$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/281e8300-76c3-329f-a1e8-7f71e9c92f64.roa File: 281e8300-76c3-329f-a1e8-7f71e9c92f64.roa (raw, json) Hash identifier: 1fXBeMZfQbwVmXkuTWg6JU3xhz6oEN5KJ+dcU1zkSvM= Subject key identifier: 6F:B5:A3:A0:6A:25:53:74:56:C6:A7:AA:AB:01:BE:4F:C4:93:DC:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB3CD1B5CEB5C82B5DF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/281e8300-76c3-329f-a1e8-7f71e9c92f64.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.204.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b3:cd:1b:5c:eb:5c:82:b5:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e869ddf6-a2cb-4adf-a645-e5163de5c170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:61:07:39:98:ce:4f:37:8e:27:a6:1a:81:c2: f4:0d:19:5f:8d:1a:01:24:36:e4:72:b7:08:5b:eb: bf:61:c2:09:3d:12:54:b4:5b:a0:eb:31:00:d0:ef: 47:84:87:55:92:83:15:76:c6:75:3b:73:4d:b4:2c: ea:8e:dc:db:ae:48:a1:45:0d:00:55:fe:59:c2:9d: 53:6e:08:00:22:98:96:c9:28:a7:d7:e0:11:4b:3e: dc:bc:13:d7:2b:04:77:f7:cd:f7:5a:24:76:c2:6a: a4:79:d1:92:0f:89:31:2d:82:a0:bc:3c:59:fb:3e: 04:61:46:f1:dc:1c:a3:7e:02:b4:24:7a:98:db:4e: 83:dc:f3:af:ee:af:66:20:25:83:06:f2:6d:9a:4a: 15:cd:4b:b4:f7:90:e5:fe:45:10:b1:e5:f6:73:a3: 76:5f:6a:16:c9:35:22:74:89:6d:d4:70:23:c3:b0: 0f:3a:17:c6:db:85:ca:ea:d2:a2:a6:59:de:ae:3f: e1:51:08:f2:a9:19:86:d0:e7:81:64:bb:c3:21:87: ff:e4:65:27:fd:cd:dc:90:d6:2a:66:c4:a1:94:4f: 70:f0:cb:89:71:f2:48:b7:4b:ae:25:68:8e:33:a7: be:c4:ad:37:96:35:65:f7:06:48:49:a0:ef:29:5c: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:A3:A0:6A:25:53:74:56:C6:A7:AA:AB:01:BE:4F:C4:93:DC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/281e8300-76c3-329f-a1e8-7f71e9c92f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ba:25:a6:a7:96:a0:b8:44:f5:d5:ee:1b:8b:23:ae:d0:75: 0f:56:2c:9e:12:2d:9c:6b:29:b1:36:03:e9:6e:cb:84:ba:13: 29:c9:bc:7d:76:89:77:23:b4:9c:87:b8:a0:90:42:27:e4:9e: f7:a9:44:c4:56:f0:85:d5:cc:bc:b6:c8:e1:6f:b6:fc:ec:01: 89:a1:b9:11:01:06:41:29:26:2e:b4:68:9a:91:3d:17:64:5b: 6b:68:92:d2:7a:c7:8e:bc:96:7f:60:78:be:4f:1c:21:c8:7f: b3:61:c1:d6:ec:9b:0f:79:8f:13:f0:03:0e:ab:fb:73:3b:64: be:05:77:eb:64:c1:c5:ce:cf:4c:86:1f:3b:f3:fa:5c:ac:ee: de:d1:34:df:12:74:53:d1:33:b5:d4:c3:ec:35:91:94:dc:4c: 94:eb:4e:e8:5b:54:3a:c6:c2:a3:f6:5e:cd:1e:bd:c6:38:f8: fe:10:92:33:30:13:88:d6:d9:6d:50:51:18:8d:d8:15:b5:ff: 40:ef:72:ac:d5:fe:59:28:7e:5c:a7:35:fe:c5:ae:ea:87:4e: a0:1b:f8:f9:60:37:29:64:54:35:b4:25:be:ef:d8:19:b9:44: 7b:e9:0f:33:32:48:3a:85:ff:be:e3:aa:20:eb:76:d1:8a:bc: 30:43:7f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbPNG1zrXIK134AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTg2OWRkZjYtYTJjYi00YWRmLWE2NDUtZTUxNjNkZTVjMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mEHOZjOTzeOJ6YagcL0DRlfjRoBJDbkcrcI W+u/YcIJPRJUtFug6zEA0O9HhIdVkoMVdsZ1O3NNtCzqjtzbrkihRQ0AVf5Zwp1T bggAIpiWySin1+ARSz7cvBPXKwR39833WiR2wmqkedGSD4kxLYKgvDxZ+z4EYUbx 3ByjfgK0JHqY206D3POv7q9mICWDBvJtmkoVzUu095Dl/kUQseX2c6N2X2oWyTUi dIlt1HAjw7APOhfG24XK6tKiplnerj/hUQjyqRmG0OeBZLvDIYf/5GUn/c3ckNYq ZsShlE9w8MuJcfJIt0uuJWiOM6e+xK03ljVl9wZISaDvKVxJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+1o6BqJVN0VsanqqsBvk/Ek9wRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjgxZTgzMDAtNzZjMy0z MjlmLWExZTgtN2Y3MWU5YzkyZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe6JaanlqC4RPXV7huLI67QdQ9WLJ4SLZxrKbE2A+luy4S6EynJvH12 iXcjtJyHuKCQQifknvepRMRW8IXVzLy2yOFvtvzsAYmhuREBBkEpJi60aJqRPRdk W2toktJ6x468ln9geL5PHCHIf7Nhwdbsmw95jxPwAw6r+3M7ZL4Fd+tkwcXOz0yG Hzvz+lys7t7RNN8SdFPRM7XUw+w1kZTcTJTrTuhbVDrGwqP2Xs0evcY4+P4QkjMw E4jW2W1QURiN2BW1/0DvcqzV/lkoflynNf7FruqHTqAb+PlgNylkVDW0Jb7v2Bm5 RHvpDzMySDqF/77jqiDrdtGKvDBDfz0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:18:09 2026 by rpki-client