$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa File: 4867dc89-6f52-3a23-9d9c-4e26531651da.roa (raw, json) Hash identifier: jktDmGHXw1/MLEZcnkgN5lOiQ7ppFq32VaPiCm9tU3w= Subject key identifier: 95:4B:7B:5E:56:33:28:73:93:4D:0B:2E:91:7E:AB:E0:FC:AB:B7:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9E565FCD7B3129E5AE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.235.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9e:56:5f:cd:7b:31:29:e5:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ecc56c67-4199-4f11-9a14-0528f1c733d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:11:59:c8:42:f6:42:1f:49:ed:0e:e3:46:c6: bd:38:16:d6:15:13:db:6b:54:22:02:03:a5:80:62: 18:d7:74:73:8e:e8:b2:2e:45:aa:55:90:12:24:7f: 13:1f:1a:64:d2:3a:32:15:7e:e5:86:09:f6:c6:30: e9:5c:9e:db:88:c0:d0:07:9e:d6:e5:04:10:25:47: be:4b:2c:9c:22:3b:65:da:52:d1:d8:60:1c:26:d0: d2:97:c4:67:8f:45:97:6e:45:cb:97:41:a0:d3:1a: 59:64:2f:d4:5f:8c:14:b8:96:54:74:d4:69:8f:c6: d7:ec:7c:69:77:de:e8:c5:f8:2f:23:86:34:c1:0b: 92:01:4e:65:f4:57:7c:75:5e:c9:4c:72:4f:93:3d: 76:4c:c9:50:2b:48:c4:e5:63:fb:6b:b2:86:41:f2: ab:41:92:c1:17:75:59:ce:ab:c7:68:13:04:f1:4e: e1:08:d2:e6:a5:66:45:12:88:8e:f0:91:5b:95:5b: ae:06:e4:37:6c:ac:c4:ba:cb:18:9a:02:b7:0e:85: df:6d:fa:54:28:cc:ab:40:c0:16:c5:22:36:25:d4: f0:7b:fa:fc:d8:5f:e9:d1:3c:71:ba:20:91:f5:91: 5d:61:e9:9a:99:7a:e8:9d:82:aa:62:01:15:2f:77: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4B:7B:5E:56:33:28:73:93:4D:0B:2E:91:7E:AB:E0:FC:AB:B7:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:df:e8:7b:c6:77:3f:68:3d:9d:90:a2:80:d6:38:78:c6:67: 20:dd:8e:0d:e8:21:1e:7e:81:0f:d1:da:6b:01:da:fc:91:eb: cd:ea:3e:ce:79:ad:46:f6:0f:fb:07:ee:ff:bd:65:6a:4b:e2: f0:f3:35:4d:15:14:5c:57:3b:f5:83:ee:da:72:0d:53:55:1a: 90:58:a1:56:e2:b6:92:ba:e2:6a:e6:9d:1d:1f:4f:3e:0b:06: 22:8a:c8:a8:28:f1:23:a4:99:ea:36:6b:fc:a4:61:e8:1d:7e: d6:d4:33:94:30:30:28:a6:5e:5c:ec:6e:21:de:c8:5f:e1:28: ad:e1:33:cf:99:e4:23:e1:93:b3:66:d4:a7:2a:0a:05:6c:ba: 98:84:ed:c5:38:8e:44:2f:45:e0:c4:01:ed:b1:ae:4d:db:46: ac:28:49:50:4f:e3:c6:51:f1:6f:c8:54:81:5f:1a:82:26:00: 5d:57:23:54:da:cf:09:47:ff:e9:7c:af:37:33:a8:24:1c:4b: f0:36:e9:6c:2a:87:a7:d2:f2:99:8d:24:cd:63:5a:15:07:dc: 50:2c:c6:e5:22:d9:14:64:ac:19:f8:49:ef:23:9f:fe:a3:1f: f1:b5:be:6e:fc:10:b3:55:05:41:80:8e:81:4c:02:06:26:33: 99:e8:71:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ5WX817MSnlroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWNjNTZjNjctNDE5OS00ZjExLTlhMTQtMDUyOGYxYzczM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBFZyEL2Qh9J7Q7jRsa9OBbWFRPba1QiAgOl gGIY13RzjuiyLkWqVZASJH8THxpk0joyFX7lhgn2xjDpXJ7biMDQB57W5QQQJUe+ SyycIjtl2lLR2GAcJtDSl8Rnj0WXbkXLl0Gg0xpZZC/UX4wUuJZUdNRpj8bX7Hxp d97oxfgvI4Y0wQuSAU5l9Fd8dV7JTHJPkz12TMlQK0jE5WP7a7KGQfKrQZLBF3VZ zqvHaBME8U7hCNLmpWZFEoiO8JFblVuuBuQ3bKzEussYmgK3DoXfbfpUKMyrQMAW xSI2JdTwe/r82F/p0TxxuiCR9ZFdYemamXronYKqYgEVL3eciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVLe15WMyhzk00LLpF+q+D8q7c9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDg2N2RjODktNmY1Mi0z YTIzLTlkOWMtNGUyNjUzMTY1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILf6HvGdz9oPZ2QooDWOHjGZyDdjg3oIR5+gQ/R2msB2vyR683qPs55 rUb2D/sH7v+9ZWpL4vDzNU0VFFxXO/WD7tpyDVNVGpBYoVbitpK64mrmnR0fTz4L BiKKyKgo8SOkmeo2a/ykYegdftbUM5QwMCimXlzsbiHeyF/hKK3hM8+Z5CPhk7Nm 1KcqCgVsupiE7cU4jkQvReDEAe2xrk3bRqwoSVBP48ZR8W/IVIFfGoImAF1XI1Ta zwlH/+l8rzczqCQcS/A26Wwqh6fS8pmNJM1jWhUH3FAsxuUi2RRkrBn4Se8jn/6j H/G1vm78ELNVBUGAjoFMAgYmM5nocaY= -----END CERTIFICATE-----Generated at Thu Oct 8 16:00:40 2026 by rpki-client