$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa File: 36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa (raw, json) Hash identifier: iFi5JUfshm/KUypaj+PvyFfZOhpo4T0Lmx4JzZVjaYg= Subject key identifier: 38:86:17:49:5C:9A:52:E4:16:3D:E1:7B:16:90:A2:2A:DF:7A:D4:B9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D84214EC271D36617F100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.228.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:84:21:4e:c2:71:d3:66:17:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1c8ee4c6-4c16-4d8d-9908-758d63c00551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:07:d7:15:1e:f9:af:fe:1f:51:86:56:1c:18: 2c:f2:bc:9d:85:ac:a3:5d:ca:64:32:b6:24:4a:4a: 41:95:7d:3b:c1:e0:64:02:d7:7c:25:7e:75:1f:cd: cb:40:19:fc:b3:cd:6d:3f:cd:60:f3:ce:c7:e6:5f: 69:41:eb:3d:96:0c:83:03:98:96:ca:a3:a8:a7:dd: a6:c3:4e:79:1d:ac:35:6c:71:10:5f:47:ba:f5:ed: db:be:c2:e4:9e:28:1c:ab:61:4d:c8:da:19:d2:48: 52:fb:3f:05:54:f2:8d:66:12:05:ec:e0:fd:48:ef: cd:ce:c9:fc:09:e5:ed:30:0c:76:27:7a:2d:c8:1e: 4e:e5:b3:c1:ac:b2:a4:c5:a9:84:4e:7b:d7:03:b1: fa:54:94:13:66:ed:11:60:ab:b0:79:6f:d2:ed:8b: 83:8d:9b:04:ea:8e:c4:cc:c9:61:df:06:18:de:46: ce:9c:93:95:3b:fc:50:ab:d6:03:dc:8b:92:67:87: 73:b1:b6:c1:70:50:e2:83:70:70:0c:20:12:49:ce: 78:2f:95:3f:51:32:9c:a6:ef:3e:3d:b4:59:77:fa: fc:bf:9f:0b:d3:ad:c6:f5:8d:9c:b0:e9:5e:a8:9a: 68:71:52:95:8b:7a:8a:d1:f4:3d:c4:6a:34:e9:a7: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:17:49:5C:9A:52:E4:16:3D:E1:7B:16:90:A2:2A:DF:7A:D4:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:24:29:92:e7:0d:6a:32:96:8f:6e:7e:a9:4b:b4:7a:02:8e: c5:0c:69:f8:2b:d2:49:26:9b:39:74:c3:0d:f4:1e:6a:a3:8f: 79:7d:3c:f2:a1:e8:93:85:70:c3:3c:11:e7:1f:97:1a:6e:ff: 37:1c:af:82:2e:0c:eb:76:10:2b:66:d1:63:5b:9c:e5:33:fa: 6f:01:4e:86:8a:ca:a5:b5:3a:96:0b:b7:df:be:37:51:0c:2f: ef:92:25:00:c1:70:75:38:04:2b:d3:cf:4a:81:2b:61:70:21: 7d:56:9b:09:94:d8:c3:0b:26:7d:7f:7c:82:29:aa:46:41:64: 46:81:b9:91:ae:86:86:0e:25:7e:78:e9:2a:fd:77:ed:0c:b5: 6e:08:e4:c6:d4:51:76:94:47:fa:f2:b2:61:bd:df:b7:a7:9b: a5:55:f4:b0:be:39:1d:33:c3:78:81:49:b0:0a:fd:41:75:ec: 71:d4:68:53:ba:b7:0a:3a:85:bd:75:1a:4b:b3:ec:40:0a:c4: 8c:4b:20:e7:ae:74:9b:95:47:0c:ec:8c:af:a4:65:cf:5d:2d: ba:bf:99:d3:7a:34:f7:f8:af:30:5c:12:d7:a1:18:43:e1:41: f5:a2:b8:74:6b:aa:7f:2f:47:dc:5d:d8:e1:54:d1:0a:d1:9f: 6d:93:3c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYQhTsJx02YX8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWM4ZWU0YzYtNGMxNi00ZDhkLTk5MDgtNzU4ZDYzYzAwNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwfXFR75r/4fUYZWHBgs8rydhayjXcpkMrYk SkpBlX07weBkAtd8JX51H83LQBn8s81tP81g887H5l9pQes9lgyDA5iWyqOop92m w055Haw1bHEQX0e69e3bvsLknigcq2FNyNoZ0khS+z8FVPKNZhIF7OD9SO/Nzsn8 CeXtMAx2J3otyB5O5bPBrLKkxamETnvXA7H6VJQTZu0RYKuweW/S7YuDjZsE6o7E zMlh3wYY3kbOnJOVO/xQq9YD3IuSZ4dzsbbBcFDig3BwDCASSc54L5U/UTKcpu8+ PbRZd/r8v58L063G9Y2csOleqJpocVKVi3qK0fQ9xGo06ad6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiGF0lcmlLkFj3hexaQoirfetS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzZkZDJiNGUtMzVjNy0z ZWU0LThjN2ItZThlY2NkMzA1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+QgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkkKZLnDWoylo9ufqlLtHoCjsUMafgr0kkmmzl0ww30Hmqjj3l9PPKh 6JOFcMM8Eecflxpu/zccr4IuDOt2ECtm0WNbnOUz+m8BToaKyqW1OpYLt9++N1EM L++SJQDBcHU4BCvTz0qBK2FwIX1WmwmU2MMLJn1/fIIpqkZBZEaBuZGuhoYOJX54 6Sr9d+0MtW4I5MbUUXaUR/rysmG937enm6VV9LC+OR0zw3iBSbAK/UF17HHUaFO6 two6hb11Gkuz7EAKxIxLIOeudJuVRwzsjK+kZc9dLbq/mdN6NPf4rzBcEtehGEPh QfWiuHRrqn8vR9xd2OFU0QrRn22TPJM= -----END CERTIFICATE-----Generated at Mon Sep 28 11:14:05 2026 by rpki-client