$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa File: 64843a99-637f-3b90-b32c-77f6cdcea810.roa (raw, json) Hash identifier: nyUK1A+ooJQ9oLIuXIqpK5FEinoAPNktegWSOIaiO40= Subject key identifier: 0C:E0:58:FC:F0:5D:73:E1:61:0D:01:89:09:B3:09:36:04:6A:60:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD2A7837E8731242CB900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.238.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d2:a7:83:7e:87:31:24:2c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3e61bb26-f7e1-4a2a-acfa-5521931765e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:d2:7f:69:52:30:f2:0f:4c:1a:32:2e:ff: 59:31:ff:ae:3f:ce:4c:77:98:4a:e9:5c:90:f4:0e: c1:85:39:97:65:11:19:5a:77:cb:f4:01:82:6c:75: 47:79:d4:14:85:25:f0:61:b9:13:3f:b3:50:4f:1a: 9d:30:6c:7f:68:6c:9a:48:45:0a:ff:f7:89:37:c3: be:91:22:a6:e3:77:6a:72:38:21:8b:2e:f7:b4:5e: f8:ce:a8:9a:db:6a:57:84:64:0e:fb:dd:8c:df:b0: 56:34:4a:61:4f:41:e0:81:3f:f1:ba:51:86:9a:5e: 01:e1:27:6c:f0:af:ac:1a:d2:d4:d9:13:b4:6e:77: f3:8b:e1:66:00:c6:13:11:93:bc:f4:82:50:63:aa: 67:74:05:62:fb:18:06:85:58:00:11:1b:01:64:c2: 77:08:60:4a:0a:cc:b8:51:da:60:3b:e3:05:ee:eb: 69:39:8a:32:f9:57:0c:9d:03:a8:cd:3b:97:bb:0e: dd:a5:a1:40:59:1c:c7:9f:3b:dc:eb:2d:5a:11:65: e4:04:c6:c5:74:ba:43:8a:8b:c7:2c:f1:c4:fa:28: bb:2a:c8:80:2a:ce:1d:67:e6:96:db:a2:c1:af:4b: 1c:de:99:c0:56:c3:ed:a6:06:5f:cc:97:93:f7:2c: 84:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E0:58:FC:F0:5D:73:E1:61:0D:01:89:09:B3:09:36:04:6A:60:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bc:a0:38:3a:50:06:e3:ee:22:9f:60:45:01:6a:fa:db:49: 63:f8:18:62:29:31:01:b1:fa:f1:4c:17:5e:3a:25:63:4c:64: f3:01:f4:54:8f:c0:c8:18:c6:84:87:88:5e:02:06:21:15:58: be:c8:51:56:ae:e2:22:72:1d:eb:22:e4:9e:31:39:12:66:92: 3f:8d:67:27:c4:33:cb:62:1a:bf:a0:64:87:ad:9f:85:3a:53: 3e:a2:b0:ca:8e:51:6c:c2:d2:36:e1:e0:c2:b3:a9:f6:74:7c: 37:8c:fa:a6:5e:4e:4e:72:d5:ad:14:c8:cc:ee:8c:20:61:51: f4:bd:ff:9a:0c:05:b8:61:82:0d:7d:cc:15:7b:10:0a:e9:24: 96:fe:67:15:20:a6:45:46:3b:9b:04:da:af:7d:6f:f7:cc:fa: 15:bc:78:98:b1:33:0a:02:b9:9b:6b:1f:bb:62:75:f3:c0:2e: 9a:37:b7:dc:56:b8:f3:08:93:df:f5:f9:42:3b:b8:2d:9e:23: 29:fa:fa:15:69:c9:64:b5:ce:40:11:aa:c6:8e:a7:f0:e9:9d: 4a:2a:57:0e:d0:96:70:9c:20:6a:ae:b2:ae:46:09:70:2f:eb: d5:a8:57:fb:b5:40:07:e1:ae:3f:98:f8:50:2a:dd:7e:f0:87: 16:74:9b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdKng36HMSQsuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk M2U2MWJiMjYtZjdlMS00YTJhLWFjZmEtNTUyMTkzMTc2NWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2fSf2lSMPIPTBoyLv9ZMf+uP85Md5hK6VyQ 9A7BhTmXZREZWnfL9AGCbHVHedQUhSXwYbkTP7NQTxqdMGx/aGyaSEUK//eJN8O+ kSKm43dqcjghiy73tF74zqia22pXhGQO+92M37BWNEphT0HggT/xulGGml4B4Sds 8K+sGtLU2RO0bnfzi+FmAMYTEZO89IJQY6pndAVi+xgGhVgAERsBZMJ3CGBKCsy4 UdpgO+MF7utpOYoy+VcMnQOozTuXuw7dpaFAWRzHnzvc6y1aEWXkBMbFdLpDiovH LPHE+ii7KsiAKs4dZ+aW26LBr0sc3pnAVsPtpgZfzJeT9yyEIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzgWPzwXXPhYQ0BiQmzCTYEamBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjQ4NDNhOTktNjM3Zi0z YjkwLWIzMmMtNzdmNmNkY2VhODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS8oDg6UAbj7iKfYEUBavrbSWP4GGIpMQGx+vFMF146JWNMZPMB9FSP wMgYxoSHiF4CBiEVWL7IUVau4iJyHesi5J4xORJmkj+NZyfEM8tiGr+gZIetn4U6 Uz6isMqOUWzC0jbh4MKzqfZ0fDeM+qZeTk5y1a0UyMzujCBhUfS9/5oMBbhhgg19 zBV7EArpJJb+ZxUgpkVGO5sE2q99b/fM+hW8eJixMwoCuZtrH7tidfPALpo3t9xW uPMIk9/1+UI7uC2eIyn6+hVpyWS1zkARqsaOp/DpnUoqVw7QlnCcIGqusq5GCXAv 69WoV/u1QAfhrj+Y+FAq3X7whxZ0m54= -----END CERTIFICATE-----Generated at Tue Sep 29 01:48:33 2026 by rpki-client