$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b744e768-11d3-30ea-9e9d-c403eb3cd26f.roa File: b744e768-11d3-30ea-9e9d-c403eb3cd26f.roa (raw, json) Hash identifier: jA9kkDh+EzG6W5L1N3Yp1WLzrm1Y9AqYAsyvF89a6Io= Subject key identifier: 19:8E:38:ED:EE:F1:E3:D2:43:89:D0:A7:86:8E:F3:68:46:A4:38:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB49158C7DC5BA7A34400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b744e768-11d3-30ea-9e9d-c403eb3cd26f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.198.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b4:91:58:c7:dc:5b:a7:a3:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=592e9324-48f4-4f45-86d1-39ac68880a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:39:de:a9:15:78:32:62:74:07:a2:74:f1: 0a:fa:cb:ba:e0:14:12:cf:0f:f6:60:e9:59:64:2a: ed:fb:6c:4c:53:77:41:31:ce:fc:a8:7d:db:8a:66: 9c:cd:12:86:31:84:11:79:16:13:35:b4:bd:01:70: 87:67:35:61:2d:2e:b8:f1:62:0e:a1:2c:d7:82:83: 3b:93:01:86:92:81:5f:09:26:46:78:0a:b4:da:84: fb:55:68:e8:1d:1e:b5:04:14:7e:3a:61:ad:4b:ef: 1d:07:a3:76:66:e2:1a:6e:24:e8:a9:81:c7:72:7a: 54:1d:5f:94:51:06:7a:13:05:d9:c4:e4:22:41:12: 2d:50:40:96:23:6d:14:47:14:03:9e:4c:46:f2:23: e2:ee:a1:7f:5d:54:3d:16:1d:8a:b4:84:8f:22:d7: 4d:07:7f:61:67:37:d3:21:60:76:b7:16:67:ba:e2: b9:fc:5c:0b:f6:c4:0a:68:e0:5e:93:20:3a:c7:df: 14:4c:5d:76:62:05:f8:71:60:93:1e:6c:28:b8:09: 4f:dc:28:3c:04:02:10:3e:38:2f:73:db:22:4e:d1: 2a:a1:b2:ab:56:2f:cf:09:ef:b5:dd:67:6b:c5:22: db:d8:6d:a9:e4:6f:ef:70:69:1d:3d:8d:51:b6:66: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:38:ED:EE:F1:E3:D2:43:89:D0:A7:86:8E:F3:68:46:A4:38:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b744e768-11d3-30ea-9e9d-c403eb3cd26f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:09:b0:52:a3:3e:44:c1:1b:99:38:0e:64:42:4a:89:29:01: 58:4b:e9:b6:c5:20:de:0f:fe:78:94:89:ef:99:9a:e2:a2:a7: e1:e1:f3:50:51:88:2d:31:15:5a:a6:b6:4c:10:02:3b:3d:53: 00:65:e5:04:14:58:e2:03:d3:b2:8b:e3:f0:e5:71:39:33:c1: 29:28:9e:7b:fb:c3:6d:57:ae:45:44:b2:48:75:50:26:38:25: 55:d3:05:3f:da:12:d0:e4:4d:4a:c9:4c:7a:6a:89:38:27:52: ed:c8:a9:7c:11:10:37:6b:ad:2b:21:c7:87:44:28:45:51:05: af:9a:e9:f7:c4:e4:de:54:9b:41:ec:5f:89:b9:a4:ff:d1:b6: 5e:7c:5c:7f:a6:41:71:f4:f1:7e:1c:c2:30:f4:47:1e:14:57: e5:87:30:16:3e:ca:90:53:e9:78:5b:10:3a:21:d7:42:ba:29: 53:4b:f7:2d:ab:bb:72:1a:29:7d:02:c5:61:48:78:94:91:87: 05:84:98:0b:ad:cb:db:2f:05:07:d4:a4:d3:6d:0e:d3:95:fd: 4d:4d:60:7b:30:2d:53:79:19:10:6e:de:dc:d3:84:60:11:08: 21:19:08:c1:5f:17:ad:79:25:9f:f0:20:5d:8a:a0:46:29:46: a8:0a:6a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbSRWMfcW6ejRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTkyZTkzMjQtNDhmNC00ZjQ1LTg2ZDEtMzlhYzY4ODgwYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cs53qkVeDJidAeidPEK+su64BQSzw/2YOlZ ZCrt+2xMU3dBMc78qH3bimaczRKGMYQReRYTNbS9AXCHZzVhLS648WIOoSzXgoM7 kwGGkoFfCSZGeAq02oT7VWjoHR61BBR+OmGtS+8dB6N2ZuIabiToqYHHcnpUHV+U UQZ6EwXZxOQiQRItUECWI20URxQDnkxG8iPi7qF/XVQ9Fh2KtISPItdNB39hZzfT IWB2txZnuuK5/FwL9sQKaOBekyA6x98UTF12YgX4cWCTHmwouAlP3Cg8BAIQPjgv c9siTtEqobKrVi/PCe+13WdrxSLb2G2p5G/vcGkdPY1Rtmb6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmOOO3u8ePSQ4nQp4aO82hGpDgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjc0NGU3NjgtMTFkMy0z MGVhLTllOWQtYzQwM2ViM2NkMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQJsFKjPkTBG5k4DmRCSokpAVhL6bbFIN4P/niUie+ZmuKip+Hh81BR iC0xFVqmtkwQAjs9UwBl5QQUWOID07KL4/DlcTkzwSkonnv7w21XrkVEskh1UCY4 JVXTBT/aEtDkTUrJTHpqiTgnUu3IqXwREDdrrSshx4dEKEVRBa+a6ffE5N5Um0Hs X4m5pP/Rtl58XH+mQXH08X4cwjD0Rx4UV+WHMBY+ypBT6XhbEDoh10K6KVNL9y2r u3IaKX0CxWFIeJSRhwWEmAuty9svBQfUpNNtDtOV/U1NYHswLVN5GRBu3tzThGAR CCEZCMFfF615JZ/wIF2KoEYpRqgKamk= -----END CERTIFICATE-----Generated at Sat Sep 26 14:06:56 2026 by rpki-client