$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/328fec2d-bed0-382b-8813-4b15f045734f.roa File: 328fec2d-bed0-382b-8813-4b15f045734f.roa (raw, json) Hash identifier: 1CVdG4LDiNwEHcQmnljFdMWOrI2CFgbf7hL3poVXtWI= Subject key identifier: DE:62:8A:78:B5:6B:1D:81:FB:8F:C2:CD:5B:8C:20:AC:39:5D:8B:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC74985D81815A447BC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/328fec2d-bed0-382b-8813-4b15f045734f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.234.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c7:49:85:d8:18:15:a4:47:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4d9d369a-ae05-465a-b10b-6fcc6421e11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:6e:04:95:e4:8c:8c:72:f6:7c:ee:fe:0e: 04:70:60:c0:cc:3b:7d:b0:d0:49:ae:90:2f:20:c3: ae:b1:bd:63:11:cf:d4:ee:90:b0:14:62:a1:b9:fc: ec:2b:c5:fb:b8:46:54:9f:59:c8:d0:ac:83:ea:1f: ae:fa:6f:5a:bf:7a:70:6b:c6:28:57:52:d5:9e:c4: 0a:46:c1:1e:40:1b:cd:a3:23:e5:e6:17:cb:ef:cd: 2f:4a:0f:0e:72:8a:ba:3c:b0:48:8f:92:da:88:65: 83:b2:c4:48:a3:ef:8b:fd:28:07:f2:4b:84:50:8a: be:7c:10:24:7d:6f:3d:fe:05:e3:b4:ed:57:43:57: 87:de:0d:cf:96:60:df:5f:cf:2d:d9:cd:ee:38:21: 6a:02:1e:bb:1d:8f:ba:ea:a3:99:fa:31:dc:ad:4e: 01:4e:17:76:da:ce:c7:e8:72:92:eb:2b:7b:2b:92: ef:1c:c4:0e:df:1b:91:a1:b7:38:cd:57:c0:82:ca: 2e:76:36:90:58:b3:d6:04:23:b9:ca:21:8b:80:92: 8b:28:13:24:84:dd:ed:63:c1:5b:48:60:0a:e7:76: 30:59:fb:dc:ff:4e:c5:a2:ad:b5:bb:59:48:19:fb: ef:aa:04:9a:e1:55:da:dc:b2:5f:fe:a4:20:b4:70: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:62:8A:78:B5:6B:1D:81:FB:8F:C2:CD:5B:8C:20:AC:39:5D:8B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/328fec2d-bed0-382b-8813-4b15f045734f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.234.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:86:74:6a:76:9e:52:5f:71:c9:10:cd:20:f5:18:78:c1:14: c2:37:61:74:e8:a7:9b:5f:c0:ca:2a:70:54:ec:1a:84:32:1a: 50:45:b0:49:d7:31:74:cd:00:7a:2f:38:34:df:17:17:51:10: fd:d7:4a:2d:94:30:fe:36:9a:a8:71:15:e1:16:05:c6:fe:bc: f6:12:04:4f:a6:18:b0:21:30:36:bd:87:da:55:8f:da:f7:36: 68:b8:55:f6:5b:93:80:70:10:e8:06:9c:bc:61:5a:e0:e8:0c: 36:6c:1b:14:3c:dd:bc:5d:92:10:30:87:cf:b6:e6:fd:de:aa: c5:65:48:77:cd:20:49:f1:a6:f6:50:b9:d3:8a:00:0c:22:37: f4:2e:b5:fe:b2:d8:13:bc:19:81:9d:14:54:84:fe:b0:c3:e3: 41:c7:91:1a:7c:d0:54:43:95:a5:9a:a5:17:8f:60:b9:9b:74: f6:f3:ef:80:6e:81:bd:86:59:e0:fd:0e:8d:d6:94:16:be:4e: 6c:f9:a5:a9:dd:dc:86:1b:7c:e3:ac:0a:de:43:df:a8:fb:e8: fc:b6:12:07:6d:6a:88:e1:ef:87:a9:0c:7c:d2:e2:fe:68:9b: a7:a7:a3:94:74:31:64:24:a0:d9:0b:27:04:b0:ef:b2:e5:72: 34:55:39:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcdJhdgYFaRHvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NGQ5ZDM2OWEtYWUwNS00NjVhLWIxMGItNmZjYzY0MjFlMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5VuBJXkjIxy9nzu/g4EcGDAzDt9sNBJrpAv IMOusb1jEc/U7pCwFGKhufzsK8X7uEZUn1nI0KyD6h+u+m9av3pwa8YoV1LVnsQK RsEeQBvNoyPl5hfL780vSg8Ocoq6PLBIj5LaiGWDssRIo++L/SgH8kuEUIq+fBAk fW89/gXjtO1XQ1eH3g3PlmDfX88t2c3uOCFqAh67HY+66qOZ+jHcrU4BThd22s7H 6HKS6yt7K5LvHMQO3xuRobc4zVfAgsoudjaQWLPWBCO5yiGLgJKLKBMkhN3tY8Fb SGAK53YwWfvc/07Foq21u1lIGfvvqgSa4VXa3LJf/qQgtHABOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5iini1ax2B+4/CzVuMIKw5XYtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzI4ZmVjMmQtYmVkMC0z ODJiLTg4MTMtNGIxNWYwNDU3MzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOGdGp2nlJfcckQzSD1GHjBFMI3YXTop5tfwMoqcFTsGoQyGlBFsEnX MXTNAHovODTfFxdREP3XSi2UMP42mqhxFeEWBcb+vPYSBE+mGLAhMDa9h9pVj9r3 Nmi4VfZbk4BwEOgGnLxhWuDoDDZsGxQ83bxdkhAwh8+25v3eqsVlSHfNIEnxpvZQ udOKAAwiN/Qutf6y2BO8GYGdFFSE/rDD40HHkRp80FRDlaWapRePYLmbdPbz74Bu gb2GWeD9Do3WlBa+Tmz5pand3IYbfOOsCt5D36j76Py2Egdtaojh74epDHzS4v5o m6eno5R0MWQkoNkLJwSw77LlcjRVOR4= -----END CERTIFICATE-----Generated at Tue Oct 6 21:35:34 2026 by rpki-client