$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/319493ca-fa32-37d3-9616-0af2c399a14c.roa File: 319493ca-fa32-37d3-9616-0af2c399a14c.roa (raw, json) Hash identifier: icpbz1w5grY9mhHS+L535Jqyia8bK+Vpef5jxoAND3Q= Subject key identifier: 23:B5:1A:EF:F1:3F:28:94:AB:48:75:8D:52:D0:10:8D:55:E1:E9:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D83A2FEAA31E14411F4C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/319493ca-fa32-37d3-9616-0af2c399a14c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.239.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:83:a2:fe:aa:31:e1:44:11:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ea3466e4-23f5-4fa1-85d1-72dc37580744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fa:b2:64:88:11:d6:84:9a:a6:85:e5:92:dd: 85:9e:cc:bf:7d:e2:bc:52:6a:97:9b:69:09:1e:4c: e7:1b:19:09:4d:7f:8b:40:86:9f:7b:a5:fa:e7:88: d1:a3:98:18:6d:c8:29:b1:98:c6:99:16:14:8e:07: f4:5e:89:a9:27:a6:43:31:c0:42:21:75:c9:a0:af: 10:a6:3c:a4:12:ea:8d:ff:b4:cf:6b:19:dc:ad:eb: 7f:29:9a:7f:d8:07:38:92:14:aa:96:1e:16:de:83: 8b:18:7e:2f:56:f8:e7:85:30:64:33:5c:2c:32:c9: bd:0e:45:d4:91:9c:7c:37:b3:94:81:f1:7b:e0:c1: 20:2f:94:b5:5d:ff:c7:d7:fe:28:2c:bd:dd:ca:43: d0:ac:9b:b2:b8:8f:4b:99:d6:9a:86:b3:ea:c2:47: 0e:b5:7f:aa:74:c0:08:46:4f:e2:5c:c3:fb:24:85: 85:03:50:a4:39:55:e6:da:0e:18:64:f4:b2:6e:f0: 1e:4c:fd:96:82:08:cf:1a:a0:f4:ad:62:8d:b0:12: 8a:6e:77:4b:fd:f0:29:d1:77:e7:82:1c:81:0c:9a: 00:e3:3a:39:a1:24:70:62:75:85:8d:63:35:06:95: 57:7b:bd:c8:41:ab:c6:a2:0c:bc:b2:2b:6c:ed:8c: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B5:1A:EF:F1:3F:28:94:AB:48:75:8D:52:D0:10:8D:55:E1:E9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/319493ca-fa32-37d3-9616-0af2c399a14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2e:31:96:82:a7:e5:ad:d6:ec:cf:6e:3d:85:2c:bf:55:9e: c6:93:b0:5d:d5:fb:8e:8f:20:79:a1:33:25:69:ff:02:5e:c8: 54:9a:5e:bd:70:06:45:b0:a4:a6:8d:57:7a:99:d7:f7:b7:e5: 20:ee:87:de:25:5d:8b:d2:74:48:c5:dd:18:ca:a1:d5:cb:19: f6:a5:2c:36:34:dc:25:f9:7d:3e:13:80:d5:e2:fa:e6:6f:bd: 7f:e5:c1:d8:7a:8a:a4:8c:9e:cc:71:bc:ea:2e:92:a2:3a:02: 81:24:0f:8c:1e:55:13:4b:2a:c2:91:32:f5:bb:4e:92:80:89: ea:8c:10:9d:c7:d3:ac:7a:9d:91:0a:1c:16:67:9d:87:ab:99: f1:e3:de:fd:fd:ce:c6:69:0f:69:76:7e:5c:2a:de:e9:20:cb: c1:1b:cc:d8:00:7f:74:9c:c9:3d:f5:96:36:45:35:25:b6:41: 15:5b:0a:4d:2f:9c:70:03:a8:e5:39:38:f6:5c:60:47:b1:ef: e4:42:91:6f:f5:16:a0:a5:c3:c7:59:9f:f5:e9:33:6d:89:34: 97:98:f1:6e:c5:b8:81:c1:76:64:4e:86:b8:68:dc:76:b5:30: 84:30:2b:59:30:6d:1c:c2:04:25:96:14:75:b0:8b:6c:7c:77: f9:1a:25:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYOi/qox4UQR9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWEzNDY2ZTQtMjNmNS00ZmExLTg1ZDEtNzJkYzM3NTgwNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/qyZIgR1oSapoXlkt2Fnsy/feK8UmqXm2kJ HkznGxkJTX+LQIafe6X654jRo5gYbcgpsZjGmRYUjgf0XompJ6ZDMcBCIXXJoK8Q pjykEuqN/7TPaxncret/KZp/2Ac4khSqlh4W3oOLGH4vVvjnhTBkM1wsMsm9DkXU kZx8N7OUgfF74MEgL5S1Xf/H1/4oLL3dykPQrJuyuI9LmdaahrPqwkcOtX+qdMAI Rk/iXMP7JIWFA1CkOVXm2g4YZPSybvAeTP2WggjPGqD0rWKNsBKKbndL/fAp0Xfn ghyBDJoA4zo5oSRwYnWFjWM1BpVXe73IQavGogy8sits7Yx92QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO1Gu/xPyiUq0h1jVLQEI1V4ekRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE5NDkzY2EtZmEzMi0z N2QzLTk2MTYtMGFmMmMzOTlhMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI++wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEuMZaCp+Wt1uzPbj2FLL9VnsaTsF3V+46PIHmhMyVp/wJeyFSaXr1w BkWwpKaNV3qZ1/e35SDuh94lXYvSdEjF3RjKodXLGfalLDY03CX5fT4TgNXi+uZv vX/lwdh6iqSMnsxxvOoukqI6AoEkD4weVRNLKsKRMvW7TpKAieqMEJ3H06x6nZEK HBZnnYermfHj3v39zsZpD2l2flwq3ukgy8EbzNgAf3ScyT31ljZFNSW2QRVbCk0v nHADqOU5OPZcYEex7+RCkW/1FqClw8dZn/XpM22JNJeY8W7FuIHBdmROhrho3Ha1 MIQwK1kwbRzCBCWWFHWwi2x8d/kaJXY= -----END CERTIFICATE-----Generated at Sat Oct 3 12:15:14 2026 by rpki-client