$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a3c2d42-6509-3dc2-96ea-e7e6af368365.roa File: 8a3c2d42-6509-3dc2-96ea-e7e6af368365.roa (raw, json) Hash identifier: Nj1VU9vOTXV9PAEfNR4Ms8ioeF52JGhCjkzT9+4clJA= Subject key identifier: 01:28:7F:CE:00:A0:1A:C6:1D:92:9C:16:F8:28:D2:E6:72:BF:7D:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49733893F83B9B4108A58BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a3c2d42-6509-3dc2-96ea-e7e6af368365.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 35.214.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:38:93:f8:3b:9b:41:08:a5:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1fcb1c10-4086-4dc8-a91b-ac2d3f48ff3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:c6:72:9d:3f:b4:4c:1a:c6:9e:dd:c9:3a: 0d:57:0d:3f:7e:3d:be:7b:4b:07:7b:dd:fe:06:17: cc:92:f3:4d:78:53:cb:45:29:b1:e1:d4:ff:41:bf: ce:83:4b:f8:65:dc:d3:03:f6:40:be:f1:ed:1b:a3: 61:1d:50:76:bc:a8:7a:5d:e4:2d:d2:76:e4:78:2d: b2:15:9a:88:95:a1:50:16:4e:ad:b8:c6:ed:ea:2d: 6b:1c:1f:ed:47:84:b2:a7:5c:8d:99:4e:a6:ff:9c: 03:ab:f6:f4:d6:65:d6:c5:15:11:ed:1d:2c:3a:72: a2:78:da:6f:29:dd:e9:86:b9:6e:58:61:33:43:a6: eb:f0:95:d5:35:30:4b:a0:f7:06:73:31:f7:6b:f1: 07:7b:e7:31:93:a6:51:2e:9a:b1:d9:4b:ed:ac:97: d6:c5:e3:b2:f3:61:70:19:1c:8f:d2:a6:1c:4e:16: a4:9c:a3:a4:f7:2d:f3:f9:68:ea:cc:2b:c5:30:f4: 13:ff:cd:9c:e7:fb:d4:ff:75:28:05:44:db:b7:da: 65:4c:a8:bc:59:ef:fd:0e:c3:72:b5:37:fe:bd:ba: 84:b3:d9:1e:0d:14:f6:c8:31:13:3d:ed:5b:1f:ff: 24:58:ba:72:61:69:b5:0d:6d:6f:9b:41:11:12:7d: cd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:28:7F:CE:00:A0:1A:C6:1D:92:9C:16:F8:28:D2:E6:72:BF:7D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a3c2d42-6509-3dc2-96ea-e7e6af368365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.214.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:74:50:17:46:4a:2c:7b:fa:21:ed:27:bf:4f:77:8d:15:d8: 87:5e:8b:4d:2a:ee:72:35:b8:35:ce:f1:2d:d6:43:cf:8f:5c: a7:e3:25:ac:82:24:55:fb:e4:95:08:fa:e1:00:95:1f:63:f4: f9:5a:f7:d1:af:2b:57:45:06:6b:57:74:91:c9:04:9e:56:49: 6a:f1:16:82:8b:24:a5:23:c6:c2:08:7c:5d:aa:56:12:e5:8b: 34:a6:2f:a2:76:34:09:39:2f:6a:52:7b:97:b2:25:2d:19:2b: be:a9:51:4a:e3:a7:5e:f6:a7:18:27:1d:cc:bf:cc:b2:41:38: 15:fe:77:17:82:0e:1c:ee:75:3f:04:66:3e:fc:2c:58:88:b5: ef:86:15:19:6a:ab:f4:24:d0:72:af:2a:25:8b:54:78:4b:c0: 21:ac:81:45:5c:05:30:4d:fc:60:07:12:1a:a9:7e:c8:b7:25: 60:89:00:c3:c3:84:6b:0f:21:97:0a:e9:92:7d:b6:f9:87:3e: 0a:3f:18:b0:51:8f:43:fc:16:50:ce:c0:d4:d7:0a:d5:71:2a: 3c:47:b1:ce:da:f4:06:e1:ef:66:b4:06:67:20:1d:e4:c2:3c: a2:92:b1:5d:7d:39:b2:a3:b6:52:da:6a:67:63:84:97:5e:18: da:64:bc:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcziT+DubQQili8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZjYjFjMTAtNDA4Ni00ZGM4LWE5MWItYWMyZDNmNDhmZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZzGcp0/tEwaxp7dyToNVw0/fj2+e0sHe93+ BhfMkvNNeFPLRSmx4dT/Qb/Og0v4ZdzTA/ZAvvHtG6NhHVB2vKh6XeQt0nbkeC2y FZqIlaFQFk6tuMbt6i1rHB/tR4Syp1yNmU6m/5wDq/b01mXWxRUR7R0sOnKieNpv Kd3phrluWGEzQ6br8JXVNTBLoPcGczH3a/EHe+cxk6ZRLpqx2UvtrJfWxeOy82Fw GRyP0qYcThaknKOk9y3z+WjqzCvFMPQT/82c5/vU/3UoBUTbt9plTKi8We/9DsNy tTf+vbqEs9keDRT2yDETPe1bH/8kWLpyYWm1DW1vm0EREn3NgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEof84AoBrGHZKcFvgo0uZyv30xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGEzYzJkNDItNjUwOS0z ZGMyLTk2ZWEtZTdlNmFmMzY4MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ0UBdGSix7+iHtJ79Pd40V2Idei00q7nI1uDXO8S3WQ8+PXKfjJayC JFX75JUI+uEAlR9j9Pla99GvK1dFBmtXdJHJBJ5WSWrxFoKLJKUjxsIIfF2qVhLl izSmL6J2NAk5L2pSe5eyJS0ZK76pUUrjp172pxgnHcy/zLJBOBX+dxeCDhzudT8E Zj78LFiIte+GFRlqq/Qk0HKvKiWLVHhLwCGsgUVcBTBN/GAHEhqpfsi3JWCJAMPD hGsPIZcK6ZJ9tvmHPgo/GLBRj0P8FlDOwNTXCtVxKjxHsc7a9Abh72a0BmcgHeTC PKKSsV19ObKjtlLaamdjhJdeGNpkvM4= -----END CERTIFICATE-----Generated at Fri Sep 25 23:09:04 2026 by rpki-client