$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa File: 33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa (raw, json) Hash identifier: dSQbP8oPdRqr+o3U1ed5C1kLOA8dWC76NRXGszgnHWk= Subject key identifier: B5:C3:4B:D7:C4:74:AA:81:CA:E5:D6:B1:4C:0B:EC:2A:A1:A6:49:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D881B632A52708E80FB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.195.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:88:1b:63:2a:52:70:8e:80:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d6f490d9-9264-48df-af6b-405a7fe0e5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:99:55:66:2c:dc:f6:a3:68:d5:e1:d7:82: 37:c4:e9:93:e7:51:2d:f6:93:13:9c:8d:36:12:e7: 2e:9a:56:9d:b5:8a:af:bf:fa:56:f4:76:75:0f:d4: 0f:a2:2a:42:a1:6b:33:8e:45:53:5d:12:78:d8:89: be:71:95:b8:63:cf:a8:49:2e:2c:f2:f9:4b:ef:76: e4:23:f2:ef:73:eb:0e:7d:87:ec:90:df:45:02:a2: 14:d0:33:32:75:9c:21:a9:79:07:76:ac:9d:c1:42: b8:e7:25:ce:74:cf:d4:d6:88:75:81:15:9f:df:6b: 4b:ad:cb:47:df:6b:bb:dd:2b:ef:c3:b3:20:7d:11: 40:0b:e6:65:45:ca:df:7c:d7:a4:85:82:0c:4e:07: 66:ef:7c:c2:1e:df:de:fa:13:1c:6a:64:0f:00:a1: 75:c7:d2:98:a6:f8:1c:13:60:26:f2:dc:5d:30:87: 04:c0:40:27:d7:d7:ff:12:13:60:4d:e4:39:97:60: 17:67:7e:e3:dd:a4:f6:12:32:0c:c6:e8:c4:db:a9: 04:8b:23:69:9d:7b:b1:1c:d3:ec:d5:7e:a1:3c:70: 5d:c2:d9:75:9e:ed:0c:a0:10:98:49:7d:73:6c:ff: e7:98:4a:85:4b:78:6c:de:48:56:45:39:ad:25:89: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C3:4B:D7:C4:74:AA:81:CA:E5:D6:B1:4C:0B:EC:2A:A1:A6:49:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33c23df4-259b-3ef7-87c7-5b0c3ea0264b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4c:3b:b0:a8:53:40:cd:e0:32:49:ae:5c:51:c3:f3:fc:ab: d8:92:04:fb:4a:a6:f4:11:0d:1e:22:fd:39:5d:75:94:8c:a1: 39:5f:13:57:44:de:ca:41:35:eb:8f:bf:1f:f9:06:b7:af:02: a7:93:0a:b3:0e:5e:fe:8e:c9:85:a6:84:8a:e0:28:1f:64:8c: 4f:4c:16:76:19:80:7d:0d:e9:64:39:bf:aa:5b:f3:a2:dc:7a: f7:d0:84:74:98:a9:8f:ba:8c:cc:49:f7:c1:fc:69:96:04:ba: a1:80:7d:08:fb:e2:de:7e:f9:3b:bd:33:49:c8:d7:ed:06:cd: 42:4d:96:9a:7b:f0:ed:60:c0:a5:48:71:53:e3:55:64:1c:22: a2:40:fd:d2:ed:46:4a:e1:62:5d:cd:2a:eb:38:ea:20:70:0b: e9:d1:bd:b9:e9:1f:60:a0:1a:69:65:3b:73:1f:e9:8b:be:16: e1:51:f2:e9:0f:12:e9:70:58:68:32:85:5a:6a:3d:92:a5:a1: e2:15:e2:78:1b:49:9b:57:60:2b:da:11:5d:80:d7:2b:41:04: 81:1e:fb:7f:86:4e:ba:15:58:cc:58:6c:ad:50:b2:88:ed:fc: a5:0a:d3:10:f3:7a:9e:91:b7:1b:53:4b:b1:70:fb:3e:af:0d: 12:a2:7c:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYgbYypScI6A+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDZmNDkwZDktOTI2NC00OGRmLWFmNmItNDA1YTdmZTBlNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYuZVWYs3PajaNXh14I3xOmT51Et9pMTnI02 EucumladtYqvv/pW9HZ1D9QPoipCoWszjkVTXRJ42Im+cZW4Y8+oSS4s8vlL73bk I/Lvc+sOfYfskN9FAqIU0DMydZwhqXkHdqydwUK45yXOdM/U1oh1gRWf32tLrctH 32u73Svvw7MgfRFAC+ZlRcrffNekhYIMTgdm73zCHt/e+hMcamQPAKF1x9KYpvgc E2Am8txdMIcEwEAn19f/EhNgTeQ5l2AXZ37j3aT2EjIMxujE26kEiyNpnXuxHNPs 1X6hPHBdwtl1nu0MoBCYSX1zbP/nmEqFS3hs3khWRTmtJYkR1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXDS9fEdKqByuXWsUwL7CqhpkmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjMjNkZjQtMjU5Yi0z ZWY3LTg3YzctNWIwYzNlYTAyNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8MwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhMO7CoU0DN4DJJrlxRw/P8q9iSBPtKpvQRDR4i/TlddZSMoTlfE1dE 3spBNeuPvx/5BrevAqeTCrMOXv6OyYWmhIrgKB9kjE9MFnYZgH0N6WQ5v6pb86Lc evfQhHSYqY+6jMxJ98H8aZYEuqGAfQj74t5++Tu9M0nI1+0GzUJNlpp78O1gwKVI cVPjVWQcIqJA/dLtRkrhYl3NKus46iBwC+nRvbnpH2CgGmllO3Mf6Yu+FuFR8ukP EulwWGgyhVpqPZKloeIV4ngbSZtXYCvaEV2A1ytBBIEe+3+GTroVWMxYbK1Qsojt /KUK0xDzep6RtxtTS7Fw+z6vDRKifAE= -----END CERTIFICATE-----Generated at Sat Oct 10 10:29:42 2026 by rpki-client