$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48f219f8-aaea-367d-9e97-39dac038efea.roa File: 48f219f8-aaea-367d-9e97-39dac038efea.roa (raw, json) Hash identifier: //tIPV815hmhxdMw5xdiIFZovyaiWnsV0dNySxl9djQ= Subject key identifier: 28:2F:1B:38:E1:74:77:22:FB:3A:ED:AB:92:CD:22:96:0E:14:F2:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBECE67933186A5509080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48f219f8-aaea-367d-9e97-39dac038efea.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.203.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:be:ce:67:93:31:86:a5:50:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0ad71b3e-900c-4bed-868e-14fdd4d287ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:7f:8b:68:39:a1:d0:af:e1:32:86:b8:7f: cf:1f:60:06:72:96:9b:36:9b:35:95:30:f0:a2:c1: 9b:d2:aa:84:05:6e:9a:d8:90:55:03:fd:84:4f:5e: dc:60:48:cd:e1:60:73:be:67:8a:e0:c0:63:86:2c: e7:b7:c9:76:c3:63:45:7b:b0:13:06:13:24:45:03: 8e:83:e2:73:f4:31:21:76:16:49:e2:70:c0:e7:78: 33:44:35:ca:fa:71:91:ca:8e:3b:95:a4:79:0d:43: b1:aa:a0:47:31:82:5d:28:eb:8f:fb:e7:ce:24:cf: 53:92:55:34:aa:2d:b1:69:56:f1:37:63:72:6a:39: b5:10:e0:fb:7e:3e:47:4a:d3:ad:76:3b:db:1e:92: 4d:f7:6c:9c:43:18:e9:2d:28:55:40:c6:d3:d3:71: 14:c3:56:d6:a5:01:7b:15:88:4e:ba:38:81:fe:36: e4:53:28:9d:27:44:43:2a:aa:1a:2c:bc:a5:6c:c7: 76:cc:e5:31:38:97:62:3d:28:37:bd:4a:82:f4:7b: 88:68:69:86:3b:a0:c6:d3:85:c2:58:8c:36:23:8d: fb:14:91:aa:74:1f:15:e0:18:ef:ac:e3:2b:5a:7e: 1a:f1:e3:4c:b4:ef:86:5f:29:9e:e9:09:e9:91:93: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2F:1B:38:E1:74:77:22:FB:3A:ED:AB:92:CD:22:96:0E:14:F2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48f219f8-aaea-367d-9e97-39dac038efea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:0e:81:f1:f0:43:3d:3f:19:e6:f1:c0:77:18:b2:c6:59:f8: f6:7c:c6:61:8d:6d:2d:55:d8:1e:f4:b6:59:80:70:2e:d6:ee: e9:44:c2:8e:49:fa:37:7a:9f:36:5b:08:e4:cf:9d:1a:0a:21: 83:c2:04:07:96:9c:8f:ca:b4:d2:89:1a:f3:29:79:21:8a:e9: 05:2f:1c:be:29:21:27:88:db:a7:6a:5e:10:b6:0b:0a:2e:dc: ec:8b:d5:85:32:6b:7a:4a:0e:74:41:af:09:0d:0d:3a:fb:23: ab:bc:5c:5a:ab:52:36:27:3c:24:a2:1d:68:1b:74:d5:bc:84: 95:99:44:63:f9:9c:b7:f7:7c:78:ba:fd:40:9d:e4:19:4b:b7: 08:8c:8f:c2:6d:b2:a9:ad:a4:c4:91:0f:b3:06:c0:bd:a7:8a: 8d:83:71:18:17:e3:51:5d:85:7c:bd:83:65:b5:a7:6e:f9:c5: 6e:d6:c2:65:df:0d:5c:20:74:d2:17:fa:c3:e2:c1:9c:a0:85: 6c:23:6f:1a:95:b8:fe:91:f0:85:59:e3:6b:b2:5a:d3:85:d0: 14:98:47:36:3d:33:69:84:43:cd:64:9b:79:f0:e7:b8:b3:9c: 25:e0:13:20:41:b8:60:37:6d:c8:83:97:fc:23:3e:52:8f:4d: 62:8e:a2:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb7OZ5MxhqVQkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGFkNzFiM2UtOTAwYy00YmVkLTg2OGUtMTRmZGQ0ZDI4N2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMB/i2g5odCv4TKGuH/PH2AGcpabNps1lTDw osGb0qqEBW6a2JBVA/2ET17cYEjN4WBzvmeK4MBjhiznt8l2w2NFe7ATBhMkRQOO g+Jz9DEhdhZJ4nDA53gzRDXK+nGRyo47laR5DUOxqqBHMYJdKOuP++fOJM9TklU0 qi2xaVbxN2Nyajm1EOD7fj5HStOtdjvbHpJN92ycQxjpLShVQMbT03EUw1bWpQF7 FYhOujiB/jbkUyidJ0RDKqoaLLylbMd2zOUxOJdiPSg3vUqC9HuIaGmGO6DG04XC WIw2I437FJGqdB8V4BjvrOMrWn4a8eNMtO+GXyme6QnpkZM8/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgvGzjhdHci+zrtq5LNIpYOFPKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDhmMjE5ZjgtYWFlYS0z NjdkLTllOTctMzlkYWMwMzhlZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMOgfHwQz0/GebxwHcYssZZ+PZ8xmGNbS1V2B70tlmAcC7W7ulEwo5J +jd6nzZbCOTPnRoKIYPCBAeWnI/KtNKJGvMpeSGK6QUvHL4pISeI26dqXhC2Cwou 3OyL1YUya3pKDnRBrwkNDTr7I6u8XFqrUjYnPCSiHWgbdNW8hJWZRGP5nLf3fHi6 /UCd5BlLtwiMj8JtsqmtpMSRD7MGwL2nio2DcRgX41FdhXy9g2W1p275xW7WwmXf DVwgdNIX+sPiwZyghWwjbxqVuP6R8IVZ42uyWtOF0BSYRzY9M2mEQ81km3nw57iz nCXgEyBBuGA3bciDl/wjPlKPTWKOork= -----END CERTIFICATE-----Generated at Sat Sep 26 10:13:04 2026 by rpki-client