$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23a66970-3a8f-38c0-99b0-dee4b34755ba.roa File: 23a66970-3a8f-38c0-99b0-dee4b34755ba.roa (raw, json) Hash identifier: veTQQxuErmvqzxgxW7veyGrzMVX+n0hjxOj1pPmZWME= Subject key identifier: 29:FC:05:C3:DB:A4:48:A6:7A:23:CF:80:D2:40:02:20:72:52:4E:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD09216D56D222D23F280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23a66970-3a8f-38c0-99b0-dee4b34755ba.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.242.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d0:92:16:d5:6d:22:2d:23:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1d44edba-6d64-47ee-89c6-f576baa6d6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:15:ca:c3:55:73:f5:6d:99:b7:57:93:fc:4d: 3a:67:f8:c5:2e:b9:2a:46:ba:df:da:31:52:08:52: 85:02:0e:21:7b:4f:bd:4e:47:28:03:9b:1f:f7:81: 0f:01:56:53:eb:63:1b:c5:29:b8:42:b3:79:60:ae: e3:06:f3:29:64:68:9c:db:fe:36:1c:ef:13:c3:8d: b7:07:14:76:ac:57:1d:6f:e5:9f:6a:bc:a8:79:f8: a8:7f:27:7c:2e:35:a2:97:b8:88:c7:0b:4a:eb:b4: c0:60:50:46:b3:f2:10:83:04:52:d9:7f:82:4f:1d: 17:19:85:1c:3b:15:b5:9e:9f:17:d0:a0:37:c2:df: ce:ba:53:fc:42:fe:b4:7b:82:a7:82:11:4a:81:51: 1a:c1:4a:10:91:cb:2a:32:e6:eb:a0:71:42:8d:2f: ce:fe:6e:8c:f7:0d:23:9f:79:91:83:81:33:fe:42: 2c:ce:de:54:2c:dd:c1:3f:1e:81:9c:52:09:f2:cd: 9c:05:10:3d:02:dd:67:16:f0:90:29:7b:c4:da:f0: 01:3e:b0:8d:e5:ef:71:f6:44:aa:80:31:76:55:ab: b4:51:2e:d7:75:f4:aa:16:9e:fe:67:26:ab:b7:69: a6:87:71:91:bf:a1:fc:4d:62:65:70:62:6e:da:e1: 29:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FC:05:C3:DB:A4:48:A6:7A:23:CF:80:D2:40:02:20:72:52:4E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23a66970-3a8f-38c0-99b0-dee4b34755ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.242.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:91:e0:9a:1d:e3:69:ee:f0:5f:9e:3a:d7:cf:f9:c8:11:ac: 9f:13:79:16:a8:b8:49:7c:9d:8f:cb:0a:a0:62:bb:d4:ea:c3: dc:90:97:67:ed:18:6f:e5:77:71:6a:db:21:35:1a:e2:b2:71: 15:20:2e:72:d7:fe:2e:b1:f4:fa:a5:b7:20:93:c7:d8:f0:22: 17:b4:d7:82:1d:66:ac:e7:d9:a1:09:93:b9:93:f4:8e:1a:31: e2:b4:42:46:de:20:fc:7a:c2:ad:39:bd:d3:75:aa:57:d9:cd: d4:45:09:41:9b:85:ef:67:cc:61:ab:f9:d8:f6:c1:cb:4b:f5: a2:2d:b7:9d:3f:a4:90:88:11:18:14:b2:48:88:c9:57:d8:89: c7:35:3b:58:f2:32:81:b0:7d:9d:91:89:db:f7:da:cf:ff:70: 10:6e:a0:0d:34:97:05:d4:ae:6d:61:06:bb:f9:a3:0d:e5:ed: f7:c3:5a:31:6c:8d:fb:84:b4:4c:95:65:5e:8e:af:d4:a4:21: 14:fe:0c:a0:be:db:c6:6e:8b:af:02:b5:1b:46:f3:bd:33:16: 29:a4:7f:60:fd:60:90:11:26:dc:92:11:cf:27:7a:34:53:90: f0:76:21:29:33:2a:77:85:48:fb:9b:ec:a6:9b:3e:7f:cf:4a: 44:92:ef:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdCSFtVtIi0j8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWQ0NGVkYmEtNmQ2NC00N2VlLTg5YzYtZjU3NmJhYTZkNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRXKw1Vz9W2Zt1eT/E06Z/jFLrkqRrrf2jFS CFKFAg4he0+9TkcoA5sf94EPAVZT62MbxSm4QrN5YK7jBvMpZGic2/42HO8Tw423 BxR2rFcdb+Wfaryoefiofyd8LjWil7iIxwtK67TAYFBGs/IQgwRS2X+CTx0XGYUc OxW1np8X0KA3wt/OulP8Qv60e4KnghFKgVEawUoQkcsqMubroHFCjS/O/m6M9w0j n3mRg4Ez/kIszt5ULN3BPx6BnFIJ8s2cBRA9At1nFvCQKXvE2vABPrCN5e9x9kSq gDF2Vau0US7XdfSqFp7+Zyart2mmh3GRv6H8TWJlcGJu2uEp0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn8BcPbpEimeiPPgNJAAiByUk4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNhNjY5NzAtM2E4Zi0z OGMwLTk5YjAtZGVlNGIzNDc1NWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/KQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiR4Jod42nu8F+eOtfP+cgRrJ8TeRaouEl8nY/LCqBiu9Tqw9yQl2ft GG/ld3Fq2yE1GuKycRUgLnLX/i6x9PqltyCTx9jwIhe014IdZqzn2aEJk7mT9I4a MeK0QkbeIPx6wq05vdN1qlfZzdRFCUGbhe9nzGGr+dj2wctL9aItt50/pJCIERgU skiIyVfYicc1O1jyMoGwfZ2Ridv32s//cBBuoA00lwXUrm1hBrv5ow3l7ffDWjFs jfuEtEyVZV6Or9SkIRT+DKC+28Zui68CtRtG870zFimkf2D9YJARJtySEc8nejRT kPB2ISkzKneFSPub7KabPn/PSkSS75I= -----END CERTIFICATE-----Generated at Tue Oct 6 15:49:37 2026 by rpki-client