$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa File: 17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa (raw, json) Hash identifier: fX51wfmIY2G4R6X9fMQzbRpLlISrFXCQG24DNGXnYXY= Subject key identifier: AA:78:61:45:C2:FB:54:BA:6A:65:83:67:FD:E3:25:4B:32:3D:1B:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA6DF8B0FE8477DE05D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.198.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a6:df:8b:0f:e8:47:7d:e0:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=47e8bc4e-4f1c-4662-8d07-3ddeabb911bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:48:e9:0d:bc:bb:f7:e9:a9:d1:c1:e6:50: c0:54:cd:a0:17:95:f8:da:d9:08:c9:84:85:87:c8: d9:2b:c8:c6:bf:f1:62:e4:f0:6a:35:b5:8c:f7:1d: 80:78:db:4d:9d:ad:c8:0f:31:6a:ab:e3:c4:2d:9e: 34:f7:47:8b:6a:b0:dd:a4:66:45:fe:7f:fe:95:72: 76:39:c6:79:03:70:62:6e:56:cf:06:06:05:2f:71: 8b:f1:d7:9a:12:c4:b9:88:69:9d:ba:dc:c5:1b:11: 67:b7:ed:b4:4b:f2:36:bd:35:2c:09:b1:9e:35:ce: 73:74:00:9e:6f:09:12:b8:a4:e8:71:98:cd:7c:1a: 40:84:d8:5f:95:b6:42:00:6e:3f:1a:17:82:b6:dd: 45:73:36:d1:1d:63:6c:85:43:71:ca:85:eb:62:8f: 29:a0:69:47:9f:3c:58:24:48:56:9f:b9:47:fa:d1: 46:0a:6f:b9:80:ae:5b:bd:d0:30:dd:f4:6a:70:4e: 5e:e5:09:00:2c:5f:5f:71:d3:99:a0:f5:3b:6b:cf: d2:78:5a:df:08:0f:57:2d:95:82:24:cc:0d:4d:0f: 3d:e0:4c:f7:8e:64:ef:33:a4:b1:a7:72:41:b4:ef: 4c:5a:13:75:c7:67:63:3d:5f:18:23:b2:0e:a7:70: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:78:61:45:C2:FB:54:BA:6A:65:83:67:FD:E3:25:4B:32:3D:1B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:64:87:2d:f4:f9:22:4a:dd:72:b5:df:a9:7a:e7:cb:96:12: bb:e6:6f:cd:73:ae:3d:1f:d7:54:49:ac:46:02:9f:ca:a0:06: 94:83:c6:3e:e4:bf:c9:0f:8d:4c:3b:d4:52:3b:5e:90:05:87: f0:fc:95:a1:d1:cc:d2:57:e1:31:25:3d:82:c1:d9:1a:d9:17: f9:b0:f4:99:9b:23:96:77:65:68:f3:4b:42:4f:94:71:20:b5: 55:2b:0f:48:d5:70:44:fb:6f:f5:35:10:a3:93:34:cd:7b:e0: 2d:48:dd:6c:18:2c:14:17:ce:97:97:1a:2e:ab:2b:a7:b6:c0: 0e:42:8d:e7:fe:29:54:ca:3b:bd:e4:7b:d9:4e:3f:94:58:fa: ee:ed:34:2b:71:a7:dc:73:96:d5:6e:da:44:cc:ba:4f:b9:c5: 7f:38:02:03:da:77:51:cb:a6:5d:5b:0c:e6:18:7f:5b:ed:23: d9:81:26:e6:7c:76:e3:ba:85:d3:b4:50:e9:d2:46:d3:1a:13: d9:30:67:4a:79:d5:2c:9a:5c:43:89:ca:97:3d:77:de:20:5c: 83:06:a5:54:c5:af:a7:ad:b9:2b:26:59:ff:cc:6d:2f:f6:9e: d3:0b:6b:39:be:35:dd:f3:f0:75:b4:d4:8c:c9:30:12:cb:c3: 1d:e2:3c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPabfiw/oR33gXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDdlOGJjNGUtNGYxYy00NjYyLThkMDctM2RkZWFiYjkxMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5FI6Q28u/fpqdHB5lDAVM2gF5X42tkIyYSF h8jZK8jGv/Fi5PBqNbWM9x2AeNtNna3IDzFqq+PELZ4090eLarDdpGZF/n/+lXJ2 OcZ5A3BiblbPBgYFL3GL8deaEsS5iGmdutzFGxFnt+20S/I2vTUsCbGeNc5zdACe bwkSuKTocZjNfBpAhNhflbZCAG4/GheCtt1FczbRHWNshUNxyoXrYo8poGlHnzxY JEhWn7lH+tFGCm+5gK5bvdAw3fRqcE5e5QkALF9fcdOZoPU7a8/SeFrfCA9XLZWC JMwNTQ894Ez3jmTvM6Sxp3JBtO9MWhN1x2djPV8YI7IOp3AJlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp4YUXC+1S6amWDZ/3jJUsyPRt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTdjMGQ1OWUtNTgxMS0z Yjc0LThhNWUtOWE1ZjYxMWUyZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJkhy30+SJK3XK136l658uWErvmb81zrj0f11RJrEYCn8qgBpSDxj7k v8kPjUw71FI7XpAFh/D8laHRzNJX4TElPYLB2RrZF/mw9JmbI5Z3ZWjzS0JPlHEg tVUrD0jVcET7b/U1EKOTNM174C1I3WwYLBQXzpeXGi6rK6e2wA5Cjef+KVTKO73k e9lOP5RY+u7tNCtxp9xzltVu2kTMuk+5xX84AgPad1HLpl1bDOYYf1vtI9mBJuZ8 duO6hdO0UOnSRtMaE9kwZ0p51SyaXEOJypc9d94gXIMGpVTFr6etuSsmWf/MbS/2 ntMLazm+Nd3z8HW01IzJMBLLwx3iPJk= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:52 2026 by rpki-client