$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa File: 3cf55895-668b-3307-b6c4-4999da4a3b04.roa (raw, json) Hash identifier: nufiGyy47ARmOm/g9cCGghN2T7YYaL/oNff2XEQ1Tuk= Subject key identifier: 75:2F:A4:27:C1:10:F7:0F:3F:2B:12:48:45:66:FC:78:83:23:A7:8B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D957C598492AEF044A100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.222.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:95:7c:59:84:92:ae:f0:44:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=72ce4d07-470d-4680-97f3-e15730f50a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:53:06:eb:65:93:4b:b5:8b:25:fc:0e:00:c5: ba:fc:8e:5f:8b:34:fd:a3:f8:89:42:b0:01:5f:f8: 66:6e:a4:8b:1b:ed:96:fc:1e:63:9d:3c:bd:53:d3: 81:db:38:52:ac:74:16:d4:21:d3:d8:26:b9:76:b1: 00:81:1f:41:bd:20:8c:db:ef:8b:0e:de:9b:18:a4: ed:b7:3e:64:2f:e1:03:65:36:39:d1:2f:f9:90:d8: 4b:38:fb:ac:84:5a:e5:a0:31:be:ad:3b:70:e1:70: fb:32:c0:2c:a4:6b:ed:9f:29:6f:5f:3e:5d:20:66: 1a:e4:92:e6:80:da:5c:d9:0f:54:46:48:96:b1:b1: 5e:86:98:7a:21:85:d3:f0:c3:1c:31:d3:dd:ba:c5: 1f:0c:19:29:5f:25:a7:45:f2:c6:76:73:80:5b:0e: 1a:85:96:91:98:5a:47:ca:87:f2:e8:f8:03:58:3d: c6:81:09:af:d7:54:25:ac:f5:17:48:0a:f5:26:fc: f3:bd:1c:7a:e5:dc:6f:97:61:57:b3:c3:10:13:97: c0:0d:dc:b3:81:f5:ea:e7:86:cb:57:07:bc:29:9c: 1e:3c:f6:40:cb:6d:08:a3:ab:d5:2b:2c:93:59:8d: eb:7f:dd:b7:b4:f6:9e:3d:a3:e8:43:cc:e7:8c:47: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2F:A4:27:C1:10:F7:0F:3F:2B:12:48:45:66:FC:78:83:23:A7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cf55895-668b-3307-b6c4-4999da4a3b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:16:0b:dd:c3:89:6b:07:5b:f3:6d:51:a2:38:c3:b4:4f:6a: 51:6b:f1:af:9a:eb:8a:5b:e4:40:81:d6:35:c5:22:f1:e0:d1: 5d:a5:21:26:c9:09:83:98:4e:84:76:64:8f:af:14:09:ff:66: 09:5e:df:e5:4e:1e:74:46:13:64:60:c9:14:59:d0:c8:20:fb: 87:a4:78:36:97:7b:a6:36:7d:b3:10:7d:d9:95:75:39:45:56: 45:a9:17:27:c1:e3:ad:c1:20:34:1c:aa:cc:d2:4d:3f:ef:01: 3d:4b:0c:f3:31:9f:6a:ef:af:5c:cf:77:c4:b7:1a:2f:1b:5e: 8c:c7:54:90:74:be:e8:20:38:2a:f9:9d:45:09:b5:01:11:b6: 97:1c:f7:a4:cd:ed:12:9b:6d:00:01:5a:7e:d7:e5:6b:41:05: 3e:91:21:1f:b4:7c:9c:04:21:b7:81:5e:59:87:63:3a:70:09: c5:2f:70:9c:2e:3d:0c:6d:b2:9c:37:eb:2a:ab:f6:cc:82:ff: df:3b:8f:d8:bf:b9:a9:05:d2:06:de:d9:fd:fa:94:d3:a5:88: e6:11:22:b8:76:43:36:91:a0:fa:2a:59:0e:3a:b1:f8:d2:dc: e0:e4:5b:44:4a:57:88:14:0a:ce:d5:47:74:ea:9b:ff:cd:53: a1:6b:04:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZV8WYSSrvBEoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzJjZTRkMDctNDcwZC00NjgwLTk3ZjMtZTE1NzMwZjUwYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFMG62WTS7WLJfwOAMW6/I5fizT9o/iJQrAB X/hmbqSLG+2W/B5jnTy9U9OB2zhSrHQW1CHT2Ca5drEAgR9BvSCM2++LDt6bGKTt tz5kL+EDZTY50S/5kNhLOPushFrloDG+rTtw4XD7MsAspGvtnylvXz5dIGYa5JLm gNpc2Q9URkiWsbFehph6IYXT8MMcMdPdusUfDBkpXyWnRfLGdnOAWw4ahZaRmFpH yofy6PgDWD3GgQmv11QlrPUXSAr1JvzzvRx65dxvl2FXs8MQE5fADdyzgfXq54bL Vwe8KZwePPZAy20Io6vVKyyTWY3rf923tPaePaPoQ8znjEcOFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUvpCfBEPcPPysSSEVm/HiDI6eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NmNTU4OTUtNjY4Yi0z MzA3LWI2YzQtNDk5OWRhNGEzYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEWC93DiWsHW/NtUaI4w7RPalFr8a+a64pb5ECB1jXFIvHg0V2lISbJ CYOYToR2ZI+vFAn/Zgle3+VOHnRGE2RgyRRZ0Mgg+4ekeDaXe6Y2fbMQfdmVdTlF VkWpFyfB463BIDQcqszSTT/vAT1LDPMxn2rvr1zPd8S3Gi8bXozHVJB0vuggOCr5 nUUJtQERtpcc96TN7RKbbQABWn7X5WtBBT6RIR+0fJwEIbeBXlmHYzpwCcUvcJwu PQxtspw36yqr9syC/987j9i/uakF0gbe2f36lNOliOYRIrh2QzaRoPoqWQ46sfjS 3ODkW0RKV4gUCs7VR3Tqm//NU6FrBIU= -----END CERTIFICATE-----Generated at Sat Oct 3 11:06:57 2026 by rpki-client