$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa File: a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa (raw, json) Hash identifier: hg3QM7ecyar8WFNFOFt7hpHNYw+yLWr17LfIRqOf4d4= Subject key identifier: E0:76:46:8B:A8:83:E2:D3:17:11:25:1C:79:81:A6:F3:BA:FA:80:06 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC36746B5C1F8A75E5A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 35.217.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c3:67:46:b5:c1:f8:a7:5e:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e87fd4f6-2ef3-4e00-a6f2-581916a5c45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:ac:8c:59:ce:3b:df:e3:08:43:5c:06:91: 4e:26:aa:c6:1b:f2:22:c4:07:42:be:55:32:70:59: 41:66:dd:cd:c0:2e:69:4c:e8:0f:8f:df:49:d5:18: bd:af:ed:cd:8d:68:cc:4d:14:e9:52:e6:71:56:a0: 82:d3:98:97:aa:a7:0c:8e:1a:19:90:83:58:e9:d6: 31:d9:38:6e:38:97:3b:36:df:d0:68:07:a1:91:8e: 1b:9f:24:ac:28:47:bc:7d:5f:53:d3:cf:a0:e3:d9: 5e:1c:7a:bb:9b:ae:ed:8c:d8:d8:fa:21:3e:84:75: 34:f7:e0:86:c4:44:6a:1b:56:7b:6f:75:80:86:2a: 31:ef:ec:f6:46:79:ea:fe:a9:e2:7d:17:e5:e9:47: 4c:07:34:fe:7f:04:01:e2:67:2a:45:da:74:3c:58: e1:65:ac:0a:1a:29:64:bd:6c:81:5e:24:75:da:25: 64:70:3c:e6:29:9f:dc:f6:f4:73:13:ca:55:36:56: 19:be:5d:15:1f:0d:27:e9:10:11:14:ec:3a:3d:96: ec:9d:a0:da:b8:01:f5:db:83:34:4c:00:b6:21:d5: ab:5d:ff:3f:ff:b5:81:bb:ea:3b:63:60:b8:ae:5f: c0:ed:fd:a8:48:cd:42:8a:bf:e2:78:66:15:2c:aa: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:46:8B:A8:83:E2:D3:17:11:25:1C:79:81:A6:F3:BA:FA:80:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:be:7b:c6:7d:45:7c:5a:79:4b:fa:6a:96:bc:97:94:ff:84: 0b:a0:9f:ec:e6:54:e9:36:c6:0d:9b:f9:4f:e2:d8:58:24:bf: 6d:4a:a2:cf:3a:03:1c:9f:60:16:28:33:ce:0c:51:93:44:34: 4e:da:91:27:46:69:20:d4:90:c4:69:3b:ff:a7:46:ea:e1:c5: d0:14:b4:95:e2:1f:56:6b:1a:6b:99:6a:5e:e7:8e:fd:91:c8: b3:28:29:7e:b1:fb:6f:ac:85:8c:94:a7:02:94:d5:0e:05:9a: b0:08:23:86:6b:0c:95:19:8f:7a:32:be:b5:a1:dd:e2:84:3c: b2:d0:94:21:15:eb:cd:13:ea:33:6a:ef:8b:47:d8:a8:14:6d: 89:03:05:2f:a5:db:98:44:f2:20:11:55:ee:ea:77:5a:52:5d: 28:78:94:23:0c:fc:f8:4c:05:23:ec:76:13:65:b1:dc:a9:eb: 4f:6c:ae:10:0a:5c:f3:79:b4:77:a1:35:8d:a8:c8:31:46:9c: 67:c5:1a:af:91:ae:7c:c3:b6:4e:da:ab:6d:ad:ed:d4:f8:d6: fe:ec:e1:a0:11:7b:57:78:79:90:28:84:94:56:7d:82:50:80: 9e:89:e3:31:fb:2e:14:7e:87:9b:fc:b6:dd:ca:78:7f:1d:f4: 1b:b3:cf:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcNnRrXB+KdeWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTg3ZmQ0ZjYtMmVmMy00ZTAwLWE2ZjItNTgxOTE2YTVjNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyasjFnOO9/jCENcBpFOJqrGG/IixAdCvlUy cFlBZt3NwC5pTOgPj99J1Ri9r+3NjWjMTRTpUuZxVqCC05iXqqcMjhoZkINY6dYx 2ThuOJc7Nt/QaAehkY4bnySsKEe8fV9T08+g49leHHq7m67tjNjY+iE+hHU09+CG xERqG1Z7b3WAhiox7+z2Rnnq/qnifRfl6UdMBzT+fwQB4mcqRdp0PFjhZawKGilk vWyBXiR12iVkcDzmKZ/c9vRzE8pVNlYZvl0VHw0n6RARFOw6PZbsnaDauAH124M0 TAC2IdWrXf8//7WBu+o7Y2C4rl/A7f2oSM1Cir/ieGYVLKpaEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB2Rouog+LTFxElHHmBpvO6+oAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVlYzdkNjgtMGMzNS0z ZWQyLTk0ZmMtYjQ3YzIwOGFiYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK+e8Z9RXxaeUv6apa8l5T/hAugn+zmVOk2xg2b+U/i2Fgkv21Kos86 AxyfYBYoM84MUZNENE7akSdGaSDUkMRpO/+nRurhxdAUtJXiH1ZrGmuZal7njv2R yLMoKX6x+2+shYyUpwKU1Q4FmrAII4ZrDJUZj3oyvrWh3eKEPLLQlCEV680T6jNq 74tH2KgUbYkDBS+l25hE8iARVe7qd1pSXSh4lCMM/PhMBSPsdhNlsdyp609srhAK XPN5tHehNY2oyDFGnGfFGq+RrnzDtk7aq22t7dT41v7s4aARe1d4eZAohJRWfYJQ gJ6J4zH7LhR+h5v8tt3KeH8d9Buzz9Q= -----END CERTIFICATE-----Generated at Sat Sep 26 15:32:52 2026 by rpki-client