$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafc9d97-4121-3ff4-869e-d00ede385538.roa File: cafc9d97-4121-3ff4-869e-d00ede385538.roa (raw, json) Hash identifier: 8p8mix5V7TNVbUPfwSUE7u0CRuTJlXODgtyn7+s33ZA= Subject key identifier: 83:33:3E:37:D8:E6:DC:C8:E1:EF:E1:39:C1:8D:B5:8C:45:FB:18:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBE0EFFB3B44D209CFBE9 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafc9d97-4121-3ff4-869e-d00ede385538.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.198.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:be:0e:ff:b3:b4:4d:20:9c:fb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=005d75f1-13d9-45b8-be2b-495953f87179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:ea:ea:01:76:92:e9:17:e2:f2:6a:5a:86: 03:b5:7e:a7:77:40:98:d2:1e:55:9a:56:94:3d:03: db:5e:5c:ee:26:2b:10:42:49:bf:47:b8:e1:6f:7a: 1a:fa:80:0f:a5:16:6f:82:26:85:cd:db:22:97:74: 4f:4d:2c:fa:65:51:dc:25:5e:7f:e3:cf:ac:f4:5e: 10:60:cc:68:1e:02:aa:87:94:a4:58:2b:66:9a:c2: ea:a3:a0:05:08:a9:75:5d:0a:f0:a6:63:fc:e1:6e: ab:dc:f7:3e:32:01:f4:ac:60:a2:44:fe:0a:10:35: 9d:50:99:99:36:d1:3b:76:a4:4d:b2:cd:9a:44:db: 47:8f:6b:5c:22:7e:f0:75:e1:59:5d:49:a1:74:89: 22:49:45:c0:f9:e1:4e:e8:1e:21:ef:c6:65:be:17: 92:54:70:82:5a:8e:30:23:2f:20:42:5b:db:68:b1: 17:fb:12:4f:0c:44:17:cc:c7:49:c6:ce:a0:90:80: a2:f2:6c:a9:54:70:01:e4:bf:b3:dc:07:11:ba:7b: 1a:34:b4:28:2f:e4:29:9e:42:fa:3d:42:1c:ef:b2: 3c:1b:fa:2a:52:7b:c9:3d:bb:67:91:06:a2:98:e5: d0:0e:af:20:56:79:85:2c:f2:45:4f:a1:19:37:de: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:33:3E:37:D8:E6:DC:C8:E1:EF:E1:39:C1:8D:B5:8C:45:FB:18:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafc9d97-4121-3ff4-869e-d00ede385538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d6:7f:25:ab:0a:9f:dd:e9:31:f4:84:de:cc:73:58:91:76: 2d:21:f6:d8:86:bb:8d:53:0a:65:3c:c5:30:61:bf:4a:ef:8c: 1e:21:e3:24:4d:c8:22:48:96:d1:12:51:0d:20:1e:d5:8c:64: 9d:e2:90:31:37:67:f3:51:ba:20:b1:d3:9c:53:77:fa:8e:8d: 1c:e9:9d:b6:3d:e4:f1:2e:02:2e:11:cd:4d:63:43:07:21:32: 2f:24:ce:51:c4:c3:73:46:b3:ae:3e:89:5c:df:b6:4b:f1:e4: 5b:29:c2:4a:01:05:a8:4b:33:ac:d9:d1:6c:0d:29:02:8d:0e: e8:8f:25:85:30:65:d0:9f:56:8a:aa:26:5f:ff:a4:e7:38:ff: 22:be:aa:a9:22:e7:b3:a2:d9:8a:26:dd:ce:2e:ff:6b:21:a6: c2:a0:17:3c:09:f7:10:0a:eb:70:69:74:a6:50:a2:90:32:15: 65:0d:b5:31:39:3c:4f:16:78:d6:ea:cb:c3:62:c4:24:6a:5d: 55:5e:4d:42:d0:2b:ed:f9:6a:95:34:b1:12:a9:36:5e:c0:c0: a4:4b:58:5d:75:3b:6e:51:a1:83:53:40:e1:54:a2:5d:90:ec: 6f:3d:51:7d:69:61:f9:52:97:04:d0:b8:e7:1b:87:7e:55:1b: 22:46:9e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb4O/7O0TSCc++kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDA1ZDc1ZjEtMTNkOS00NWI4LWJlMmItNDk1OTUzZjg3MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xXq6gF2kukX4vJqWoYDtX6nd0CY0h5VmlaU PQPbXlzuJisQQkm/R7jhb3oa+oAPpRZvgiaFzdsil3RPTSz6ZVHcJV5/48+s9F4Q YMxoHgKqh5SkWCtmmsLqo6AFCKl1XQrwpmP84W6r3Pc+MgH0rGCiRP4KEDWdUJmZ NtE7dqRNss2aRNtHj2tcIn7wdeFZXUmhdIkiSUXA+eFO6B4h78ZlvheSVHCCWo4w Iy8gQlvbaLEX+xJPDEQXzMdJxs6gkICi8mypVHAB5L+z3AcRunsaNLQoL+QpnkL6 PUIc77I8G/oqUnvJPbtnkQaimOXQDq8gVnmFLPJFT6EZN941XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMzPjfY5tzI4e/hOcGNtYxF+xjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2FmYzlkOTctNDEyMS0z ZmY0LTg2OWUtZDAwZWRlMzg1NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8agMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTWfyWrCp/d6TH0hN7Mc1iRdi0h9tiGu41TCmU8xTBhv0rvjB4h4yRN yCJIltESUQ0gHtWMZJ3ikDE3Z/NRuiCx05xTd/qOjRzpnbY95PEuAi4RzU1jQwch Mi8kzlHEw3NGs64+iVzftkvx5FspwkoBBahLM6zZ0WwNKQKNDuiPJYUwZdCfVoqq Jl//pOc4/yK+qqki57Oi2Yom3c4u/2shpsKgFzwJ9xAK63BpdKZQopAyFWUNtTE5 PE8WeNbqy8NixCRqXVVeTULQK+35apU0sRKpNl7AwKRLWF11O25RoYNTQOFUol2Q 7G89UX1pYflSlwTQuOcbh35VGyJGnsQ= -----END CERTIFICATE-----Generated at Mon Sep 28 20:42:54 2026 by rpki-client