$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa File: 3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa (raw, json) Hash identifier: 2xDpCswSgLkXfj+VZkbyi3WG5hk1SvNUYsAqTYqtQ2w= Subject key identifier: E8:FD:8F:B6:A8:8F:D3:5C:F3:97:65:7A:E9:CB:64:32:61:78:05:0C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D928C77E4302BB7E4E1C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.188.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:92:8c:77:e4:30:2b:b7:e4:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=45eb2c23-9229-4f49-81a6-8e5124c1c097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:32:80:74:98:db:c3:3d:30:4a:6b:9b:f8: 5e:d9:6b:e9:64:50:56:a2:40:57:37:18:98:7e:cc: ff:74:42:c7:06:8d:1e:da:c0:de:fd:a8:05:bd:fe: 3d:c4:07:5a:ea:4e:41:ce:1f:c1:b9:88:fd:9b:d7: ba:60:43:b8:23:33:12:63:48:21:aa:95:75:f7:71: d2:54:57:56:ca:25:4d:79:bb:11:83:2f:1b:23:98: e3:23:23:1a:b7:64:07:4a:8e:df:74:6a:f1:5a:11: 0f:40:f3:58:c9:cb:90:82:ac:72:38:49:55:14:51: 0a:6f:d1:0b:63:aa:d9:f3:93:85:3f:12:03:52:fd: 21:54:ea:55:6d:a3:ac:16:6a:e7:8e:26:9e:ee:86: f3:3f:c1:38:81:84:c9:1f:68:5b:da:4a:6d:1f:2a: 7d:5d:0d:2c:52:01:12:d0:3c:9a:e9:50:09:9e:d5: 4c:49:b0:1c:04:a5:56:92:45:c8:e6:ba:56:fd:c7: 63:db:0e:89:06:46:35:09:ec:82:20:dc:f1:46:14: 5c:34:3f:17:ac:69:e2:98:10:3e:59:1d:cc:aa:b2: de:dc:e3:ff:a4:1f:38:65:0d:75:ab:80:17:cd:31: ba:af:10:a1:c7:0e:24:82:be:be:2d:94:aa:e1:bf: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:8F:B6:A8:8F:D3:5C:F3:97:65:7A:E9:CB:64:32:61:78:05:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d0:89:81:21:2c:5b:46:ae:b8:c4:db:18:69:6c:b3:0a:6d: 08:2b:32:f9:ef:42:31:c1:11:3b:15:dc:5c:85:24:4a:bd:16: 7a:63:c7:57:59:1b:fe:9d:e3:b5:b4:47:3b:89:1c:fd:7b:06: a2:40:26:cc:86:ca:bb:7c:7f:37:69:75:5b:ec:8e:9c:1c:a4: 5e:0b:73:4b:a6:86:37:c8:c4:96:bb:2f:fc:f7:4d:55:9b:88: 54:17:ee:45:4b:27:10:2c:54:36:f8:d6:80:d8:db:85:4c:1e: 1c:ea:7e:58:64:01:aa:23:41:a1:8d:cf:4e:1e:3f:48:7d:a1: 93:71:d1:e3:3e:42:e0:4d:5e:2b:d1:73:42:cd:73:4c:73:e3: 99:b8:c2:d6:cb:d5:e8:04:e4:ea:65:5b:53:c0:33:7d:c5:8c: a5:32:39:61:f6:81:49:df:2f:6c:62:a9:75:13:4e:d5:19:1e: 75:e9:a1:01:f5:ce:48:d7:45:f5:40:aa:d9:86:6b:63:7a:33: 1d:53:85:4a:ce:e2:6f:35:f5:8e:bc:53:76:8f:e0:90:b5:3a: ef:3a:8e:a6:c9:b0:8e:6e:49:99:a0:b5:14:55:b7:3e:8a:92: 83:b0:ef:19:87:ee:2b:83:59:ff:a3:f5:60:3c:b1:f4:1d:45: a8:d2:86:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZKMd+QwK7fk4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDVlYjJjMjMtOTIyOS00ZjQ5LTgxYTYtOGU1MTI0YzFjMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK0ygHSY28M9MEprm/he2WvpZFBWokBXNxiY fsz/dELHBo0e2sDe/agFvf49xAda6k5Bzh/BuYj9m9e6YEO4IzMSY0ghqpV193HS VFdWyiVNebsRgy8bI5jjIyMat2QHSo7fdGrxWhEPQPNYycuQgqxyOElVFFEKb9EL Y6rZ85OFPxIDUv0hVOpVbaOsFmrnjiae7obzP8E4gYTJH2hb2kptHyp9XQ0sUgES 0Dya6VAJntVMSbAcBKVWkkXI5rpW/cdj2w6JBkY1CeyCINzxRhRcND8XrGnimBA+ WR3MqrLe3OP/pB84ZQ11q4AXzTG6rxChxw4kgr6+LZSq4b9JFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj9j7aoj9Nc85dleunLZDJheAUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2M4YjVhZmYtZjhjMS0z YWU2LTgxOGQtOTJmYjEwNDhmMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7ywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbQiYEhLFtGrrjE2xhpbLMKbQgrMvnvQjHBETsV3FyFJEq9Fnpjx1dZ G/6d47W0RzuJHP17BqJAJsyGyrt8fzdpdVvsjpwcpF4Lc0umhjfIxJa7L/z3TVWb iFQX7kVLJxAsVDb41oDY24VMHhzqflhkAaojQaGNz04eP0h9oZNx0eM+QuBNXivR c0LNc0xz45m4wtbL1egE5OplW1PAM33FjKUyOWH2gUnfL2xiqXUTTtUZHnXpoQH1 zkjXRfVAqtmGa2N6Mx1ThUrO4m819Y68U3aP4JC1Ou86jqbJsI5uSZmgtRRVtz6K koOw7xmH7iuDWf+j9WA8sfQdRajShnE= -----END CERTIFICATE-----Generated at Sat Oct 10 16:16:57 2026 by rpki-client