$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa File: d3601d74-a920-36fe-9fc7-7641e6a380a9.roa (raw, json) Hash identifier: SKwB5SfLFCWBAwtR0OGvCZ+S71ehCP93K6QGset4K+0= Subject key identifier: 29:CC:43:93:C3:A1:11:73:86:AE:B1:3C:B8:C3:46:39:AA:48:FC:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBD66F939E4AB2744A040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.239.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bd:66:f9:39:e4:ab:27:44:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2f0cfd9a-fa41-476d-a7ea-1a11c1fe1db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1d:98:50:9c:9c:d7:51:cc:0d:a4:25:64:e6: d8:4c:8d:25:fd:a8:9c:ee:2e:ae:81:44:57:7d:3d: 58:13:fa:d5:65:bf:8d:3a:06:22:04:fc:8a:07:28: 6d:3f:c4:8e:1a:18:1f:64:c2:c3:04:f8:c8:cd:ce: d0:ac:7f:39:ea:62:bf:a7:65:51:68:52:f2:60:b4: d8:0b:b4:45:37:83:f6:f5:ee:cb:e4:96:b8:c0:f7: 27:4e:c2:00:a0:63:70:76:bb:9c:72:6a:d6:85:eb: f5:e4:44:f0:4c:09:65:7b:b5:64:5b:69:90:f9:55: d5:9e:13:36:d7:dc:51:39:ab:be:4c:a0:38:0f:dc: 81:1e:c4:4c:85:1a:fd:16:25:56:90:6c:bc:01:26: 27:81:9b:79:70:d1:fd:a5:00:75:ab:6e:ef:1b:39: 16:f0:db:54:9a:d1:e4:f9:48:1f:07:d1:1a:d6:a7: 2e:6c:e4:d0:f7:10:3d:5e:bd:c7:dd:b0:50:7a:bb: 79:e2:55:a4:20:1e:d1:fd:f0:ff:ea:29:e4:48:9b: b4:db:8f:61:73:2d:5a:7d:41:f3:7d:89:d5:a1:e5: 18:35:fa:f6:a9:3e:eb:f4:82:df:13:97:9c:3f:62: 7f:af:5d:d3:fe:94:b5:5c:ec:20:4d:e9:8e:08:67: 2e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CC:43:93:C3:A1:11:73:86:AE:B1:3C:B8:C3:46:39:AA:48:FC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3601d74-a920-36fe-9fc7-7641e6a380a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f5:9b:95:53:7f:49:01:9f:35:a6:8e:47:50:eb:9f:7f:f1: c6:d8:af:dd:5f:b7:28:ca:f4:79:38:cf:06:8e:6c:aa:bf:b2: 78:61:f3:e8:51:b3:d2:56:78:80:5e:21:8a:28:9f:c6:b0:3c: 24:aa:67:b2:e4:3c:3f:4b:41:e7:42:b0:e6:30:fc:26:90:b7: cd:86:3e:b1:8e:47:99:ee:f1:10:7e:ec:d1:64:d5:b2:fb:4b: 95:92:59:7e:23:01:42:95:2f:6f:e5:e4:a0:0d:5f:8b:f1:1a: bd:0a:33:54:fd:b6:cf:37:d0:cd:32:f0:9a:13:f1:91:d8:b7: 93:1e:88:3e:30:81:90:17:fc:4c:93:07:38:23:9e:9d:fc:dd: 9b:f4:d5:5e:6f:8e:da:dd:67:6d:ed:29:ad:e0:50:bf:99:b3: 61:73:27:1c:fd:2b:cd:da:3f:cf:e6:3e:01:ee:35:8f:0e:01: 24:11:5c:03:25:25:4b:e0:3f:0d:61:ba:ab:7e:95:d2:52:d6: 73:f1:3d:4b:c1:ab:30:96:ca:2c:09:11:b3:88:a6:c8:d2:a4: 4f:c9:37:b5:57:df:d5:40:fe:ec:f9:7a:d3:3a:c5:2a:68:80: 03:42:b0:33:13:f3:45:c1:fe:46:6d:a2:b4:31:37:95:ea:0a: b2:00:fb:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb1m+TnkqydEoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmYwY2ZkOWEtZmE0MS00NzZkLWE3ZWEtMWExMWMxZmUxZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB2YUJyc11HMDaQlZObYTI0l/aic7i6ugURX fT1YE/rVZb+NOgYiBPyKByhtP8SOGhgfZMLDBPjIzc7QrH856mK/p2VRaFLyYLTY C7RFN4P29e7L5Ja4wPcnTsIAoGNwdruccmrWhev15ETwTAlle7VkW2mQ+VXVnhM2 19xROau+TKA4D9yBHsRMhRr9FiVWkGy8ASYngZt5cNH9pQB1q27vGzkW8NtUmtHk +UgfB9Ea1qcubOTQ9xA9Xr3H3bBQert54lWkIB7R/fD/6inkSJu0249hcy1afUHz fYnVoeUYNfr2qT7r9ILfE5ecP2J/r13T/pS1XOwgTemOCGcuiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnMQ5PDoRFzhq6xPLjDRjmqSPz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM2MDFkNzQtYTkyMC0z NmZlLTlmYzctNzY0MWU2YTM4MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKP1m5VTf0kBnzWmjkdQ659/8cbYr91ftyjK9Hk4zwaObKq/snhh8+hR s9JWeIBeIYoon8awPCSqZ7LkPD9LQedCsOYw/CaQt82GPrGOR5nu8RB+7NFk1bL7 S5WSWX4jAUKVL2/l5KANX4vxGr0KM1T9ts830M0y8JoT8ZHYt5MeiD4wgZAX/EyT Bzgjnp383Zv01V5vjtrdZ23tKa3gUL+Zs2FzJxz9K83aP8/mPgHuNY8OASQRXAMl JUvgPw1huqt+ldJS1nPxPUvBqzCWyiwJEbOIpsjSpE/JN7VX39VA/uz5etM6xSpo gANCsDMT80XB/kZtorQxN5XqCrIA+/I= -----END CERTIFICATE-----Generated at Mon Sep 28 21:54:29 2026 by rpki-client