$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d96a9f5d-98ba-3520-84c6-cd9baa9447cb.roa File: d96a9f5d-98ba-3520-84c6-cd9baa9447cb.roa (raw, json) Hash identifier: zm2lIBbMqa9T8VWBsX8De3lPhXK5vDCgP0XWDzWWsGQ= Subject key identifier: 8F:0D:8A:34:83:60:BA:DF:74:EB:B4:21:6E:30:2F:2B:8C:62:3C:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4988E03E5250D9258EB1E180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d96a9f5d-98ba-3520-84c6-cd9baa9447cb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 35.206.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:e0:3e:52:50:d9:25:8e:b1:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=31054570-8400-47a0-988b-78840050c4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:e7:1b:5c:e0:5c:86:4c:12:78:c6:a8:93: 1c:51:68:f8:b7:ba:f3:dd:a4:f6:2d:1f:00:25:2c: b5:14:8b:f5:9e:d6:84:3c:c0:28:ad:9b:47:c2:2b: 66:17:0e:43:5c:05:59:bb:56:18:09:9d:42:09:2e: cc:82:22:e6:f5:6d:dd:29:ba:60:a6:0e:f4:08:78: c0:67:1f:a5:33:bb:5e:b8:9c:92:93:b3:b2:cb:40: 0d:ff:1c:24:3a:bb:59:68:76:5e:64:b6:23:0d:3d: 02:81:fa:95:49:a8:b4:24:01:92:6a:63:58:e7:67: 62:55:0d:dd:49:32:f6:7b:ac:86:18:5a:1f:6d:65: b2:e4:4d:a5:e5:84:ea:1c:7a:da:a5:f6:69:ca:e5: 39:c8:fb:21:03:c0:3f:e5:b2:f6:3b:1e:5f:ef:ca: f7:21:ac:db:93:bd:0a:d7:bb:94:17:62:86:ba:ec: fb:63:b4:7b:21:1e:1a:ff:dc:46:8b:0a:90:b8:dd: 25:cf:dd:15:86:2b:9a:cb:9e:f2:f7:7b:1b:c3:01: c7:9d:54:e3:cb:ec:cc:ff:6c:c6:4d:ce:ca:20:32: 8d:f5:a4:bd:09:93:90:92:a8:00:ff:89:70:70:81: d3:fe:6c:f8:e6:7c:50:4a:5a:b7:b0:05:b7:9c:04: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:8A:34:83:60:BA:DF:74:EB:B4:21:6E:30:2F:2B:8C:62:3C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d96a9f5d-98ba-3520-84c6-cd9baa9447cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9b:cd:04:ec:d7:43:bb:03:4e:b4:4f:83:3c:2e:29:7b:7b: de:37:21:36:b5:eb:1a:20:53:17:af:97:2f:b6:77:d8:06:eb: ed:c0:02:5c:1e:41:2a:7e:fa:30:f6:16:b3:34:bc:29:bd:df: 07:87:20:2f:fc:dd:3c:35:77:6a:92:34:47:9e:27:2f:90:6c: ff:fd:c9:c1:55:b4:ed:ee:88:a4:3c:ac:e7:2c:0c:d6:4a:5b: 3a:1e:5c:5f:5e:be:36:35:02:f4:a1:7f:eb:82:09:ee:6e:0d: 37:5a:67:82:d3:84:be:cf:60:5c:b2:3a:69:d1:49:d3:8d:99: 97:fb:2b:ca:2e:91:47:3b:4b:7b:37:f2:28:7d:1a:91:ee:2d: bd:b1:5e:4c:b9:a5:62:ca:28:a5:fe:eb:01:53:be:88:f1:f2: a9:03:b7:2c:e2:7e:48:9b:40:38:42:f9:f3:bd:5a:d0:bc:86: a1:2e:9e:72:37:53:55:4a:5c:9f:04:d9:6f:ba:4b:98:d1:44: fe:85:84:da:b4:1c:3f:74:94:aa:3e:6d:23:b2:dc:a6:f7:b9: 85:6b:d7:ed:0a:01:0b:6b:05:29:2a:4c:92:c0:84:d1:74:22: cc:9a:25:60:2c:33:53:38:fd:42:05:73:9b:4c:57:85:55:5d: 91:72:32:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiOA+UlDZJY6x4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzEwNTQ1NzAtODQwMC00N2EwLTk4OGItNzg4NDAwNTBjNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDjnG1zgXIZMEnjGqJMcUWj4t7rz3aT2LR8A JSy1FIv1ntaEPMAorZtHwitmFw5DXAVZu1YYCZ1CCS7MgiLm9W3dKbpgpg70CHjA Zx+lM7teuJySk7Oyy0AN/xwkOrtZaHZeZLYjDT0CgfqVSai0JAGSamNY52diVQ3d STL2e6yGGFofbWWy5E2l5YTqHHrapfZpyuU5yPshA8A/5bL2Ox5f78r3Iazbk70K 17uUF2KGuuz7Y7R7IR4a/9xGiwqQuN0lz90Vhiuay57y93sbwwHHnVTjy+zM/2zG Tc7KIDKN9aS9CZOQkqgA/4lwcIHT/mz45nxQSlq3sAW3nAQQWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8NijSDYLrfdOu0IW4wLyuMYjwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDk2YTlmNWQtOThiYS0z NTIwLTg0YzYtY2Q5YmFhOTQ0N2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIabzQTs10O7A060T4M8Lil7e943ITa16xogUxevly+2d9gG6+3AAlwe QSp++jD2FrM0vCm93weHIC/83Tw1d2qSNEeeJy+QbP/9ycFVtO3uiKQ8rOcsDNZK WzoeXF9evjY1AvShf+uCCe5uDTdaZ4LThL7PYFyyOmnRSdONmZf7K8oukUc7S3s3 8ih9GpHuLb2xXky5pWLKKKX+6wFTvojx8qkDtyzifkibQDhC+fO9WtC8hqEunnI3 U1VKXJ8E2W+6S5jRRP6FhNq0HD90lKo+bSOy3Kb3uYVr1+0KAQtrBSkqTJLAhNF0 IsyaJWAsM1M4/UIFc5tMV4VVXZFyMgI= -----END CERTIFICATE-----Generated at Sun Sep 27 01:19:30 2026 by rpki-client