$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33efd083-9dff-3773-a9c9-fb53a4c0df82.roa File: 33efd083-9dff-3773-a9c9-fb53a4c0df82.roa (raw, json) Hash identifier: kMvYxlXfJtzEWlX2qO/u24Q1+W3wWpPb1XWfzbDDVAs= Subject key identifier: 3F:EA:A3:4B:57:36:75:40:EE:5D:34:AC:F5:3F:68:D0:8C:71:1D:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8CD9AC38F828E6D896C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33efd083-9dff-3773-a9c9-fb53a4c0df82.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.194.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8c:d9:ac:38:f8:28:e6:d8:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a894892b-0cf3-4cfa-adca-5ebd2583e5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:39:05:50:1c:71:9d:0a:41:f5:cb:42:69: 67:a1:4c:37:08:d5:c9:ec:7b:33:4a:72:26:2f:57: cb:75:8d:81:33:5e:81:85:3f:62:60:d8:fd:1c:eb: 62:6b:52:37:ac:04:9c:7d:0d:f5:cd:8a:c1:33:85: 03:65:e8:5f:75:91:c3:c8:bf:2e:58:f9:2f:bc:72: 4e:7e:91:43:7a:2e:00:b7:d6:93:fb:7c:04:77:69: b7:5c:88:15:04:55:fc:02:28:f6:5a:b8:09:95:e9: 08:15:4a:59:93:c8:69:53:dd:00:49:35:63:97:7e: b5:69:c1:34:1f:b6:b5:47:6d:96:32:18:e8:b8:41: 0d:9c:ea:de:24:ae:05:66:e9:2d:9d:9f:74:f4:cc: 50:cb:57:b5:7d:50:0f:fe:7e:0e:80:79:6c:01:f3: a3:7f:6b:c1:8f:88:a1:59:83:07:80:6b:4c:22:89: 88:d6:19:ce:92:c6:ad:ac:07:cf:fa:7f:c0:1f:1f: 57:55:2f:56:e9:3c:b9:2e:eb:2f:a7:94:ed:f2:e4: ec:e0:37:29:34:ae:1a:1a:bb:e3:17:f5:5d:3b:ff: 06:97:11:6b:5c:ae:41:70:9d:c9:2f:eb:8b:ee:6e: b1:75:d8:37:b0:3d:d5:6e:23:23:20:a6:25:9e:b7: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:A3:4B:57:36:75:40:EE:5D:34:AC:F5:3F:68:D0:8C:71:1D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33efd083-9dff-3773-a9c9-fb53a4c0df82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.194.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:97:ea:d6:ef:03:ea:7f:1f:68:05:dc:26:0f:86:60:5d:45: 84:c3:6a:4f:c5:37:6b:ba:30:1b:51:0c:be:62:a7:67:42:2e: 75:21:8d:fe:fd:a2:a0:2a:d7:70:57:58:61:a7:6b:5c:55:81: d1:d5:00:16:92:00:0f:87:dd:d2:8e:71:cb:5c:01:b2:bb:70: 14:dd:99:38:2c:11:3f:90:33:d3:c3:0a:35:ad:0a:0c:f3:4c: dd:61:90:1b:f9:fa:3b:d8:9e:d9:d1:91:ca:64:93:06:84:0a: 64:ad:52:86:94:96:dc:b5:e2:e9:e1:af:e2:68:68:e8:36:37: 41:f8:ad:4e:68:0b:b2:79:c3:4f:d6:bd:23:bc:df:74:96:52: 16:f4:8d:ad:52:ed:2e:4d:8e:9f:83:e9:70:d1:e4:14:47:0a: 66:07:b7:cb:98:18:6b:51:7c:23:a3:e7:59:af:ba:e6:f2:49: fa:fd:57:fb:a8:d4:3e:2d:da:04:0f:e6:31:d5:10:60:ef:58: 17:88:e1:83:6d:bb:13:8a:ed:f5:88:8c:b2:dc:97:eb:c7:b4: 3b:06:72:a2:88:42:f4:d9:d5:7d:d6:9f:ff:c3:a6:b8:72:86: fe:da:3b:3d:eb:e6:d9:51:39:2d:8e:ac:e4:5e:94:5f:18:04: 45:b8:7c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYzZrDj4KObYlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTg5NDg5MmItMGNmMy00Y2ZhLWFkY2EtNWViZDI1ODNlNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAick5BVAccZ0KQfXLQmlnoUw3CNXJ7HszSnIm L1fLdY2BM16BhT9iYNj9HOtia1I3rAScfQ31zYrBM4UDZehfdZHDyL8uWPkvvHJO fpFDei4At9aT+3wEd2m3XIgVBFX8Aij2WrgJlekIFUpZk8hpU90ASTVjl361acE0 H7a1R22WMhjouEENnOreJK4FZuktnZ909MxQy1e1fVAP/n4OgHlsAfOjf2vBj4ih WYMHgGtMIomI1hnOksatrAfP+n/AHx9XVS9W6Ty5Lusvp5Tt8uTs4DcpNK4aGrvj F/VdO/8GlxFrXK5BcJ3JL+uL7m6xddg3sD3VbiMjIKYlnrc4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/qo0tXNnVA7l00rPU/aNCMcR1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNlZmQwODMtOWRmZi0z NzczLWE5YzktZmI1M2E0YzBkZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiX6tbvA+p/H2gF3CYPhmBdRYTDak/FN2u6MBtRDL5ip2dCLnUhjf79 oqAq13BXWGGna1xVgdHVABaSAA+H3dKOcctcAbK7cBTdmTgsET+QM9PDCjWtCgzz TN1hkBv5+jvYntnRkcpkkwaECmStUoaUlty14unhr+JoaOg2N0H4rU5oC7J5w0/W vSO833SWUhb0ja1S7S5Njp+D6XDR5BRHCmYHt8uYGGtRfCOj51mvuubySfr9V/uo 1D4t2gQP5jHVEGDvWBeI4YNtuxOK7fWIjLLcl+vHtDsGcqKIQvTZ1X3Wn//Dprhy hv7aOz3r5tlROS2OrORelF8YBEW4fIc= -----END CERTIFICATE-----Generated at Mon Sep 28 12:26:30 2026 by rpki-client