$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07637b51-4dc9-3321-8b50-28a39d36088b.roa File: 07637b51-4dc9-3321-8b50-28a39d36088b.roa (raw, json) Hash identifier: 3k8jDCCmlKDnC793xOUXOBIUhaRwgknix9m2TwWumjQ= Subject key identifier: B3:E1:48:AE:B8:64:35:4C:09:04:4D:43:99:09:16:F6:F1:E6:FA:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCF7AE60D6D1A49E96C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07637b51-4dc9-3321-8b50-28a39d36088b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.221.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:cf:7a:e6:0d:6d:1a:49:e9:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5c4fdc47-b371-43d4-8be2-91b260ab048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:21:94:26:4d:19:22:9d:54:2d:07:38:13: 97:2e:21:5f:64:b4:00:da:bb:6c:9d:94:fa:60:11: e6:ad:03:ed:24:d3:ff:e3:eb:17:63:57:47:f2:d9: 96:76:93:e0:57:b1:17:27:d5:d1:36:d9:75:5a:27: 88:51:cf:08:ec:09:77:14:01:44:1b:c4:4f:ed:ef: 8a:5f:a0:88:34:33:7d:66:af:32:83:4d:13:c2:da: 8e:49:84:dd:47:90:bc:a8:52:24:aa:36:f2:e4:0e: a5:7a:50:b0:64:e7:1f:67:5b:a7:00:1d:2b:d4:d5: 77:b0:ec:ff:46:ce:76:67:29:ab:45:b0:b6:e9:78: 85:bf:0f:ab:92:b7:92:a2:02:ae:1b:89:3f:ec:b4: e2:55:2f:83:af:f1:3b:7c:05:0c:75:35:89:98:bc: 4c:12:b6:55:a7:73:75:1b:77:bd:48:28:51:fb:52: 89:55:c1:4b:fb:71:10:a5:8e:e4:11:6d:7e:b9:63: 26:2b:5a:47:a8:50:da:42:c4:87:79:79:27:da:4e: 5f:14:e5:be:0e:3a:79:97:04:8f:e6:76:28:d0:e9: 58:6e:79:8f:30:33:b6:8c:78:9d:1f:16:ac:04:fd: f7:0b:be:c4:aa:08:dc:91:df:71:87:aa:48:78:af: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E1:48:AE:B8:64:35:4C:09:04:4D:43:99:09:16:F6:F1:E6:FA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07637b51-4dc9-3321-8b50-28a39d36088b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.221.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a9:fd:3c:b5:39:c6:76:14:98:18:f9:56:bd:28:79:4f:76: 47:01:db:a3:1b:ea:05:1e:c4:31:8a:9b:77:cf:5c:a6:8d:be: ab:7f:63:3f:6c:58:a9:74:e8:ac:df:bf:5c:95:ed:dc:40:4f: 79:ce:ed:41:66:ec:62:bb:50:a4:8e:50:3e:7e:42:4e:93:4a: e0:f0:4f:b9:63:83:b9:b7:05:19:11:fd:29:dc:3b:e4:68:d6: 75:54:93:6e:20:ef:17:bb:73:50:b9:19:84:80:01:b2:0e:e3: a3:c9:7b:59:56:45:ce:78:4a:be:4d:7c:53:4a:f1:2f:82:4f: 5d:db:f5:78:24:0b:0f:76:b6:de:2f:51:b9:ec:7e:b3:44:2a: eb:ef:a8:09:d5:de:b0:7a:89:6c:7f:86:56:9d:13:0f:2a:5f: ff:d9:25:ef:6a:15:35:fe:df:71:1b:79:2c:f6:09:52:6f:f5: 16:57:80:14:52:d2:ba:60:8d:50:c8:6e:db:7d:62:3c:f7:37: 74:7b:32:dc:2e:ae:f1:a6:2a:a2:c6:be:15:34:36:db:28:c3: 6a:60:de:1b:7c:2c:fb:e4:93:88:e4:91:e2:39:e3:18:e9:d1: 56:ab:2f:ce:30:b3:9b:38:74:7c:50:e7:57:dc:b7:46:dc:61: f2:e8:6c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPc965g1tGknpbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWM0ZmRjNDctYjM3MS00M2Q0LThiZTItOTFiMjYwYWIwNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBEhlCZNGSKdVC0HOBOXLiFfZLQA2rtsnZT6 YBHmrQPtJNP/4+sXY1dH8tmWdpPgV7EXJ9XRNtl1WieIUc8I7Al3FAFEG8RP7e+K X6CINDN9Zq8yg00TwtqOSYTdR5C8qFIkqjby5A6lelCwZOcfZ1unAB0r1NV3sOz/ Rs52ZymrRbC26XiFvw+rkreSogKuG4k/7LTiVS+Dr/E7fAUMdTWJmLxMErZVp3N1 G3e9SChR+1KJVcFL+3EQpY7kEW1+uWMmK1pHqFDaQsSHeXkn2k5fFOW+Djp5lwSP 5nYo0OlYbnmPMDO2jHidHxasBP33C77Eqgjckd9xh6pIeK9HGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPhSK64ZDVMCQRNQ5kJFvbx5vpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDc2MzdiNTEtNGRjOS0z MzIxLThiNTAtMjhhMzlkMzYwODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI93gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADep/Ty1OcZ2FJgY+Va9KHlPdkcB26Mb6gUexDGKm3fPXKaNvqt/Yz9s WKl06Kzfv1yV7dxAT3nO7UFm7GK7UKSOUD5+Qk6TSuDwT7ljg7m3BRkR/SncO+Ro 1nVUk24g7xe7c1C5GYSAAbIO46PJe1lWRc54Sr5NfFNK8S+CT13b9XgkCw92tt4v UbnsfrNEKuvvqAnV3rB6iWx/hladEw8qX//ZJe9qFTX+33EbeSz2CVJv9RZXgBRS 0rpgjVDIbtt9Yjz3N3R7MtwurvGmKqLGvhU0Ntsow2pg3ht8LPvkk4jkkeI54xjp 0VarL84ws5s4dHxQ51fct0bcYfLobMg= -----END CERTIFICATE-----Generated at Fri Oct 9 13:30:56 2026 by rpki-client