$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa File: 255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa (raw, json) Hash identifier: NRi8BvQA9URaUg/UN7eDOK5r9O5uQZynl7gPl2tjdl0= Subject key identifier: BC:2D:69:17:A3:AB:1C:87:5F:8E:A5:19:95:C6:FC:6D:A9:26:46:DE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4974A98EE2A925AEC6D0D9A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 35.212.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a9:8e:e2:a9:25:ae:c6:d0:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=363007a9-8d11-4384-98d4-d25bf89ef582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0d:b6:f2:60:32:b6:3d:77:5e:75:41:91:57: 30:a7:a6:14:c7:4e:21:eb:12:37:c2:59:b7:79:48: 8f:d4:a5:1e:9d:3f:8a:e1:9e:4a:2b:fd:31:dd:f3: 0f:c2:21:da:cc:b5:a4:23:43:dd:ad:7e:43:2e:7f: 68:c6:f8:92:85:bb:78:a7:b9:84:70:13:10:33:fe: ae:93:9f:53:0d:ca:ed:3f:cb:f5:92:b6:c1:2b:6a: 9c:24:39:82:76:4a:ce:00:0d:46:1e:2e:f3:6e:4d: dd:6d:86:e8:87:92:d0:a8:d8:b9:63:cb:75:82:b3: 7b:1e:94:2d:f7:ef:9b:d6:6b:42:1c:49:6b:75:45: 5f:57:26:96:91:34:60:f8:8f:5b:6e:83:67:c2:68: 3e:4c:06:49:77:cc:2b:0f:bc:de:4b:60:e0:43:f9: e1:27:a9:fe:f7:af:d8:d5:38:9c:a3:96:9d:9d:f0: 87:92:bc:ef:47:43:85:6c:1a:b1:80:bd:90:21:d1: b3:8c:ba:1b:30:84:2c:01:88:92:1f:78:eb:10:d5: 54:06:00:f5:20:73:75:63:6d:52:ed:7a:81:ea:bb: f5:c9:03:78:b8:00:a7:39:ba:b7:7f:52:de:0a:e9: 32:d6:ff:44:f8:48:69:0a:39:87:14:6c:f4:10:83: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2D:69:17:A3:AB:1C:87:5F:8E:A5:19:95:C6:FC:6D:A9:26:46:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255c0b1a-e956-3d5e-87f4-b3aaa8976576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:58:74:37:6c:d3:a4:f3:51:c7:7e:5d:9d:5e:60:cf:11:8e: d2:b5:01:4b:1a:94:7b:4b:30:93:cc:88:c7:7a:00:95:6f:eb: 86:cb:a5:77:64:de:53:97:45:0b:24:09:e2:43:99:b3:15:e3: 23:2f:bd:ab:d4:9e:fc:c4:82:6e:8b:3d:36:16:ab:55:12:f8: e2:79:af:89:61:1b:62:c9:64:e8:2a:09:26:d6:50:a3:23:95: 87:3c:bf:58:f5:0a:25:6e:47:10:ff:8e:59:b9:26:8e:06:37: 80:0d:dc:72:9c:28:81:7a:4b:77:85:60:eb:51:e4:7f:e0:bd: b5:5e:01:41:69:fe:f9:f6:10:a3:6e:85:94:38:e5:5e:68:1a: bd:03:23:d5:5e:3b:c2:8e:79:da:09:cd:51:09:ef:e5:53:b5: 0f:27:1c:24:c4:11:b4:60:ed:fb:8d:12:66:b5:24:ae:cb:58: 4b:e6:0b:84:52:25:82:15:69:5c:cf:34:5e:42:ef:bf:e6:bb: 0b:71:3e:f1:32:5f:01:57:ce:d7:3f:42:5b:ef:4b:47:c5:42: bc:59:c8:84:7c:4d:6e:34:76:5b:96:16:53:6b:7d:c9:59:9f: 5b:4a:ba:9a:5a:0c:f5:63:b1:80:2b:6b:0b:f2:41:ef:93:c7: eb:0b:d0:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKmO4qklrsbQ2aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzYzMDA3YTktOGQxMS00Mzg0LTk4ZDQtZDI1YmY4OWVmNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ228mAytj13XnVBkVcwp6YUx04h6xI3wlm3 eUiP1KUenT+K4Z5KK/0x3fMPwiHazLWkI0PdrX5DLn9oxviShbt4p7mEcBMQM/6u k59TDcrtP8v1krbBK2qcJDmCdkrOAA1GHi7zbk3dbYboh5LQqNi5Y8t1grN7HpQt 9++b1mtCHElrdUVfVyaWkTRg+I9bboNnwmg+TAZJd8wrD7zeS2DgQ/nhJ6n+96/Y 1Tico5adnfCHkrzvR0OFbBqxgL2QIdGzjLobMIQsAYiSH3jrENVUBgD1IHN1Y21S 7XqB6rv1yQN4uACnObq3f1LeCuky1v9E+EhpCjmHFGz0EIPEYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwtaRejqxyHX46lGZXG/G2pJkbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjU1YzBiMWEtZTk1Ni0z ZDVlLTg3ZjQtYjNhYWE4OTc2NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBYdDds06TzUcd+XZ1eYM8RjtK1AUsalHtLMJPMiMd6AJVv64bLpXdk 3lOXRQskCeJDmbMV4yMvvavUnvzEgm6LPTYWq1US+OJ5r4lhG2LJZOgqCSbWUKMj lYc8v1j1CiVuRxD/jlm5Jo4GN4AN3HKcKIF6S3eFYOtR5H/gvbVeAUFp/vn2EKNu hZQ45V5oGr0DI9VeO8KOedoJzVEJ7+VTtQ8nHCTEEbRg7fuNEma1JK7LWEvmC4RS JYIVaVzPNF5C77/muwtxPvEyXwFXztc/QlvvS0fFQrxZyIR8TW40dluWFlNrfclZ n1tKuppaDPVjsYArawvyQe+Tx+sL0JI= -----END CERTIFICATE-----Generated at Tue Sep 29 08:30:40 2026 by rpki-client