$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa File: cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa (raw, json) Hash identifier: u5uZY7KfZ49tcyvz3Oy/lpGS3Jz6g9NsG2OPNhjvHXQ= Subject key identifier: 1D:FA:AA:CC:4E:69:97:7B:69:5E:68:81:EA:46:9A:EE:0F:E5:70:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D7AB7AFB2C0A039E66300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 35.206.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:7a:b7:af:b2:c0:a0:39:e6:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0eb53bde-7f37-4651-b41d-7144b9af9a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:28:e8:fe:09:85:2f:57:6f:9a:b3:c9:bc: f1:73:2a:4a:c6:22:61:17:21:54:13:a6:01:37:4e: 13:f7:85:1b:ec:0b:0f:29:51:26:9a:d1:c2:15:c1: ce:4c:f7:3c:07:be:6f:bb:e8:98:7c:62:d0:37:3c: 0d:23:d7:e1:8a:5b:31:62:26:bb:be:02:06:b8:03: 8b:65:36:51:63:e8:37:9d:81:22:62:73:8f:96:32: b7:ad:41:bf:05:02:b4:40:da:08:0a:5f:1f:4b:db: 71:b8:f2:a2:b8:66:7c:f6:f2:4b:b1:d7:6b:bd:ff: c7:c4:a7:72:47:58:18:f7:e0:3f:26:eb:2b:b7:72: a9:56:07:ba:74:6f:1a:c7:8a:c9:32:2a:2b:23:75: 0f:9e:e9:32:bf:37:b5:f3:0c:68:29:37:06:34:57: 26:16:3a:30:7a:de:11:7f:cc:4b:44:e6:4a:1e:a3: 4e:e9:96:1e:11:18:b8:04:b1:7b:41:85:0a:79:6b: b6:8b:5b:5b:40:ce:2a:58:07:94:aa:7e:76:62:90: 05:8c:3a:1b:87:70:9d:f0:a6:c9:c4:7b:bc:0e:b1: 07:6e:d7:f3:b4:f2:fb:30:8c:9e:62:ae:e0:9e:bc: 48:47:2f:3f:09:01:b6:e5:00:4e:9f:41:8f:26:1c: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:AA:CC:4E:69:97:7B:69:5E:68:81:EA:46:9A:EE:0F:E5:70:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:87:53:50:2b:a1:5a:b5:a5:f2:09:de:d8:c7:24:af:7f:fe: a0:43:0e:9e:46:78:e6:33:96:31:42:22:0c:f9:9c:e1:da:4e: cc:ed:42:3a:71:1a:ae:c6:1c:2c:a4:9f:78:dd:c0:7b:99:57: c0:f3:6f:e9:a7:42:68:60:86:a1:9f:5e:44:40:28:a1:b6:be: a1:5c:ef:5b:96:03:e5:e2:61:a3:be:8e:cf:3c:89:84:f4:cc: fa:4d:69:f8:83:36:6e:9b:6a:7e:72:50:40:2c:62:4c:bb:25: c9:63:cd:ef:83:7e:77:3c:af:3f:ef:de:e1:41:57:6f:76:a9: a6:d6:12:ab:28:78:42:f5:83:46:c7:db:b5:39:f1:6b:0d:b9: 41:43:c4:74:82:0b:cd:9c:18:69:3f:0b:24:ed:05:ca:d4:75: 8c:83:ee:f5:e8:68:c5:84:33:b8:7f:06:12:e8:cd:17:f9:98: be:d8:ca:ca:06:db:41:b9:4c:e7:d5:77:93:c8:5b:96:34:83: 9c:8a:22:54:30:16:64:33:fa:da:6f:3b:15:de:37:b0:cb:76: 5e:a7:a9:0f:a4:a9:12:8b:5d:f7:35:f2:d1:22:5c:b4:97:15: 73:5c:b3:c4:f2:32:53:c0:17:56:5f:43:1d:c0:2d:a5:4e:a3: 56:e5:74:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXq3r7LAoDnmYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGViNTNiZGUtN2YzNy00NjUxLWI0MWQtNzE0NGI5YWY5YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIgo6P4JhS9Xb5qzybzxcypKxiJhFyFUE6YB N04T94Ub7AsPKVEmmtHCFcHOTPc8B75vu+iYfGLQNzwNI9fhilsxYia7vgIGuAOL ZTZRY+g3nYEiYnOPljK3rUG/BQK0QNoICl8fS9txuPKiuGZ89vJLsddrvf/HxKdy R1gY9+A/Jusrt3KpVge6dG8ax4rJMiorI3UPnukyvze18wxoKTcGNFcmFjowet4R f8xLROZKHqNO6ZYeERi4BLF7QYUKeWu2i1tbQM4qWAeUqn52YpAFjDobh3Cd8KbJ xHu8DrEHbtfztPL7MIyeYq7gnrxIRy8/CQG25QBOn0GPJhxrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB36qsxOaZd7aV5ogepGmu4P5XDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjMThiYzMtMWY3Mi0z YmFmLTgyYzQtMjY5OGI4ZmUyMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqHU1AroVq1pfIJ3tjHJK9//qBDDp5GeOYzljFCIgz5nOHaTsztQjpx Gq7GHCykn3jdwHuZV8Dzb+mnQmhghqGfXkRAKKG2vqFc71uWA+XiYaO+js88iYT0 zPpNafiDNm6ban5yUEAsYky7Jcljze+Dfnc8rz/v3uFBV292qabWEqsoeEL1g0bH 27U58WsNuUFDxHSCC82cGGk/CyTtBcrUdYyD7vXoaMWEM7h/BhLozRf5mL7YysoG 20G5TOfVd5PIW5Y0g5yKIlQwFmQz+tpvOxXeN7DLdl6nqQ+kqRKLXfc18tEiXLSX FXNcs8TyMlPAF1ZfQx3ALaVOo1bldOM= -----END CERTIFICATE-----Generated at Sun Sep 27 01:19:09 2026 by rpki-client