$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa File: 3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa (raw, json) Hash identifier: n3dejBawAwfqcJiG9H9e4AcY8Qh1nMHXFibPGZbBRkE= Subject key identifier: B3:B7:E1:1A:71:66:03:74:17:F5:CF:57:FF:0C:D2:95:1E:1D:F5:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D7B3A4C6045C0F4A03240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.241.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:7b:3a:4c:60:45:c0:f4:a0:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7708ab7f-ffa1-40fd-83ae-1c7167d5864d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:2f:c4:f2:be:f4:30:8d:f5:0d:a8:11:8f: 44:e2:d4:9c:ce:96:34:9f:7c:e8:04:61:44:a4:f0: 89:28:ec:02:9b:7b:fc:13:83:a0:6c:3e:bc:9b:7b: 8e:bb:a2:d4:a6:62:01:42:fa:5d:df:2b:ec:a2:8c: c7:92:93:cf:12:4d:d3:58:6d:34:5d:de:92:82:45: b1:cf:dd:03:5c:68:1a:b4:95:2c:72:d0:d8:91:40: 89:58:95:34:f0:31:83:c7:9f:57:fb:c7:29:2a:77: 39:81:10:74:14:73:e6:99:ab:84:fc:f9:90:f4:46: 38:72:0f:2e:50:26:20:83:e4:fa:3b:07:6b:fa:69: 26:e2:32:0d:70:66:dc:4e:67:fd:17:a3:64:61:4d: c1:0d:61:91:e6:25:6d:3b:44:6f:c7:89:68:8d:02: 7d:40:ac:e0:c0:2e:74:0e:86:b3:96:4b:4d:66:6a: ee:18:43:92:0a:db:0f:b9:91:67:5d:c9:64:7e:c6: 4e:40:5a:9e:7a:c3:50:f4:14:9e:c2:92:00:cf:c8: 22:e6:e2:2e:a5:90:b0:d0:f9:99:cb:77:09:c5:62: 6c:d9:fc:91:98:a7:16:52:79:57:c2:a6:f6:ce:57: 01:9d:68:94:50:0c:92:99:f2:3f:e0:b5:23:a9:3b: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B7:E1:1A:71:66:03:74:17:F5:CF:57:FF:0C:D2:95:1E:1D:F5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.241.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b4:8e:74:85:de:b3:3a:86:19:08:de:31:86:e0:05:03:db: 49:90:a7:3e:3d:3f:79:53:4e:c0:16:1b:c0:48:e4:65:87:1c: 5e:97:c4:07:65:d1:de:15:d3:2a:e2:ba:cc:8c:d3:fc:d7:70: f3:12:79:eb:87:29:6e:42:f4:f4:be:e7:86:d6:95:0d:cd:d5: 8a:2d:37:b7:4f:f2:a9:bf:ec:41:99:bb:c4:b9:85:c1:c0:15: ea:a1:ea:68:5b:27:24:fb:3b:a0:cc:14:7b:ea:71:65:52:9d: df:aa:b0:70:97:0a:0a:94:df:fa:76:06:ce:20:01:91:d4:40: 9e:d0:a9:0f:b8:de:14:7a:31:7b:ba:02:46:a8:42:44:8c:f2: 56:26:02:99:db:20:f7:82:13:0d:dd:d5:09:0e:08:d0:51:8a: 9a:01:b8:24:b8:ba:d6:44:d3:cd:0a:1c:0e:6f:a6:0c:d5:ca: 93:b4:7d:08:9a:65:8f:f8:f1:4f:08:81:30:a7:fd:5e:de:57: 3c:79:9b:b2:47:88:d3:2d:49:8e:b0:59:c3:17:3f:27:e9:95: b6:37:d7:76:5e:d0:4f:6f:e8:da:c6:59:7c:15:05:32:c9:93: 8a:34:a7:94:f5:89:ea:c3:25:a4:3a:84:44:1a:61:f0:0b:54: 3c:2e:7f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXs6TGBFwPSgMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzcwOGFiN2YtZmZhMS00MGZkLTgzYWUtMWM3MTY3ZDU4NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDEvxPK+9DCN9Q2oEY9E4tSczpY0n3zoBGFE pPCJKOwCm3v8E4OgbD68m3uOu6LUpmIBQvpd3yvsoozHkpPPEk3TWG00Xd6SgkWx z90DXGgatJUsctDYkUCJWJU08DGDx59X+8cpKnc5gRB0FHPmmauE/PmQ9EY4cg8u UCYgg+T6Owdr+mkm4jINcGbcTmf9F6NkYU3BDWGR5iVtO0Rvx4lojQJ9QKzgwC50 DoazlktNZmruGEOSCtsPuZFnXclkfsZOQFqeesNQ9BSewpIAz8gi5uIupZCw0PmZ y3cJxWJs2fyRmKcWUnlXwqb2zlcBnWiUUAySmfI/4LUjqTuw6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO34RpxZgN0F/XPV/8M0pUeHfXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y0YmRlODYtYWE4Yi0z NzlkLWI1Y2EtNGVkYTFmM2VhMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy0jnSF3rM6hhkI3jGG4AUD20mQpz49P3lTTsAWG8BI5GWHHF6XxAdl 0d4V0yriusyM0/zXcPMSeeuHKW5C9PS+54bWlQ3N1YotN7dP8qm/7EGZu8S5hcHA Feqh6mhbJyT7O6DMFHvqcWVSnd+qsHCXCgqU3/p2Bs4gAZHUQJ7QqQ+43hR6MXu6 AkaoQkSM8lYmApnbIPeCEw3d1QkOCNBRipoBuCS4utZE080KHA5vpgzVypO0fQia ZY/48U8IgTCn/V7eVzx5m7JHiNMtSY6wWcMXPyfplbY313Ze0E9v6NrGWXwVBTLJ k4o0p5T1ierDJaQ6hEQaYfALVDwufxo= -----END CERTIFICATE-----Generated at Sat Sep 26 05:32:07 2026 by rpki-client