$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa File: 85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa (raw, json) Hash identifier: VGliAx/UG4OZkJaYAx/uL4uP0d1cUrvlbyiwusnCLTM= Subject key identifier: 4E:53:68:63:17:C2:C9:C6:52:58:57:1D:54:D3:6C:7B:25:AC:BD:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8C67DC1723BBCC621180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.200.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8c:67:dc:17:23:bb:cc:62:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1fe50323-556d-4bea-bb4d-e8f4c32d0d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:00:c3:e0:67:da:e1:79:f0:75:98:4e:24: 40:2e:b6:93:15:92:1a:2f:98:22:8d:10:66:fa:e9: e3:99:9e:31:e5:73:cf:3d:7f:db:29:8a:31:fa:64: 90:02:50:cc:46:0c:48:b0:65:24:62:ba:af:a8:58: 81:3a:e7:73:22:ba:38:4d:59:87:05:03:26:46:76: 60:11:1f:51:27:fb:a5:ce:31:da:a5:56:29:c3:1c: cb:71:dd:25:20:ba:69:a3:5e:56:8a:b9:d9:ae:75: 90:c9:f9:25:a0:73:a8:44:1a:0b:0b:5e:ad:1c:f1: e5:a7:ba:43:b3:93:ef:ca:c5:10:2f:f1:03:61:68: 26:0e:71:7e:b5:42:8d:6f:1e:4c:e9:c1:af:da:72: ba:ef:f9:31:11:34:d0:63:7f:f4:44:29:94:e2:b7: d0:59:40:09:f4:7b:a9:17:95:53:6e:ce:d5:22:6b: c7:ef:34:7d:53:70:45:65:7d:57:3b:f0:f1:97:e9: 45:4d:47:bf:8d:85:d9:3d:cd:0a:f9:ad:4f:36:04: fe:cf:fa:7f:e2:0e:85:53:b4:9f:60:c0:92:cb:67: 60:6d:81:8a:03:b2:65:a2:bc:9f:bd:b8:35:ee:6e: e5:6a:72:10:ee:f6:e6:ee:cd:da:d9:ec:88:ad:4d: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:53:68:63:17:C2:C9:C6:52:58:57:1D:54:D3:6C:7B:25:AC:BD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ca:49:ad:f1:f4:93:b7:72:e8:c5:85:ee:7d:89:4b:cb:31: b3:b6:99:bb:02:0a:73:0a:df:d4:6d:4e:80:38:9e:1b:12:cd: 5e:4f:35:44:33:68:29:68:b6:3b:3a:16:b8:87:6d:66:30:b7: ef:0e:b3:17:62:4f:61:09:8a:a1:70:bd:68:33:21:4f:48:75: 1d:25:92:1c:c8:93:39:0b:47:ea:a7:bd:8b:77:f2:7e:09:5c: 41:5d:f7:31:af:12:c1:93:22:d7:89:a5:f7:b5:6c:de:67:c4: 9d:c2:73:e0:d1:a2:d3:41:1e:0a:43:a3:f3:9d:54:97:d8:20: c6:a9:26:ca:f2:25:a0:7c:6d:6e:aa:97:b6:cb:5f:3d:e1:64: 3d:67:56:18:d1:d1:03:f2:bb:7a:f4:be:5b:16:e9:0e:c9:2b: b1:8a:cc:f3:fe:b4:cc:bb:1a:3e:f6:75:20:d7:31:7c:bc:31: 48:06:78:18:48:f3:6a:3a:03:6d:51:68:e0:a2:10:56:38:be: 28:5d:47:a9:e8:18:82:4c:3b:3b:4a:c0:38:45:2a:35:23:09: ad:a2:52:5a:68:e3:43:1a:26:c5:9e:ab:3c:16:6f:fb:0c:f9: 1f:59:91:6f:32:3f:5b:5b:f6:30:7d:c1:de:59:31:89:f9:ba: a5:14:47:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYxn3Bcju8xiEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWZlNTAzMjMtNTU2ZC00YmVhLWJiNGQtZThmNGMzMmQwZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA064Aw+Bn2uF58HWYTiRALraTFZIaL5gijRBm +unjmZ4x5XPPPX/bKYox+mSQAlDMRgxIsGUkYrqvqFiBOudzIro4TVmHBQMmRnZg ER9RJ/ulzjHapVYpwxzLcd0lILppo15WirnZrnWQyfkloHOoRBoLC16tHPHlp7pD s5PvysUQL/EDYWgmDnF+tUKNbx5M6cGv2nK67/kxETTQY3/0RCmU4rfQWUAJ9Hup F5VTbs7VImvH7zR9U3BFZX1XO/Dxl+lFTUe/jYXZPc0K+a1PNgT+z/p/4g6FU7Sf YMCSy2dgbYGKA7Jloryfvbg17m7lanIQ7vbm7s3a2eyIrU1UtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5TaGMXwsnGUlhXHVTTbHslrL0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODVmM2Q1YTgtZGM5Ny0z ZjdjLWE4OGEtN2NjM2I4YTFiNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8gQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXKSa3x9JO3cujFhe59iUvLMbO2mbsCCnMK39RtToA4nhsSzV5PNUQz aClotjs6FriHbWYwt+8OsxdiT2EJiqFwvWgzIU9IdR0lkhzIkzkLR+qnvYt38n4J XEFd9zGvEsGTIteJpfe1bN5nxJ3Cc+DRotNBHgpDo/OdVJfYIMapJsryJaB8bW6q l7bLXz3hZD1nVhjR0QPyu3r0vlsW6Q7JK7GKzPP+tMy7Gj72dSDXMXy8MUgGeBhI 82o6A21RaOCiEFY4vihdR6noGIJMOztKwDhFKjUjCa2iUlpo40MaJsWeqzwWb/sM +R9ZkW8yP1tb9jB9wd5ZMYn5uqUUR90= -----END CERTIFICATE-----Generated at Sat Sep 26 14:06:00 2026 by rpki-client