$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f2d21fd-42ea-39b5-a3c7-524588b0ea80.roa File: 1f2d21fd-42ea-39b5-a3c7-524588b0ea80.roa (raw, json) Hash identifier: Y2I3ncIiKFJbfhacunGM1U7O9gk1kt3QOvz3o1YlzTs= Subject key identifier: F1:4C:C0:C8:34:B8:65:1A:8C:7C:8E:6D:CC:6B:7E:29:64:FF:13:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D7E969E91B38D16CEFF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f2d21fd-42ea-39b5-a3c7-524588b0ea80.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.240.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:7e:96:9e:91:b3:8d:16:ce:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=257fdb18-a1e1-41e0-bd01-9c5ab33e7242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:b1:cd:83:2b:09:b6:bb:bc:15:a7:14:3d: e7:93:dc:9b:8a:81:ef:7f:94:b0:5d:48:72:6e:c3: ce:44:cf:b6:b5:fd:a4:e4:37:4a:85:6d:f1:5b:d4: 95:bb:82:89:9a:72:da:bd:29:09:d4:22:d0:1b:bb: 0f:e8:0c:f7:96:b6:46:63:82:a8:cc:fa:17:50:12: 04:1f:f3:c2:69:cf:10:37:98:50:01:f5:a1:82:40: e6:76:a2:d8:2d:c9:15:b9:ed:65:78:44:4a:c6:13: 35:a9:67:8c:be:5e:2c:4e:47:5b:e9:7c:db:13:5d: 66:15:d2:29:12:8d:dd:50:32:45:2a:30:72:49:c1: 8a:de:9a:86:e3:d3:af:2d:31:3c:d4:68:a1:5c:e5: b9:c3:25:f1:0b:ef:49:ab:bd:14:9f:ca:42:6f:df: 0b:12:c7:91:53:21:cd:9c:35:b3:07:5c:3a:0c:dc: 95:b2:cd:63:69:6e:51:cc:60:ba:0f:3b:ff:6a:ce: 53:96:99:0e:e5:6c:32:b7:14:62:12:56:92:3e:67: 4f:e8:d5:fa:91:49:ec:94:fb:d9:80:35:02:99:a6: 31:8b:8c:f9:e5:09:69:1e:76:79:bb:29:96:5d:13: 22:df:1e:ca:e7:88:b6:07:96:d6:40:47:be:6f:d7: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4C:C0:C8:34:B8:65:1A:8C:7C:8E:6D:CC:6B:7E:29:64:FF:13:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f2d21fd-42ea-39b5-a3c7-524588b0ea80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b6:1f:54:d2:99:0c:03:a4:b9:9c:a4:39:08:9e:12:17:6e: ff:78:aa:41:aa:de:65:40:b3:dd:87:18:ba:0f:62:35:d0:2c: 8c:21:57:44:a2:e3:45:c5:97:e2:74:c5:db:87:71:6a:f8:10: 86:e7:96:25:9e:10:22:16:d6:c8:30:f8:1b:70:2c:39:d6:da: a6:cd:7f:d4:85:3f:56:19:d8:95:cd:e7:4e:58:6e:9b:1e:06: 01:2a:60:89:f3:c4:c1:a1:a9:73:4e:0d:cd:b9:da:96:45:5a: 01:fa:56:ff:65:a0:a1:d4:de:2a:4a:6f:5b:9e:33:2d:6d:b5: 89:7c:bd:0f:13:7c:d8:d7:bf:c9:60:af:31:01:25:7a:42:75: 48:12:67:89:79:cc:bc:18:20:a5:72:a2:e2:38:21:3e:33:e4: ee:ec:dc:87:a1:65:a6:6e:16:d5:06:bf:6b:cb:56:1d:27:f2: 3a:b0:73:e5:9f:5f:46:28:1e:b2:7d:ac:fa:f9:71:ee:06:93: a1:8f:00:c9:64:8a:bb:ef:55:63:59:28:8e:66:ef:85:07:18: 9f:b1:32:24:76:03:ab:e7:c3:b7:e2:d0:0f:86:96:dc:69:08: 52:67:bb:c9:88:6d:8f:5e:c7:6d:aa:30:14:86:c1:ad:89:90: bf:68:70:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPX6WnpGzjRbO/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjU3ZmRiMTgtYTFlMS00MWUwLWJkMDEtOWM1YWIzM2U3MjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrixzYMrCba7vBWnFD3nk9ybioHvf5SwXUhy bsPORM+2tf2k5DdKhW3xW9SVu4KJmnLavSkJ1CLQG7sP6Az3lrZGY4KozPoXUBIE H/PCac8QN5hQAfWhgkDmdqLYLckVue1leERKxhM1qWeMvl4sTkdb6XzbE11mFdIp Eo3dUDJFKjByScGK3pqG49OvLTE81GihXOW5wyXxC+9Jq70Un8pCb98LEseRUyHN nDWzB1w6DNyVss1jaW5RzGC6Dzv/as5TlpkO5WwytxRiElaSPmdP6NX6kUnslPvZ gDUCmaYxi4z55QlpHnZ5uymWXRMi3x7K54i2B5bWQEe+b9fWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFMwMg0uGUajHyObcxrfilk/xMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWYyZDIxZmQtNDJlYS0z OWI1LWEzYzctNTI0NTg4YjBlYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/BQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB62H1TSmQwDpLmcpDkInhIXbv94qkGq3mVAs92HGLoPYjXQLIwhV0Si 40XFl+J0xduHcWr4EIbnliWeECIW1sgw+BtwLDnW2qbNf9SFP1YZ2JXN505Ybpse BgEqYInzxMGhqXNODc252pZFWgH6Vv9loKHU3ipKb1ueMy1ttYl8vQ8TfNjXv8lg rzEBJXpCdUgSZ4l5zLwYIKVyouI4IT4z5O7s3IehZaZuFtUGv2vLVh0n8jqwc+Wf X0YoHrJ9rPr5ce4Gk6GPAMlkirvvVWNZKI5m74UHGJ+xMiR2A6vnw7fi0A+Gltxp CFJnu8mIbY9ex22qMBSGwa2JkL9ocLk= -----END CERTIFICATE-----Generated at Mon Sep 28 08:49:08 2026 by rpki-client