$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa File: 20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa (raw, json) Hash identifier: JmNCcEcjPgQt8OkwgWYbr1Sop37qEcV0MNWjq4yA0vk= Subject key identifier: DE:1B:38:DB:8E:EB:9C:8A:6E:27:1F:02:EB:2D:77:E3:0E:8F:A7:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4972EED807B395F1FF295580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 35.216.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ee:d8:07:b3:95:f1:ff:29:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c9e4da2-dee8-47db-85a3-003ee98d9f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:b4:6f:26:16:bc:ab:24:1a:f9:b9:39:0c: 3b:a9:d7:98:24:00:ad:1c:64:01:32:d0:c3:88:c9: 70:6a:a1:e0:b1:e6:09:75:7c:92:c0:65:4c:4b:33: 51:96:a0:d7:79:ae:dd:53:d1:92:53:3b:91:a6:09: f0:ab:4b:ef:2c:57:ea:25:7c:54:b8:e4:71:6c:e2: b1:7b:c7:73:d2:2f:04:e8:cb:2c:97:3d:e7:f9:67: da:e8:f3:fd:6f:78:e0:33:bc:74:5b:be:35:ed:05: 9b:2d:98:c9:80:3e:11:b4:f0:80:10:5c:09:93:22: 71:09:67:87:fc:57:5d:49:87:ae:1b:16:26:f4:d8: 0c:74:91:7e:b1:ca:c0:7c:a0:09:51:8e:05:ff:66: 31:61:79:61:ef:74:f4:bb:ea:7c:35:87:af:cb:ff: 99:98:6e:9f:dc:8c:d5:3a:f5:e1:1c:f7:bd:1c:7a: c8:66:be:94:04:ce:22:ab:3b:ab:ed:63:02:00:bb: 65:d1:a6:4c:25:83:28:78:56:19:b9:d8:b0:c0:9a: b8:29:a6:af:18:83:ab:c2:fd:d5:77:0b:76:8c:26: 6c:76:c5:7a:48:44:59:fb:68:4f:7f:b1:9f:a8:a5: e8:52:e8:f9:8b:a5:bb:08:32:52:5b:0f:48:be:7a: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1B:38:DB:8E:EB:9C:8A:6E:27:1F:02:EB:2D:77:E3:0E:8F:A7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5121e-d452-3d13-94f9-d11a4a0ba8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:54:e0:41:cb:07:8c:01:f1:cf:af:81:ce:3e:fa:d4:1d:a3: 11:bf:d6:5c:00:c1:52:45:fc:8a:3a:57:ad:d1:dd:38:6e:54: 27:16:16:0a:24:6f:4b:e4:bf:d7:2f:d6:3c:e6:d5:c2:99:63: 62:1b:da:e5:9a:94:47:27:2d:18:4e:30:82:b4:72:be:50:1a: 4e:fd:72:0d:63:7a:9a:d7:ea:2a:2d:3a:8a:57:3a:74:bf:56: 67:ca:fc:4d:7e:af:56:d7:3a:fc:79:f1:41:3f:60:70:63:80: 36:5f:a8:99:eb:be:e6:db:0d:06:dd:75:ee:50:39:24:c9:35: b7:be:09:cb:11:30:f3:e1:5f:90:30:1a:28:2c:90:39:ab:6c: f5:ff:be:db:71:ed:54:2f:8b:ac:6e:69:95:ad:35:78:b0:b5: f7:b3:d5:dc:7a:89:f8:7d:7e:20:1d:a4:a7:73:d3:13:0c:d6: cb:76:e9:73:19:bb:3d:35:61:48:15:ef:76:45:0a:a5:cd:71: c1:0c:ee:04:ea:04:99:51:e3:fc:2b:da:04:46:8d:07:c7:00: 94:12:d6:b6:55:40:f8:66:2a:5d:fa:08:00:57:7a:37:85:79: b7:9b:c9:57:71:db:6c:19:54:fa:57:7d:46:22:9e:0a:37:2a: ea:98:84:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcu7YB7OV8f8pVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGM5ZTRkYTItZGVlOC00N2RiLTg1YTMtMDAzZWU5OGQ5ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDO0byYWvKskGvm5OQw7qdeYJACtHGQBMtDD iMlwaqHgseYJdXySwGVMSzNRlqDXea7dU9GSUzuRpgnwq0vvLFfqJXxUuORxbOKx e8dz0i8E6Msslz3n+Wfa6PP9b3jgM7x0W7417QWbLZjJgD4RtPCAEFwJkyJxCWeH /FddSYeuGxYm9NgMdJF+scrAfKAJUY4F/2YxYXlh73T0u+p8NYevy/+ZmG6f3IzV OvXhHPe9HHrIZr6UBM4iqzur7WMCALtl0aZMJYMoeFYZudiwwJq4KaavGIOrwv3V dwt2jCZsdsV6SERZ+2hPf7GfqKXoUuj5i6W7CDJSWw9Ivno1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4bONuO65yKbicfAustd+MOj6c3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBlNTEyMWUtZDQ1Mi0z ZDEzLTk0ZjktZDExYTRhMGJhOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlU4EHLB4wB8c+vgc4++tQdoxG/1lwAwVJF/Io6V63R3ThuVCcWFgok b0vkv9cv1jzm1cKZY2Ib2uWalEcnLRhOMIK0cr5QGk79cg1jeprX6iotOopXOnS/ VmfK/E1+r1bXOvx58UE/YHBjgDZfqJnrvubbDQbdde5QOSTJNbe+CcsRMPPhX5Aw GigskDmrbPX/vttx7VQvi6xuaZWtNXiwtfez1dx6ifh9fiAdpKdz0xMM1st26XMZ uz01YUgV73ZFCqXNccEM7gTqBJlR4/wr2gRGjQfHAJQS1rZVQPhmKl36CABXejeF ebebyVdx22wZVPpXfUYingo3KuqYhMA= -----END CERTIFICATE-----Generated at Sat Sep 26 13:19:18 2026 by rpki-client