$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa File: 2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa (raw, json) Hash identifier: qUHssciy6Az98cEbuxRnQXIYhFlMC0sepBpoyIvwJsQ= Subject key identifier: 12:53:9A:B3:39:14:DB:C6:D0:DC:AB:AE:B1:96:AF:E9:BA:AE:29:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8FBEBBA9D298FBFEED80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.197.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8f:be:bb:a9:d2:98:fb:fe:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e2a10aaa-3d63-4cda-900a-f767a0e163e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:69:fc:09:2f:d6:83:29:e5:85:f6:82:ce: 3c:69:74:ea:6f:9a:36:db:9e:6d:67:61:5e:29:fd: c8:05:43:74:21:bc:5a:b7:68:e6:5a:58:7f:27:22: f7:0f:51:b8:61:0a:55:6d:3c:26:fb:8a:ba:19:fe: d0:64:88:d7:23:03:ea:0c:6d:be:a5:2e:51:78:9f: d3:c5:5e:68:34:cf:26:3f:61:0b:6d:5a:a4:ac:40: a4:c1:03:ce:96:0e:3b:22:3d:63:35:99:70:9a:f8: cb:68:c1:f4:8f:70:09:d6:55:73:f0:19:72:0a:8e: 29:9e:8f:e5:74:52:fd:a4:ca:56:b0:13:29:c8:af: 3c:c6:e2:56:3e:ac:23:6b:e3:15:c6:d9:6c:e5:2d: ea:e8:df:27:c5:3b:e5:ae:21:76:ea:ca:61:32:d0: 5a:37:c0:ee:84:13:de:91:17:45:35:94:50:4c:60: b3:c3:de:8a:8b:9d:4e:4c:06:c2:6b:57:c6:fc:af: a0:ff:b1:f9:7a:db:cd:ac:2d:7e:b8:a1:01:b7:fa: 4a:db:dc:1a:11:bb:e7:1c:2c:e4:12:8d:a0:cd:8a: 80:12:27:66:da:43:8e:d0:9c:4a:6c:5c:7d:58:ee: 3f:ad:32:04:4b:1a:49:7a:33:d8:21:f9:dc:82:e0: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:9A:B3:39:14:DB:C6:D0:DC:AB:AE:B1:96:AF:E9:BA:AE:29:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.197.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:da:88:93:2a:61:61:01:75:47:74:c8:30:5e:46:92:86:ec: 82:2b:f4:df:c5:cc:cd:dd:32:07:62:fb:d7:7b:ec:a0:99:21: b4:b3:db:cc:ba:ab:64:b2:9c:d9:cf:67:78:82:67:fd:f0:5d: 9e:87:c5:7e:dd:7c:36:ea:73:52:f8:6a:45:6c:9f:49:fa:73: bb:ca:8c:3f:dc:64:ca:65:81:12:35:c2:2a:0a:5d:36:4c:f0: 7b:ef:e4:ac:9b:05:19:e0:02:23:03:33:bd:bb:ac:aa:0d:b7: 3d:fb:35:c9:7f:4e:0c:68:5b:c6:29:ac:d8:eb:c5:9d:42:c0: 35:7c:0c:7a:fe:9d:6e:b7:6c:24:79:9b:16:f5:2f:49:8d:d3: c6:06:05:3c:e0:1b:bd:d4:5c:04:a0:ac:4e:76:33:1c:cd:8a: a7:5d:1e:c1:50:d4:f9:21:34:d4:ab:1a:b8:55:85:cb:8a:7c: 5c:3c:b1:55:4c:b6:6a:8d:b8:08:9d:e1:aa:16:60:75:24:c0: 7c:e2:83:43:3f:2d:a8:1e:c7:25:fa:cc:c6:a8:6d:a2:8f:91: e4:37:03:4a:b9:56:9f:f6:4e:c6:eb:88:f2:56:4c:91:89:80: f1:71:07:99:76:c3:f7:52:ce:71:8c:8c:ab:2c:2b:0f:ca:f5: d2:44:6a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY++u6nSmPv+7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTJhMTBhYWEtM2Q2My00Y2RhLTkwMGEtZjc2N2EwZTE2M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1tp/Akv1oMp5YX2gs48aXTqb5o2255tZ2Fe Kf3IBUN0Ibxat2jmWlh/JyL3D1G4YQpVbTwm+4q6Gf7QZIjXIwPqDG2+pS5ReJ/T xV5oNM8mP2ELbVqkrECkwQPOlg47Ij1jNZlwmvjLaMH0j3AJ1lVz8BlyCo4pno/l dFL9pMpWsBMpyK88xuJWPqwja+MVxtls5S3q6N8nxTvlriF26sphMtBaN8DuhBPe kRdFNZRQTGCzw96Ki51OTAbCa1fG/K+g/7H5etvNrC1+uKEBt/pK29waEbvnHCzk Eo2gzYqAEidm2kOO0JxKbFx9WO4/rTIESxpJejPYIfncguDtrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJTmrM5FNvG0NyrrrGWr+m6rinJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNmNTljODItMWUzOS0z NDUzLWFhOWQtNjZmNWRkYTFiNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/aiJMqYWEBdUd0yDBeRpKG7IIr9N/FzM3dMgdi+9d77KCZIbSz28y6 q2SynNnPZ3iCZ/3wXZ6HxX7dfDbqc1L4akVsn0n6c7vKjD/cZMplgRI1wioKXTZM 8Hvv5KybBRngAiMDM727rKoNtz37Ncl/TgxoW8YprNjrxZ1CwDV8DHr+nW63bCR5 mxb1L0mN08YGBTzgG73UXASgrE52MxzNiqddHsFQ1PkhNNSrGrhVhcuKfFw8sVVM tmqNuAid4aoWYHUkwHzig0M/LagexyX6zMaobaKPkeQ3A0q5Vp/2TsbriPJWTJGJ gPFxB5l2w/dSznGMjKssKw/K9dJEatA= -----END CERTIFICATE-----Generated at Tue Sep 29 13:51:58 2026 by rpki-client