$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77de961e-a0fa-36d2-865f-5dffdfc4e152.roa File: 77de961e-a0fa-36d2-865f-5dffdfc4e152.roa (raw, json) Hash identifier: nF9GYR/8Z1k1RtO4tXFQaeG3/nyDK4tsyXIb9Au0/aY= Subject key identifier: 8D:D6:DA:3A:2B:82:9A:BD:2A:6B:7E:FF:42:F7:F4:60:2F:B2:30:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAD9FC29EDCC8AE9E5060 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77de961e-a0fa-36d2-865f-5dffdfc4e152.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.235.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ad:9f:c2:9e:dc:c8:ae:9e:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a31760fa-57ed-4abf-a3a5-5bff5f1690b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:52:2f:5e:24:10:73:06:74:e3:3c:df:da: f4:82:8c:c6:1d:4c:83:aa:9f:59:9d:1d:e5:98:67: f9:47:af:db:83:16:4b:f1:aa:cd:fd:01:6a:a6:25: b2:28:f4:ad:97:9a:59:fa:a1:e5:39:57:f3:8c:8b: 70:6f:62:c5:82:42:ae:cd:22:39:95:74:10:60:ad: 75:7a:97:9d:3a:c4:60:45:78:5b:c7:82:bd:f2:5e: ba:a1:51:92:33:b1:33:61:93:98:21:85:70:cf:25: a1:08:5e:69:45:28:82:55:ad:67:1a:8b:39:cb:bd: ed:c7:db:83:94:ba:84:7d:fb:fc:3a:86:cb:ce:ec: c2:ee:5e:9b:87:e4:8f:70:11:73:fd:fa:be:09:e3: b5:0b:07:b8:a4:16:c3:7c:a0:8a:3f:d7:85:85:bb: 42:47:de:2d:a6:d1:93:6f:a4:7a:93:e4:18:e8:01: a7:1a:d2:37:04:72:eb:ea:df:4a:1e:30:66:f4:1b: 3c:49:23:20:c4:16:c1:28:c7:30:1a:25:40:2d:bd: 8a:52:bb:0c:cc:d8:dc:10:32:e7:a2:ec:92:fe:1b: 81:ee:c7:51:41:5f:49:2b:98:99:17:1f:fd:0a:37: c5:40:c0:20:b0:f6:04:8c:47:11:0f:af:e2:46:a4: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D6:DA:3A:2B:82:9A:BD:2A:6B:7E:FF:42:F7:F4:60:2F:B2:30:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77de961e-a0fa-36d2-865f-5dffdfc4e152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:57:23:67:16:be:95:ee:7e:c3:54:d7:09:77:83:de:be:93: 8b:b6:f6:13:40:12:75:fa:8c:fc:36:52:3c:41:58:52:b3:c5: 3c:ff:40:c5:61:13:6c:e2:ec:54:70:84:d2:a9:60:42:ab:6a: 89:63:1e:05:da:d3:2c:51:c5:92:4e:8b:d9:37:a2:00:b1:9e: ce:58:2a:47:a4:3e:79:77:b0:0d:16:ff:6c:a7:e2:7b:52:2a: ba:b6:09:a5:54:ee:1e:7e:2e:b9:67:ed:16:82:1c:db:3f:c6: 0a:87:f1:2e:03:a2:4c:ba:3c:1c:ac:b1:52:ea:fb:91:e9:d8: ac:6b:41:f5:bf:5e:9b:c0:43:f6:71:09:bc:85:45:33:e6:66: cc:db:ae:32:60:4a:6f:45:e1:62:96:d3:df:0c:28:76:1b:f3: a3:de:d6:e9:dc:80:d6:8e:81:2e:8d:23:5b:d7:40:d4:03:10: 73:d9:3d:d1:4c:93:00:8e:0b:1b:6e:bf:18:88:fe:f0:94:25: d5:87:e5:65:90:e7:a7:60:ef:72:2f:c0:3e:a4:49:2f:f5:bf: 0d:29:e1:ed:bd:d1:39:bb:82:40:59:87:9b:d4:6c:d7:bb:b6: 7f:53:9c:ff:06:11:70:ef:a3:57:2e:68:b3:ca:0e:a1:11:72: bf:11:0b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPa2fwp7cyK6eUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTMxNzYwZmEtNTdlZC00YWJmLWEzYTUtNWJmZjVmMTY5MGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+pSL14kEHMGdOM839r0gozGHUyDqp9ZnR3l mGf5R6/bgxZL8arN/QFqpiWyKPStl5pZ+qHlOVfzjItwb2LFgkKuzSI5lXQQYK11 epedOsRgRXhbx4K98l66oVGSM7EzYZOYIYVwzyWhCF5pRSiCVa1nGos5y73tx9uD lLqEffv8OobLzuzC7l6bh+SPcBFz/fq+CeO1Cwe4pBbDfKCKP9eFhbtCR94tptGT b6R6k+QY6AGnGtI3BHLr6t9KHjBm9Bs8SSMgxBbBKMcwGiVALb2KUrsMzNjcEDLn ouyS/huB7sdRQV9JK5iZFx/9CjfFQMAgsPYEjEcRD6/iRqSASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3W2jorgpq9Kmt+/0L39GAvsjB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzdkZTk2MWUtYTBmYS0z NmQyLTg2NWYtNWRmZmRmYzRlMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI+vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1XI2cWvpXufsNU1wl3g96+k4u29hNAEnX6jPw2UjxBWFKzxTz/QMVh E2zi7FRwhNKpYEKraoljHgXa0yxRxZJOi9k3ogCxns5YKkekPnl3sA0W/2yn4ntS Krq2CaVU7h5+Lrln7RaCHNs/xgqH8S4Doky6PByssVLq+5Hp2KxrQfW/XpvAQ/Zx CbyFRTPmZszbrjJgSm9F4WKW098MKHYb86Pe1uncgNaOgS6NI1vXQNQDEHPZPdFM kwCOCxtuvxiI/vCUJdWH5WWQ56dg73IvwD6kSS/1vw0p4e290Tm7gkBZh5vUbNe7 tn9TnP8GEXDvo1cuaLPKDqERcr8RCwE= -----END CERTIFICATE-----Generated at Sat Sep 26 16:50:22 2026 by rpki-client