$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa File: 22aa4d02-615a-3483-9e42-f7dbb847dc21.roa (raw, json) Hash identifier: IG2/LPqCwJXwljJ4wP26Ml3sBjAf+NVbO71V+kqscs8= Subject key identifier: 4F:BB:05:21:B0:4F:11:95:0E:47:A5:68:2F:3B:06:BC:C7:DF:86:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD62D8A953D2EA57D10A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.201.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d6:2d:8a:95:3d:2e:a5:7d:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=949feed3-0c08-4140-9387-989e03ba6e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:c4:7f:3b:19:a6:99:be:70:15:46:c9:32: ed:0b:75:88:37:48:b2:37:0f:76:86:fa:fc:9a:6a: 10:77:bf:a7:11:27:d1:46:f1:0b:9c:d7:33:5d:f6: d1:0f:c1:c8:dc:2b:d6:7f:14:3e:3a:10:ee:33:ec: 6c:4e:69:ae:73:94:5f:a0:48:78:5c:0a:7c:ae:14: 07:33:b1:9b:e3:b7:db:61:1a:ff:b2:f1:c1:82:45: d4:19:94:3b:1d:a7:65:5d:4c:97:f8:20:49:65:13: 3f:06:a5:a8:dd:24:73:23:f6:37:4b:f7:50:76:5e: bf:42:9d:2f:43:78:fa:94:77:fc:54:49:7e:02:b1: 7a:ff:76:6e:78:c5:61:da:98:3a:99:57:e5:8e:8b: b4:87:0a:76:bd:e2:75:ca:b2:b0:bf:fa:65:d4:18: 16:09:60:73:21:16:23:91:40:66:db:f5:98:73:7b: dd:37:a5:17:12:91:ad:ef:42:41:41:42:e4:da:a3: 81:1e:e9:e8:8e:33:7a:9a:13:2d:97:6d:85:c8:c7: 6b:d1:b5:c4:69:c7:47:3a:7e:c6:eb:9d:9d:7a:d8: 86:fc:74:ca:be:c8:e4:12:87:f3:71:46:5b:e2:5a: 2d:79:bc:c0:5f:e2:34:58:99:66:ac:93:3e:84:20: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BB:05:21:B0:4F:11:95:0E:47:A5:68:2F:3B:06:BC:C7:DF:86:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:34:d4:f5:17:3d:8c:3a:a9:f9:fa:6e:a1:48:5a:f1:60:66: a0:ab:57:e6:97:b6:e2:44:8e:ac:84:76:4e:9c:4b:30:24:7c: 88:79:19:d5:e8:5f:a9:c6:15:82:15:39:0f:59:18:4a:5e:72: 57:3a:09:6f:b3:d4:5c:d2:54:64:14:9b:eb:2b:5e:1e:35:e8: bc:e9:17:ad:e2:33:38:e4:03:80:08:68:e9:0e:b8:a1:93:77: e4:d8:78:c2:7f:bd:92:52:ab:18:b0:a8:f6:b9:17:97:06:28: 81:20:04:5b:27:ee:93:e7:95:32:7b:bf:aa:a4:b4:5c:ee:ee: a6:ae:7f:79:0a:f4:94:af:ea:06:b9:8d:28:32:6b:a2:71:9c: 73:4d:f3:7e:09:64:b5:79:62:7a:63:bf:63:e1:7c:79:f3:f3: 20:e1:3c:aa:84:5a:da:74:ce:f9:e4:82:0e:27:5a:8f:15:0f: 64:90:8c:e2:25:63:8a:1e:4f:11:d8:a3:ad:17:3c:3d:65:9f: 3c:21:85:fb:37:a5:90:d0:a9:e4:67:5e:dd:41:16:ab:f1:d1: 93:c8:26:eb:6c:59:47:4e:ad:6e:e5:c2:17:60:ec:ae:dd:c2: 55:dc:5d:5c:c1:7b:ec:06:cd:ad:58:ad:1f:48:07:b9:14:54: 03:3a:9a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdYtipU9LqV9EKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTQ5ZmVlZDMtMGMwOC00MTQwLTkzODctOTg5ZTAzYmE2ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz7EfzsZppm+cBVGyTLtC3WIN0iyNw92hvr8 mmoQd7+nESfRRvELnNczXfbRD8HI3CvWfxQ+OhDuM+xsTmmuc5RfoEh4XAp8rhQH M7Gb47fbYRr/svHBgkXUGZQ7HadlXUyX+CBJZRM/BqWo3SRzI/Y3S/dQdl6/Qp0v Q3j6lHf8VEl+ArF6/3ZueMVh2pg6mVfljou0hwp2veJ1yrKwv/pl1BgWCWBzIRYj kUBm2/WYc3vdN6UXEpGt70JBQULk2qOBHunojjN6mhMtl22FyMdr0bXEacdHOn7G 652detiG/HTKvsjkEofzcUZb4lotebzAX+I0WJlmrJM+hCC4UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+7BSGwTxGVDkelaC87BrzH34blMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjJhYTRkMDItNjE1YS0z NDgzLTllNDItZjdkYmI4NDdkYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8nAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg01PUXPYw6qfn6bqFIWvFgZqCrV+aXtuJEjqyEdk6cSzAkfIh5GdXo X6nGFYIVOQ9ZGEpeclc6CW+z1FzSVGQUm+srXh416LzpF63iMzjkA4AIaOkOuKGT d+TYeMJ/vZJSqxiwqPa5F5cGKIEgBFsn7pPnlTJ7v6qktFzu7qauf3kK9JSv6ga5 jSgya6JxnHNN834JZLV5Ynpjv2PhfHnz8yDhPKqEWtp0zvnkgg4nWo8VD2SQjOIl Y4oeTxHYo60XPD1lnzwhhfs3pZDQqeRnXt1BFqvx0ZPIJutsWUdOrW7lwhdg7K7d wlXcXVzBe+wGza1YrR9IB7kUVAM6mlU= -----END CERTIFICATE-----Generated at Tue Oct 6 23:00:49 2026 by rpki-client