:b8: 3b:90:42:74:39:df:ee:08:d9:25:22:29:c2:97:6a:ee:7f:04: 36:a1:c9:51:35:a4:21:07:66:11:08:f9:4e:d6:14:aa:f1:20: 96:3f:d4:16:3c:6a:c7:39:c3:01:c5:46:db:71:67:92:ec:54: bc:89:79:ff:6f:eb:da:43:30:73:a9:53:3b:11:cb:37:8d:f6: 88:54:1a:04:b5:87:ec:c5:e4:17:7c:27:12:39:65:c2:99:48: 0b:b0:75:57:b3:9a:55:6f:d1:5f:35:8c:ac:cc:5e:38:20:e8: fc:16:04:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiPrSyYC2TgHc8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWIxODY0OTgtYzFmOS00NGU0LThmMWYtMjAyMWFmNDQ3NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimVpe/KqpGeymuWfvW3P+QIvBjQjzMmJjPSt +BlkiLKq0fgL4ZYvMw+zVHkFvVkIQoYtSXJj0RbOuxc9u2hZT4xxFm9opkFwM2Sb D+BPSGj3jM0NwWzWiri4neo+Ee2UX8PCWWTYUbyAeno40ZlmgEV9NSz2JoSpKQ2n Lx8H6kcFPwpvff0JkzDuJ2JfvH4oS4GGiVZr4QYiKh+A2aRFgj9uaEmxMwZvP8ZC Fux0oxwLglTFaETmy/iF2tKoiPLEzd8t396VLK0FYOAe382GvzilE0KFLWTwo2Wr etYBxLpFtWnh06e2n/Ns7LkRLgw6F2YhM5ikZwSADAWVh5SD8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfK5MM3L75xrrnF93ajYuHKUTMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDllNDc3M2MtODI1Ni0z MWM4LTk5NGYtOTU1ZGQ2YjRlN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJHTAQv6x7tw4Q6J+/+/cCwuxw1T0ihdHZg8lAnJsw+Mb4BKy69oVAg 4eXI+jGf9UGmQWGIC6YlrtDpa1Rn05FryV1ebDVcSwLru4h/buiRofASn589Ye1T 2sroNnxuRegQCBWjpm5ioVD2n3HTPfvvg18pJW/TXhLUGhqJIAwGqGZhYxNWwlEr sf9ccRHMuDuQQnQ53+4I2SUiKcKXau5/BDahyVE1pCEHZhEI+U7WFKrxIJY/1BY8 asc5wwHFRttxZ5LsVLyJef9v69pDMHOpUzsRyzeN9ohUGgS1h+zF5Bd8JxI5ZcKZ SAuwdVezmlVv0V81jKzMXjgg6PwWBLo= -----END CERTIFICATE-----Generated at Sat Sep 26 06:32:29 2026 by rpki-client