$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa File: c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa (raw, json) Hash identifier: /P6a+hP0WVQCvcgcib+hzlPfH5dtuIJ0U5gKLxC50BM= Subject key identifier: C0:A9:AA:08:FE:9B:8D:84:C4:E5:1F:A5:77:26:24:1F:84:B1:E0:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAFC237BE994D429D9140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.228.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:af:c2:37:be:99:4d:42:9d:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6599a7fc-c6b5-4da4-aa0f-6a8fc5621a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4f:49:ba:a3:b6:46:40:c7:2a:69:2c:9d:51: e7:b1:38:3f:bb:97:57:8d:b3:b7:ff:d0:7f:53:89: bd:87:11:a6:34:4b:42:20:74:a3:79:b0:1f:ed:6d: f4:a3:d2:a5:01:01:65:93:d7:8c:c4:8f:81:ee:28: dd:4e:0c:09:5b:3a:ac:00:b0:cc:90:4d:50:10:e7: 59:f7:12:06:84:7e:43:b4:fc:6b:f0:c5:83:c8:bc: 5a:88:57:80:8f:4d:dc:70:c1:df:01:1a:d6:1a:a6: 67:42:f2:8c:06:d7:9b:a9:d0:2c:50:30:fb:58:33: 4d:56:94:20:9f:fc:83:a8:90:8d:92:c0:74:d8:0d: c5:9b:8a:a7:d2:3f:ad:eb:65:59:20:e9:8f:16:ac: 3d:8e:4c:d3:5a:76:71:ed:7c:23:2c:b4:41:5a:71: 8d:d2:40:23:86:ee:58:2d:f7:18:d2:50:20:3a:71: b1:77:24:37:99:98:bd:e5:fc:a0:02:2f:eb:d7:9c: 84:43:14:70:3d:8f:08:65:27:42:03:e0:8b:31:32: 3f:f3:1d:52:20:ce:2f:11:f3:0f:83:a3:5a:ba:b0: 82:d4:cd:bf:2b:1c:e3:4f:a7:55:aa:75:9c:bf:36: 77:fe:1f:ae:6d:84:45:9d:c2:33:8a:8d:e9:68:b4: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:AA:08:FE:9B:8D:84:C4:E5:1F:A5:77:26:24:1F:84:B1:E0:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ea:37:c3:47:12:60:86:aa:53:3b:be:ca:b0:da:3a:b2:e7: 1a:6a:db:c4:b9:79:c3:ee:fc:4a:b0:ec:8c:64:a8:16:4f:13: d7:ee:53:0e:5a:04:61:63:b5:81:e9:b6:01:a1:a1:0b:34:d7: 3d:74:27:ba:60:0f:49:f2:bf:06:08:e6:69:30:05:16:a1:89: 01:b3:f7:63:f9:41:e4:ab:60:ea:03:e7:c4:db:e7:0b:46:dd: 50:e3:d2:c8:87:ad:e8:d0:3a:21:3c:95:ca:f1:23:6e:20:7f: 91:79:13:83:b5:ae:43:1b:67:72:73:26:a5:0c:68:fd:b9:63: 82:56:76:44:77:1b:37:a3:cc:85:6c:8e:8c:92:15:12:d5:d7: 1d:ab:9f:83:ab:87:47:08:f1:bb:33:00:79:8b:2a:db:c4:ef: 53:f7:36:8d:fd:d3:04:d3:49:b5:2d:dd:37:cc:67:e6:57:21: 1e:1d:b9:b9:9c:35:f2:5c:9f:9e:cd:17:c1:2d:63:aa:82:20: aa:df:c2:ec:86:2c:bf:a6:f7:a3:2f:f8:db:1e:1b:a0:1c:c2: 7f:3c:ce:c1:63:3e:9b:75:57:6c:07:00:ac:2b:0b:f1:9a:7a: b8:18:55:21:8b:08:b3:ca:fb:ff:66:21:cc:0a:81:e9:90:db: 5d:ad:54:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPa/CN76ZTUKdkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjU5OWE3ZmMtYzZiNS00ZGE0LWFhMGYtNmE4ZmM1NjIxYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi09JuqO2RkDHKmksnVHnsTg/u5dXjbO3/9B/ U4m9hxGmNEtCIHSjebAf7W30o9KlAQFlk9eMxI+B7ijdTgwJWzqsALDMkE1QEOdZ 9xIGhH5DtPxr8MWDyLxaiFeAj03ccMHfARrWGqZnQvKMBtebqdAsUDD7WDNNVpQg n/yDqJCNksB02A3Fm4qn0j+t62VZIOmPFqw9jkzTWnZx7XwjLLRBWnGN0kAjhu5Y LfcY0lAgOnGxdyQ3mZi95fygAi/r15yEQxRwPY8IZSdCA+CLMTI/8x1SIM4vEfMP g6NaurCC1M2/KxzjT6dVqnWcvzZ3/h+ubYRFncIzio3paLRp5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCpqgj+m42ExOUfpXcmJB+EseBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzU3YWNhZjYtYjBlMy0z OGM4LTg0ZmEtOTEwMzcwYmIwNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnqN8NHEmCGqlM7vsqw2jqy5xpq28S5ecPu/Eqw7IxkqBZPE9fuUw5a BGFjtYHptgGhoQs01z10J7pgD0nyvwYI5mkwBRahiQGz92P5QeSrYOoD58Tb5wtG 3VDj0siHrejQOiE8lcrxI24gf5F5E4O1rkMbZ3JzJqUMaP25Y4JWdkR3GzejzIVs joySFRLV1x2rn4Orh0cI8bszAHmLKtvE71P3No390wTTSbUt3TfMZ+ZXIR4dubmc NfJcn57NF8EtY6qCIKrfwuyGLL+m96Mv+NseG6Acwn88zsFjPpt1V2wHAKwrC/Ga ergYVSGLCLPK+/9mIcwKgemQ212tVGo= -----END CERTIFICATE-----Generated at Mon Sep 28 06:18:36 2026 by rpki-client