$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc649e3-c686-32c6-85ba-100b006e900e.roa File: 1bc649e3-c686-32c6-85ba-100b006e900e.roa (raw, json) Hash identifier: Mugs/DkXlDAd3BnN609vAHqvNHpLlyHeS4WSLRk6EE8= Subject key identifier: 85:01:22:73:70:FC:24:6D:84:F5:34:F5:F9:55:B3:F3:2B:58:BA:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D85F2FC5A42D1E75F3300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc649e3-c686-32c6-85ba-100b006e900e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.194.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:85:f2:fc:5a:42:d1:e7:5f:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8b0ce2ff-a5cc-4de4-b914-c35e90292358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:76:20:59:c2:0e:b5:ab:6d:d3:d3:d6:af: d3:21:ba:72:a3:7d:9a:08:52:4a:37:c8:bb:e6:4f: dd:ca:45:2d:50:dc:6e:08:c4:c9:de:08:68:aa:99: 95:9a:54:65:1f:fd:1c:6b:9b:aa:65:6e:ed:54:21: 7f:37:31:0f:32:62:ab:5e:b4:ce:3b:ac:0e:c6:6b: 6f:9d:9d:78:f2:02:6f:cf:61:41:14:38:26:1c:c6: ec:7f:be:32:2f:7f:b0:f4:b1:e2:61:9b:d8:eb:7a: 22:e1:ce:b9:6a:a4:ed:8b:a8:94:d1:c2:b6:14:f4: 10:95:f5:66:23:d4:c3:bd:0c:f2:2f:84:3c:c6:85: 8b:69:d6:e4:79:41:d5:26:c1:93:06:8d:e3:f0:37: c9:44:d2:21:64:e8:1a:6e:f3:14:cd:80:63:d7:65: 41:da:86:9e:46:16:05:b7:23:f8:cb:5d:25:3b:32: 72:73:6d:6a:c0:d6:77:5f:7f:fd:f1:78:94:4c:f6: b0:32:38:7d:82:4c:98:94:fc:47:c7:7b:c8:fd:95: 9d:2f:8e:ba:71:3f:78:97:26:41:62:70:cc:b3:4e: ef:0c:33:9d:b4:5c:10:6c:d0:d9:4a:d4:53:c2:39: f3:9b:7b:b9:05:de:4e:5b:bb:a3:23:25:81:c5:b2: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:22:73:70:FC:24:6D:84:F5:34:F5:F9:55:B3:F3:2B:58:BA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc649e3-c686-32c6-85ba-100b006e900e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.194.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:82:79:df:ff:46:db:c5:d8:26:1c:b2:14:cd:b2:ff:5f:74: d1:f8:0d:40:7b:ba:16:ab:90:64:8b:d6:d3:a3:8e:0d:56:d3: 51:56:af:87:6f:48:b3:db:3a:32:ec:a5:9f:1b:26:a6:4e:73: 8f:12:28:59:a4:2d:c9:aa:46:3f:43:08:c0:f9:4b:ed:eb:bd: ec:a3:88:0d:5d:2e:f8:86:ff:66:9d:62:c9:8f:53:fb:6c:7e: 9d:a2:8a:64:73:6b:69:eb:86:44:18:8c:20:4c:e5:82:c2:d6: e2:0f:08:0c:03:89:37:e2:c8:60:79:e7:2f:0b:1e:e5:ce:2d: 2e:15:a8:41:3d:a1:67:06:6f:e4:1a:f8:b7:e1:35:9a:a0:ce: 20:c2:39:13:b2:c4:09:1c:b2:a3:30:7e:91:01:e0:52:5f:42: 06:bc:97:1e:52:d2:e7:27:09:13:f6:f5:ff:a8:6b:80:57:0b: bc:b9:e0:24:c8:22:96:e8:05:31:2a:45:b9:f6:fc:f5:25:91: b2:60:ed:a6:43:68:46:90:66:f8:15:e5:10:96:a3:8c:d1:c2: 15:3e:9c:7f:1d:f4:51:56:41:3b:30:90:e9:bf:f1:2b:99:93: e3:67:c2:68:2b:d3:ac:1a:4d:8c:04:13:c0:8a:8c:a4:9d:53: 2a:1d:a0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYXy/FpC0edfMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGIwY2UyZmYtYTVjYy00ZGU0LWI5MTQtYzM1ZTkwMjkyMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIx2IFnCDrWrbdPT1q/TIbpyo32aCFJKN8i7 5k/dykUtUNxuCMTJ3ghoqpmVmlRlH/0ca5uqZW7tVCF/NzEPMmKrXrTOO6wOxmtv nZ148gJvz2FBFDgmHMbsf74yL3+w9LHiYZvY63oi4c65aqTti6iU0cK2FPQQlfVm I9TDvQzyL4Q8xoWLadbkeUHVJsGTBo3j8DfJRNIhZOgabvMUzYBj12VB2oaeRhYF tyP4y10lOzJyc21qwNZ3X3/98XiUTPawMjh9gkyYlPxHx3vI/ZWdL466cT94lyZB YnDMs07vDDOdtFwQbNDZStRTwjnzm3u5Bd5OW7ujIyWBxbKHdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUBInNw/CRthPU09flVs/MrWLpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWJjNjQ5ZTMtYzY4Ni0z MmM2LTg1YmEtMTAwYjAwNmU5MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8JwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuCed//RtvF2CYcshTNsv9fdNH4DUB7uharkGSL1tOjjg1W01FWr4dv SLPbOjLspZ8bJqZOc48SKFmkLcmqRj9DCMD5S+3rveyjiA1dLviG/2adYsmPU/ts fp2iimRza2nrhkQYjCBM5YLC1uIPCAwDiTfiyGB55y8LHuXOLS4VqEE9oWcGb+Qa +LfhNZqgziDCOROyxAkcsqMwfpEB4FJfQga8lx5S0ucnCRP29f+oa4BXC7y54CTI IpboBTEqRbn2/PUlkbJg7aZDaEaQZvgV5RCWo4zRwhU+nH8d9FFWQTswkOm/8SuZ k+Nnwmgr06waTYwEE8CKjKSdUyodoFs= -----END CERTIFICATE-----Generated at Mon Sep 28 19:54:47 2026 by rpki-client