$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbb7dca7-1741-3540-a935-2d758ae7ce55.roa File: cbb7dca7-1741-3540-a935-2d758ae7ce55.roa (raw, json) Hash identifier: 9q4ykD5iF24IfkQsTw/in0L2bF6Wfb+lfC8/IW7vel4= Subject key identifier: 94:BD:F5:BB:6F:79:82:22:56:29:63:82:85:BC:05:C2:68:F1:6B:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8963DDDEF8EF845A7D90 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbb7dca7-1741-3540-a935-2d758ae7ce55.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.240.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:89:63:dd:de:f8:ef:84:5a:7d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=aefcf880-f503-4f24-a6bd-a21ef7d4860d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9c:bc:08:f8:b4:c6:54:53:2f:42:34:f1:c1: 99:26:bc:9e:a1:fb:47:cc:ad:89:1d:a3:e9:b2:41: 73:77:0b:90:83:ea:e9:fc:ae:6d:3a:4d:10:8a:56: 3b:e8:45:30:d8:16:38:82:7f:53:ef:c1:5f:c4:b0: fc:75:8f:cc:fa:3f:d6:4f:a3:48:2c:e1:08:2a:0c: 46:60:fb:18:06:4a:0b:42:f8:e2:23:8d:38:db:56: 90:7e:c8:db:54:af:d1:02:72:e5:b6:29:33:e4:37: 1c:57:c7:de:9e:38:d0:83:55:a4:1f:8a:a6:90:b3: 59:6f:03:85:3e:9b:60:4d:3f:bd:19:70:27:8f:1b: 41:15:1c:31:6f:05:e7:85:e5:58:0d:9a:99:d9:39: af:e1:98:24:81:ae:67:e1:62:03:c6:f5:b8:b1:6d: e7:02:d9:13:cf:6b:08:87:d1:56:73:49:08:19:50: 96:ca:5d:10:8f:c7:19:9c:69:a7:0e:81:69:22:cf: 9d:62:4d:6a:0e:1e:4d:32:0e:d5:1b:4d:27:0c:23: 6a:1c:75:42:4c:0d:78:4d:9e:50:78:de:e5:d8:8f: 63:b3:50:c3:5f:b2:9a:a8:08:31:cd:a4:27:b7:cb: 31:db:ba:08:2e:e8:58:6a:c8:cf:f2:39:06:59:1c: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:F5:BB:6F:79:82:22:56:29:63:82:85:BC:05:C2:68:F1:6B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbb7dca7-1741-3540-a935-2d758ae7ce55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f2:0e:81:59:b1:7c:6c:f5:5d:1e:a9:28:22:e3:8b:8e:eb: e7:4c:2d:f4:a2:8b:45:5e:35:0f:51:bb:21:91:60:10:1c:75: 53:ef:11:0c:b7:27:2c:0d:cf:cd:1c:2c:5f:00:9c:91:86:11: 12:40:b4:80:eb:66:de:1a:d2:13:97:e5:97:da:93:f6:0f:e6: 14:e7:d1:68:00:04:98:db:dc:84:11:24:71:06:ba:eb:be:32: 39:77:88:22:62:8d:a0:f0:b6:32:ba:0d:ae:40:37:b7:4a:70: 7e:c2:ac:77:fd:55:f5:3a:ba:b6:7c:46:17:66:a7:c4:7b:e2: 13:ac:d7:88:cc:fe:ef:55:22:ca:55:b9:dc:91:a7:69:c5:18: 22:ce:bc:c5:58:e9:b2:bb:1d:8f:d8:af:a2:b2:dc:f7:b2:d0: 04:fe:c6:58:a2:36:1a:cc:70:00:6b:39:e1:33:6a:05:c3:17: 72:c1:17:37:01:bd:3a:03:fc:f4:e8:91:ed:ff:f9:49:75:f6: 07:56:1b:6f:19:92:ff:cc:80:9a:74:05:a1:fd:ca:c3:b3:85: 07:d0:93:bf:1c:32:3f:29:8d:ac:0e:35:03:eb:6c:7b:da:dc: df:3a:6b:b3:05:19:69:79:37:c7:e3:f2:92:e8:14:92:04:87: fe:c7:07:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYlj3d7474RafZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWVmY2Y4ODAtZjUwMy00ZjI0LWE2YmQtYTIxZWY3ZDQ4NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJy8CPi0xlRTL0I08cGZJryeoftHzK2JHaPp skFzdwuQg+rp/K5tOk0QilY76EUw2BY4gn9T78FfxLD8dY/M+j/WT6NILOEIKgxG YPsYBkoLQvjiI40421aQfsjbVK/RAnLltikz5DccV8fenjjQg1WkH4qmkLNZbwOF PptgTT+9GXAnjxtBFRwxbwXnheVYDZqZ2Tmv4Zgkga5n4WIDxvW4sW3nAtkTz2sI h9FWc0kIGVCWyl0Qj8cZnGmnDoFpIs+dYk1qDh5NMg7VG00nDCNqHHVCTA14TZ5Q eN7l2I9js1DDX7KaqAgxzaQnt8sx27oILuhYasjP8jkGWRyo/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS99btveYIiViljgoW8BcJo8WtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2JiN2RjYTctMTc0MS0z NTQwLWE5MzUtMmQ3NThhZTdjZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3yDoFZsXxs9V0eqSgi44uO6+dMLfSii0VeNQ9RuyGRYBAcdVPvEQy3 JywNz80cLF8AnJGGERJAtIDrZt4a0hOX5Zfak/YP5hTn0WgABJjb3IQRJHEGuuu+ Mjl3iCJijaDwtjK6Da5AN7dKcH7CrHf9VfU6urZ8Rhdmp8R74hOs14jM/u9VIspV udyRp2nFGCLOvMVY6bK7HY/Yr6Ky3Pey0AT+xliiNhrMcABrOeEzagXDF3LBFzcB vToD/PToke3/+Ul19gdWG28Zkv/MgJp0BaH9ysOzhQfQk78cMj8pjawONQPrbHva 3N86a7MFGWl5N8fj8pLoFJIEh/7HBzM= -----END CERTIFICATE-----Generated at Tue Sep 29 13:46:31 2026 by rpki-client