$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa File: 3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa (raw, json) Hash identifier: aPgP7d3Z27yMOHMgDeNEuo6Yy2UEX4V/NTh8A5FD97Q= Subject key identifier: BA:80:1B:CE:0C:1C:C8:06:2C:56:E7:B5:58:A0:54:19:34:CA:71:1C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DDAD489F130251E284100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.204.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:da:d4:89:f1:30:25:1e:28:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=db5990b1-3b93-4545-9d11-089151bdb679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:3d:35:ed:e8:b6:06:4e:ba:e6:a8:5d:e8: 7a:5b:b3:56:fc:ca:51:82:99:7e:69:c2:fe:e0:97: 1d:98:2d:9b:99:4a:2e:e6:7a:53:fc:14:ba:21:99: c4:df:47:52:a5:7e:63:14:41:9b:dd:a1:99:ae:f6: 9a:c3:02:11:3b:66:3d:17:65:4d:4d:5b:15:a0:65: 33:ff:39:8f:42:3c:4d:e4:80:8b:f1:23:c2:f7:73: ee:f7:3d:38:e1:30:e3:43:43:05:d3:30:11:88:48: ff:75:33:38:67:d1:91:61:3e:69:ec:b1:74:30:80: ed:06:a1:2b:27:1d:9c:43:df:e5:bd:22:33:5f:5d: a0:d0:db:43:26:ef:8a:96:2a:51:3f:98:e3:24:c1: 2f:62:94:ad:55:98:fb:d6:71:36:86:5c:d4:d3:09: 04:8e:e5:90:ce:1e:de:bc:39:63:2e:e7:92:a5:aa: 2e:db:86:09:24:50:55:bf:0d:4c:a2:28:ba:02:2e: 65:ce:fc:71:01:8c:55:43:43:d7:55:4f:b5:b3:4e: d9:e3:7c:9f:54:b7:51:53:ad:05:91:03:d2:a0:26: c5:29:e3:0f:a4:57:47:e4:05:b6:fc:ac:f9:59:6e: 98:15:65:a3:00:69:a2:6a:02:bd:88:02:38:e6:44: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:80:1B:CE:0C:1C:C8:06:2C:56:E7:B5:58:A0:54:19:34:CA:71:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f2:ed:b5:9a:45:0d:92:27:ee:2f:d1:1e:79:a6:14:de:46: 87:1f:c1:55:fc:52:42:a5:20:e6:ad:bb:06:a5:80:2a:7d:39: 73:0a:5f:39:70:86:cd:f6:86:69:44:f6:2b:8f:26:65:84:af: 78:0a:81:2d:b2:ad:36:1f:e2:14:e1:71:8c:ac:8b:df:3b:cb: 25:38:8d:7d:49:32:90:fc:4d:53:9c:d3:23:44:08:65:2b:48: 13:81:8e:97:42:a9:a1:8b:34:0d:c3:82:ff:66:32:f7:e3:04: 2f:c9:f6:1b:b4:c8:d4:ec:b5:15:4b:28:48:15:81:77:8b:e5: 61:16:6d:5d:dd:fb:db:dc:14:e6:28:c0:e8:c0:f8:93:85:32: 59:00:1b:d5:70:6a:0b:f1:ed:14:52:b9:db:1f:55:35:27:05: 88:e2:c0:d6:37:d4:c8:26:c5:75:c9:64:a2:a9:7e:f6:f0:cf: 19:a2:7f:08:02:82:e1:77:77:4c:27:3f:43:a7:2d:67:ca:76: f5:54:eb:2c:d7:03:6b:07:bb:6a:fb:f9:ae:7d:42:63:18:82: a4:54:a3:b0:f4:89:a2:c8:76:e1:2b:99:51:4e:c2:b2:50:83: b2:e4:a6:7b:6c:2a:1a:f6:36:0d:0e:23:b3:33:6c:a9:d6:29: 31:86:16:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdrUifEwJR4oQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGI1OTkwYjEtM2I5My00NTQ1LTlkMTEtMDg5MTUxYmRiNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypU9Ne3otgZOuuaoXeh6W7NW/MpRgpl+acL+ 4JcdmC2bmUou5npT/BS6IZnE30dSpX5jFEGb3aGZrvaawwIRO2Y9F2VNTVsVoGUz /zmPQjxN5ICL8SPC93Pu9z044TDjQ0MF0zARiEj/dTM4Z9GRYT5p7LF0MIDtBqEr Jx2cQ9/lvSIzX12g0NtDJu+KlipRP5jjJMEvYpStVZj71nE2hlzU0wkEjuWQzh7e vDljLueSpaou24YJJFBVvw1Moii6Ai5lzvxxAYxVQ0PXVU+1s07Z43yfVLdRU60F kQPSoCbFKeMPpFdH5AW2/Kz5WW6YFWWjAGmiagK9iAI45kRQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqAG84MHMgGLFbntVigVBk0ynEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JmMjk1YWQtOWY4Yy0z YTRmLTg4NzAtYzgwOGM3Yzg0OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLy7bWaRQ2SJ+4v0R55phTeRocfwVX8UkKlIOatuwalgCp9OXMKXzlw hs32hmlE9iuPJmWEr3gKgS2yrTYf4hThcYysi987yyU4jX1JMpD8TVOc0yNECGUr SBOBjpdCqaGLNA3Dgv9mMvfjBC/J9hu0yNTstRVLKEgVgXeL5WEWbV3d+9vcFOYo wOjA+JOFMlkAG9Vwagvx7RRSudsfVTUnBYjiwNY31MgmxXXJZKKpfvbwzxmifwgC guF3d0wnP0OnLWfKdvVU6yzXA2sHu2r7+a59QmMYgqRUo7D0iaLIduErmVFOwrJQ g7LkpntsKhr2Ng0OI7MzbKnWKTGGFnQ= -----END CERTIFICATE-----Generated at Mon Sep 28 13:24:50 2026 by rpki-client