$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a490cddc-be85-3d45-926c-2fc279e297fe.roa File: a490cddc-be85-3d45-926c-2fc279e297fe.roa (raw, json) Hash identifier: Af4KoHEs3TiYINmp0UeFJRU8X/Vuhohoq3A9KfwgDA4= Subject key identifier: 90:C9:FE:AC:73:41:19:7C:A8:B8:E2:79:63:22:78:E1:4D:AE:D1:8C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8DBD597BF637054B7F20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a490cddc-be85-3d45-926c-2fc279e297fe.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.193.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8d:bd:59:7b:f6:37:05:4b:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f254557a-ed2d-4675-8c5b-9174e6ce1a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:20:d9:92:5d:ec:2f:e0:25:7d:b2:2c:6c: cd:f3:97:af:7e:e2:51:a2:58:19:e6:71:78:73:a2: b8:d8:b6:78:1c:80:89:eb:eb:60:43:81:47:ae:2f: 62:3c:d2:73:fc:f1:18:1e:ad:2c:27:13:cb:a7:79: 61:49:fc:37:b3:da:1d:ef:7c:67:8f:de:f9:73:e6: 95:c7:76:84:4d:b6:27:9e:b4:19:1c:a5:8a:4d:ce: 89:44:da:26:bb:3d:5f:4e:aa:59:cd:fd:22:4e:27: 57:50:77:89:81:59:cc:c8:d4:a0:f8:42:36:1e:93: d9:ff:dc:5e:20:8b:26:06:bc:de:c5:10:fc:00:c3: 2c:5c:5a:8a:5b:77:47:c4:70:41:9b:23:3e:15:65: 0e:38:d0:2d:7a:d5:a9:11:16:ad:44:af:96:b1:b2: 19:1a:a5:0b:36:1c:db:22:80:c5:a3:62:2a:b4:22: fc:57:ac:d4:b5:7b:f6:9e:54:4f:96:56:f2:2f:57: 61:2a:37:69:25:15:03:6f:89:88:c7:8a:b6:70:3d: b7:e3:6b:79:b1:92:45:75:df:97:0b:70:62:d4:0a: d1:8a:6d:87:a5:f6:e1:ac:94:b7:b3:5f:a3:70:15: 2c:d5:29:46:98:88:56:6d:b5:68:8f:97:2d:1d:da: 1d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C9:FE:AC:73:41:19:7C:A8:B8:E2:79:63:22:78:E1:4D:AE:D1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a490cddc-be85-3d45-926c-2fc279e297fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.193.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:73:86:d5:50:c2:1e:05:0f:37:5e:a1:da:63:2a:41:dc:43: ff:10:21:84:53:0e:86:52:e8:9a:21:d1:a8:eb:4a:98:37:49: b7:7c:25:10:a5:50:70:24:cb:37:69:53:c5:f8:ed:a0:87:22: 55:3e:7c:d2:39:fb:62:1c:c8:80:ef:b3:f1:cf:bd:30:75:bc: aa:cc:9b:63:e3:04:37:50:8c:1c:10:25:44:36:20:18:e7:ef: 7b:73:7d:cb:3b:50:ec:cc:35:0e:3c:25:8a:3b:90:bd:36:85: d3:60:8b:d0:8f:f0:ff:ef:2e:bf:1a:62:93:db:7c:61:a9:3b: d7:34:8d:48:ea:b6:e0:0d:9f:5e:5b:9a:6f:fa:98:5c:fa:5b: 31:4d:fb:e8:87:0d:97:40:8f:7f:74:b9:9c:9e:53:a6:b7:97: b9:e7:40:08:d4:87:92:eb:12:ca:85:6c:34:3e:9b:b1:2b:55: 76:d7:cc:9b:cf:52:18:07:aa:b5:be:85:4d:eb:40:d3:bd:6c: e4:50:65:6d:dc:11:0e:03:82:01:42:f4:d0:de:56:62:55:69: a8:20:15:d4:ab:78:ca:f3:01:b7:d9:c0:0c:10:a4:af:b2:ca: 34:07:9b:25:86:5c:be:7f:ba:9c:b5:b1:49:3b:66:9b:09:98: ab:30:94:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY29WXv2NwVLfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjI1NDU1N2EtZWQyZC00Njc1LThjNWItOTE3NGU2Y2UxYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWwg2ZJd7C/gJX2yLGzN85evfuJRolgZ5nF4 c6K42LZ4HICJ6+tgQ4FHri9iPNJz/PEYHq0sJxPLp3lhSfw3s9od73xnj975c+aV x3aETbYnnrQZHKWKTc6JRNomuz1fTqpZzf0iTidXUHeJgVnMyNSg+EI2HpPZ/9xe IIsmBrzexRD8AMMsXFqKW3dHxHBBmyM+FWUOONAtetWpERatRK+WsbIZGqULNhzb IoDFo2IqtCL8V6zUtXv2nlRPllbyL1dhKjdpJRUDb4mIx4q2cD2342t5sZJFdd+X C3Bi1ArRim2HpfbhrJS3s1+jcBUs1SlGmIhWbbVoj5ctHdodtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDJ/qxzQRl8qLjieWMieOFNrtGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQ5MGNkZGMtYmU4NS0z ZDQ1LTkyNmMtMmZjMjc5ZTI5N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFzhtVQwh4FDzdeodpjKkHcQ/8QIYRTDoZS6Joh0ajrSpg3Sbd8JRCl UHAkyzdpU8X47aCHIlU+fNI5+2IcyIDvs/HPvTB1vKrMm2PjBDdQjBwQJUQ2IBjn 73tzfcs7UOzMNQ48JYo7kL02hdNgi9CP8P/vLr8aYpPbfGGpO9c0jUjqtuANn15b mm/6mFz6WzFN++iHDZdAj390uZyeU6a3l7nnQAjUh5LrEsqFbDQ+m7ErVXbXzJvP UhgHqrW+hU3rQNO9bORQZW3cEQ4DggFC9NDeVmJVaaggFdSreMrzAbfZwAwQpK+y yjQHmyWGXL5/upy1sUk7ZpsJmKswlKU= -----END CERTIFICATE-----Generated at Sat Sep 26 15:31:55 2026 by rpki-client