$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa File: fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa (raw, json) Hash identifier: swhOOC0C6PsC74oPwlpv65ZowMkAcRg7tYuI2Rzd8pQ= Subject key identifier: DC:40:C9:58:5A:29:EF:9D:51:9C:94:20:8D:52:BF:43:89:B1:EB:54 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D871C0C4B694B83133C40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.234.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:87:1c:0c:4b:69:4b:83:13:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=037c1156-3bcc-43c5-a1fe-8279d0039133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:5a:a7:21:42:25:6c:d5:a2:b8:e0:f9:3c: 87:0f:20:bd:63:43:58:90:69:e1:1f:09:f9:ba:6e: ba:85:18:d6:7e:7b:2e:3e:8c:97:69:84:5b:e2:b3: a3:a7:c6:25:39:3c:c3:04:e2:7e:f7:6d:7f:02:6c: bf:a2:00:28:7b:02:75:75:73:42:4a:a8:0a:10:5e: 42:dc:75:54:12:62:ec:26:08:b9:24:53:db:2f:ee: 55:71:ec:4e:a8:e9:3e:cc:4e:41:c7:b1:40:2e:ca: 51:b0:db:e7:d3:f0:29:56:87:be:12:81:23:a5:74: aa:5f:98:b9:8d:e4:ef:30:b3:c5:f3:74:c1:94:bc: 81:7a:38:80:c8:f8:37:ca:16:f0:f3:f1:f8:1c:c3: 8e:26:f9:fe:c1:a9:3d:11:24:f0:6e:14:81:9a:59: 12:8d:5b:be:ba:14:1a:88:34:f6:36:de:d5:2c:50: 08:9d:49:2d:23:6a:96:00:bd:39:34:69:30:aa:55: 79:ff:6a:2c:d5:5e:4c:17:d2:58:33:00:26:6e:41: b1:c3:53:96:3d:6c:1d:21:69:59:32:4f:e6:12:95: 80:d1:1d:d1:2a:a6:b4:80:70:74:fb:a8:e3:03:1b: e4:d1:ec:f3:c2:54:41:4f:96:97:6a:da:cc:17:09: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:C9:58:5A:29:EF:9D:51:9C:94:20:8D:52:BF:43:89:B1:EB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd5a5258-1e4f-3e32-b69e-9a3a3c8e80f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.234.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:92:76:a1:1d:67:e4:63:c3:ac:80:11:31:ae:20:de:31:0d: 03:72:3c:21:15:d2:1f:4f:4f:32:b6:39:58:d6:6f:4f:10:ff: 4b:bd:56:38:b1:9a:1a:6f:08:25:83:55:c2:5b:a8:bb:bc:cf: f8:9c:ba:12:2a:97:30:33:32:00:70:ff:e1:19:40:07:ff:46: c5:d7:18:d7:29:88:be:c8:87:1a:40:3d:f4:fb:fc:5c:44:a6: 85:e0:a3:4c:59:78:a4:81:97:f7:8a:18:4e:d4:a6:42:a2:04: 80:63:39:06:30:57:59:a6:7a:e8:9e:c3:05:78:c4:fc:44:cb: fc:ef:bc:2e:a0:2a:87:28:66:2d:b8:87:12:2d:e6:d2:8b:35: d6:00:03:d3:ce:25:7a:96:0f:3d:50:58:f5:8e:07:db:19:80: 8c:ad:4b:a4:b1:1e:51:a4:37:84:37:db:ef:8f:22:63:d3:39: ad:b7:f1:86:22:4b:77:7e:ee:d5:fc:4c:81:c4:c7:9c:f1:5d: 96:b4:70:7a:e2:38:0c:0f:30:88:94:77:20:7b:18:bd:9f:76: 07:d0:bb:36:92:e2:17:d7:0a:1b:fd:38:12:f8:69:ce:9d:52: 7d:e8:d1:ff:ab:4b:5d:2e:0d:35:1e:34:c6:71:be:d8:89:43: e1:ca:73:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYccDEtpS4MTPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDM3YzExNTYtM2JjYy00M2M1LWExZmUtODI3OWQwMDM5MTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7JapyFCJWzVorjg+TyHDyC9Y0NYkGnhHwn5 um66hRjWfnsuPoyXaYRb4rOjp8YlOTzDBOJ+921/Amy/ogAoewJ1dXNCSqgKEF5C 3HVUEmLsJgi5JFPbL+5VcexOqOk+zE5Bx7FALspRsNvn0/ApVoe+EoEjpXSqX5i5 jeTvMLPF83TBlLyBejiAyPg3yhbw8/H4HMOOJvn+wak9ESTwbhSBmlkSjVu+uhQa iDT2Nt7VLFAInUktI2qWAL05NGkwqlV5/2os1V5MF9JYMwAmbkGxw1OWPWwdIWlZ Mk/mEpWA0R3RKqa0gHB0+6jjAxvk0ezzwlRBT5aXatrMFwkWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxAyVhaKe+dUZyUII1Sv0OJsetUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQ1YTUyNTgtMWU0Zi0z ZTMyLWI2OWUtOWEzYTNjOGU4MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADySdqEdZ+Rjw6yAETGuIN4xDQNyPCEV0h9PTzK2OVjWb08Q/0u9Vjix mhpvCCWDVcJbqLu8z/icuhIqlzAzMgBw/+EZQAf/RsXXGNcpiL7IhxpAPfT7/FxE poXgo0xZeKSBl/eKGE7UpkKiBIBjOQYwV1mmeuiewwV4xPxEy/zvvC6gKocoZi24 hxIt5tKLNdYAA9POJXqWDz1QWPWOB9sZgIytS6SxHlGkN4Q32++PImPTOa238YYi S3d+7tX8TIHEx5zxXZa0cHriOAwPMIiUdyB7GL2fdgfQuzaS4hfXChv9OBL4ac6d Un3o0f+rS10uDTUeNMZxvtiJQ+HKc6U= -----END CERTIFICATE-----Generated at Sat Sep 26 05:23:43 2026 by rpki-client