$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa File: 2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa (raw, json) Hash identifier: ojNexcQ1pJHKQme+VqX5ELTpyHto8PbA6XRnZ8AyYRY= Subject key identifier: 32:CA:62:47:0F:02:18:26:3D:EA:5C:02:6B:65:D4:B3:1B:A2:40:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9127C70309629A1DB200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.204.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:91:27:c7:03:09:62:9a:1d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d0595e70-d468-4fd7-93f9-b43a4d7ba591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:40:43:5b:09:02:1c:82:46:c7:a4:58:8c:72: 21:f3:8e:2e:9c:cd:60:54:c5:cf:1e:35:c8:c5:21: 1d:5d:f0:04:cb:a5:4d:95:35:1c:72:28:1c:72:e6: e6:bb:c6:14:b9:65:3a:86:75:0b:0d:ff:99:ec:2a: d8:e5:14:ab:1a:8a:e8:f8:b7:7a:dc:fa:38:31:ea: 82:76:a2:af:b5:b0:52:24:bc:a1:29:3c:2b:1c:00: 3f:b7:6e:4f:4f:c3:be:d0:c3:17:0b:e0:11:98:81: de:55:41:ea:87:9a:6c:b4:45:d1:f5:62:e4:60:e2: e6:c4:ed:59:2b:b0:4a:b0:6a:5e:f9:9d:27:26:f2: cc:94:ae:27:a3:54:7e:cd:54:ea:9a:c8:fa:c0:07: fe:89:9e:db:3f:0e:f5:cd:6c:a6:3f:4e:da:e9:97: 5f:eb:d9:1b:c4:cf:bd:4a:72:78:70:50:17:25:29: 4f:44:34:24:0f:05:14:ae:f4:42:6f:ae:af:84:b7: 9f:15:b9:c8:12:82:1a:8e:18:7b:8e:6f:38:df:2e: 4d:c2:bf:44:2f:7a:2a:7c:01:78:f4:2b:3d:c4:3d: ae:a5:97:7d:71:cf:14:7a:03:97:28:d5:d7:6a:2b: c5:a6:e9:0a:bd:c3:7f:28:9a:93:09:b8:77:8f:96: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CA:62:47:0F:02:18:26:3D:EA:5C:02:6B:65:D4:B3:1B:A2:40:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a3:95:d8:f7:b8:ed:a7:dc:9e:78:d6:7c:65:78:df:ef:c9: 8a:33:63:9b:b1:7c:6a:0a:28:9a:5a:a3:45:e3:25:37:1d:d0: 68:70:d3:5b:a3:7e:df:9c:a8:af:be:62:d5:08:78:c6:a4:02: e7:ce:c1:3b:22:d1:dd:ed:27:b8:22:6c:b2:4a:e9:91:c5:5d: 8d:3e:e7:ba:32:5d:20:a7:bb:e7:f3:49:fc:f7:78:68:d6:9f: a6:f9:31:6a:53:23:af:db:90:e3:c7:e3:8e:f6:5c:93:0c:48: 78:4d:c4:ae:73:cf:cf:3e:c4:2f:a8:c8:cc:62:99:9c:56:51: f6:59:61:fb:54:b7:90:0a:93:4f:a0:7e:97:f8:af:86:aa:86: 41:81:9f:6f:51:7d:ce:1a:15:17:70:10:8c:34:f4:98:38:fb: 86:11:9a:7c:ee:f2:51:05:2b:69:1c:a1:e7:85:91:2a:45:37: 1f:4a:ed:76:b3:a1:83:75:b4:e1:55:64:67:6e:e8:dd:b7:97: 71:34:72:bb:fd:22:cb:ae:a3:a9:c2:59:7f:2a:eb:4b:69:48: 31:ec:7a:18:25:69:75:05:e2:ff:ee:ac:79:8e:09:27:ea:a4: 2b:bc:2b:01:28:c6:45:59:63:a8:72:42:b2:f1:8e:2e:45:ce: 86:84:2a:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZEnxwMJYpodsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDA1OTVlNzAtZDQ2OC00ZmQ3LTkzZjktYjQzYTRkN2JhNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUBDWwkCHIJGx6RYjHIh844unM1gVMXPHjXI xSEdXfAEy6VNlTUccigccubmu8YUuWU6hnULDf+Z7CrY5RSrGoro+Ld63Po4MeqC dqKvtbBSJLyhKTwrHAA/t25PT8O+0MMXC+ARmIHeVUHqh5pstEXR9WLkYOLmxO1Z K7BKsGpe+Z0nJvLMlK4no1R+zVTqmsj6wAf+iZ7bPw71zWymP07a6Zdf69kbxM+9 SnJ4cFAXJSlPRDQkDwUUrvRCb66vhLefFbnIEoIajhh7jm843y5Nwr9EL3oqfAF4 9Cs9xD2upZd9cc8UegOXKNXXaivFpukKvcN/KJqTCbh3j5ah8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLKYkcPAhgmPepcAmtl1LMbokBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmMzYjlkMDgtMWYyZi0z NDQ0LTkyZmItYmNjZDFlNzZlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOjldj3uO2n3J541nxleN/vyYozY5uxfGoKKJpao0XjJTcd0Ghw01uj ft+cqK++YtUIeMakAufOwTsi0d3tJ7gibLJK6ZHFXY0+57oyXSCnu+fzSfz3eGjW n6b5MWpTI6/bkOPH4472XJMMSHhNxK5zz88+xC+oyMximZxWUfZZYftUt5AKk0+g fpf4r4aqhkGBn29Rfc4aFRdwEIw09Jg4+4YRmnzu8lEFK2kcoeeFkSpFNx9K7Xaz oYN1tOFVZGdu6N23l3E0crv9Isuuo6nCWX8q60tpSDHsehglaXUF4v/urHmOCSfq pCu8KwEoxkVZY6hyQrLxji5FzoaEKmw= -----END CERTIFICATE-----Generated at Sat Sep 26 10:48:26 2026 by rpki-client