$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa File: 1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa (raw, json) Hash identifier: l1Hax50EbSwfhXUc2Yp7R+ZfvhzuWIMitvoXijvmE/Y= Subject key identifier: 4F:D3:07:E3:D0:87:3F:2A:B6:64:67:DE:34:1A:8A:44:5F:4B:96:DE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8D06B22B3DE575D23680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.199.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8d:06:b2:2b:3d:e5:75:d2:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d12e48d0-4bd4-427b-bb3e-0aa3619059fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8d:59:20:45:06:0f:c0:94:60:38:1d:02:59: 99:3b:39:e0:84:e0:e4:0e:df:43:f5:c3:78:5e:e3: eb:4e:8b:e8:a1:e0:57:e5:e6:24:72:76:a1:9e:6c: 25:93:4d:ef:c0:3a:2f:9f:f1:cb:27:5e:b3:ef:60: 57:22:0d:ef:20:50:0e:95:a1:0a:3d:d1:db:01:25: 3b:8c:e1:54:2e:97:b2:38:9a:98:fc:e5:33:d3:ae: 58:f1:90:e5:09:0e:69:f2:fa:f3:f7:5f:5b:33:6a: be:7a:19:61:a2:95:0a:fc:12:98:98:73:43:9f:49: 7f:1f:0c:b0:b3:10:45:2e:35:b2:c7:86:d2:1e:b6: ef:ee:91:41:bf:8d:fc:6f:93:3a:d8:18:ff:66:b5: 10:bc:8a:88:1a:56:34:69:0d:45:24:a6:9c:56:82: f6:91:7b:2b:4c:dc:b0:b3:97:81:94:3e:f0:95:b4: 81:62:ea:88:49:38:a9:a8:ca:2a:94:bc:50:8d:5d: 75:1d:2d:26:cb:47:4b:57:9c:69:16:b8:a6:3a:3d: 1e:00:c3:c3:b6:1a:84:99:9a:b4:8d:8b:8f:8a:6a: f1:43:ed:35:3e:98:35:fa:e2:3c:81:16:cb:00:e1: 34:2a:d4:1f:92:ae:64:be:fe:ec:7e:f1:1f:12:3b: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D3:07:E3:D0:87:3F:2A:B6:64:67:DE:34:1A:8A:44:5F:4B:96:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:42:a5:12:8a:10:25:37:1e:34:15:73:0f:dc:15:0e:cd:63: 36:a1:fb:85:0c:12:ea:3d:09:12:d8:35:7a:01:2f:35:1e:28: ca:e6:28:4b:d0:ff:08:d2:52:b1:a4:be:42:7c:22:02:96:81: c5:8a:62:50:a3:d7:91:56:b9:d2:a8:14:30:cf:e4:52:df:b9: 50:c1:18:90:5c:93:31:3f:e1:1d:fa:6c:b5:04:bb:86:c3:1b: b4:a3:63:78:be:63:c9:6a:71:1b:63:09:cb:23:58:f8:d1:3a: c4:6a:fb:16:4f:e5:0a:4e:93:94:1c:a1:a9:c7:2b:4b:ac:09: 7a:b1:c7:6a:b9:1a:b0:70:5c:42:7b:88:04:c7:d6:e2:a7:5b: 61:34:8c:bd:a7:88:23:31:fb:9a:57:e3:9a:a3:83:b8:d1:2b: c9:fd:9a:e7:95:dc:bd:f7:17:93:2d:7e:5e:25:d1:dd:28:93: f0:87:ac:d3:ec:13:9a:00:2e:69:29:0b:67:d5:8c:99:09:5c: 7e:a9:50:24:cc:ff:f2:7e:30:58:ef:5f:97:b7:ec:6f:10:fb: f2:2c:7d:9e:e3:9e:51:9e:48:bb:ae:3a:f6:a2:44:df:e9:c6: 95:eb:4f:8b:41:bc:5a:9a:c5:12:0a:d4:1b:04:d6:4e:9e:ce: 35:6a:68:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY0Gsis95XXSNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDEyZTQ4ZDAtNGJkNC00MjdiLWJiM2UtMGFhMzYxOTA1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I1ZIEUGD8CUYDgdAlmZOznghODkDt9D9cN4 XuPrTovooeBX5eYkcnahnmwlk03vwDovn/HLJ16z72BXIg3vIFAOlaEKPdHbASU7 jOFULpeyOJqY/OUz065Y8ZDlCQ5p8vrz919bM2q+ehlhopUK/BKYmHNDn0l/Hwyw sxBFLjWyx4bSHrbv7pFBv438b5M62Bj/ZrUQvIqIGlY0aQ1FJKacVoL2kXsrTNyw s5eBlD7wlbSBYuqISTipqMoqlLxQjV11HS0my0dLV5xpFrimOj0eAMPDthqEmZq0 jYuPimrxQ+01Ppg1+uI8gRbLAOE0KtQfkq5kvv7sfvEfEjsFKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/TB+PQhz8qtmRn3jQaikRfS5beMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWE4N2NhNGYtODAwYy0z NmVlLTg3YmEtMzFhMmQ0YWM5OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBCpRKKECU3HjQVcw/cFQ7NYzah+4UMEuo9CRLYNXoBLzUeKMrmKEvQ /wjSUrGkvkJ8IgKWgcWKYlCj15FWudKoFDDP5FLfuVDBGJBckzE/4R36bLUEu4bD G7SjY3i+Y8lqcRtjCcsjWPjROsRq+xZP5QpOk5QcoanHK0usCXqxx2q5GrBwXEJ7 iATH1uKnW2E0jL2niCMx+5pX45qjg7jRK8n9mueV3L33F5Mtfl4l0d0ok/CHrNPs E5oALmkpC2fVjJkJXH6pUCTM//J+MFjvX5e37G8Q+/IsfZ7jnlGeSLuuOvaiRN/p xpXrT4tBvFqaxRIK1BsE1k6ezjVqaM4= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:37 2026 by rpki-client