$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa File: 3f340104-27ea-3248-b605-b7052e970967.roa (raw, json) Hash identifier: gYbas2Lyfb+qV8bXqkpURAGEJyjuBkMO4JpVyXastIM= Subject key identifier: 36:C8:63:BC:34:4A:9F:5F:7E:A3:88:C1:C6:ED:5D:92:57:B8:8F:5C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9311D6B2435369276D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 35.206.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:93:11:d6:b2:43:53:69:27:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0a2503ad-a9bb-4d90-bdfa-efc43e4ad339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:33:1b:19:14:fb:16:98:b6:40:f2:be:b3:a7: b2:68:c3:67:ef:1c:4e:3d:dc:e2:d0:62:b4:ad:d7: 15:78:80:b7:80:37:d5:ba:67:83:09:18:b9:5c:b4: 4a:93:51:42:93:ac:12:29:e6:34:a2:7f:53:d3:29: 99:a8:9b:7a:58:9b:e8:33:1f:19:de:76:0e:91:d5: a3:b1:45:40:1a:7c:34:60:4c:d4:84:44:f6:be:49: 92:96:26:e4:08:44:8b:12:ef:22:4d:7e:65:74:68: d3:1a:d8:9e:ee:e5:aa:55:f6:1a:74:33:ae:1c:45: 61:63:21:dd:05:41:0f:eb:40:c5:d7:a4:72:40:ca: e4:66:dc:b4:21:2d:93:ba:1b:c8:24:98:6b:a4:c3: 8b:da:cc:ef:93:75:0a:45:51:4e:88:aa:25:a3:27: dc:ce:10:60:9f:c1:97:5a:10:3d:96:51:76:00:b3: 8b:de:5a:65:d2:2f:e8:f0:8d:28:f7:1a:14:dc:c2: 54:91:f1:95:35:f7:eb:54:b2:96:fa:42:2a:93:d5: 09:b3:07:da:68:6c:a8:d3:46:44:71:ac:4a:6e:80: 38:d3:7e:d5:7d:3c:8d:02:a1:db:69:e2:0f:62:62: 50:29:a0:62:8c:51:43:e3:1a:6f:09:6d:5e:9b:1c: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C8:63:BC:34:4A:9F:5F:7E:A3:88:C1:C6:ED:5D:92:57:B8:8F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c2:ab:68:5b:fd:04:fc:e8:38:15:31:cd:d6:55:49:86:70: f9:b3:21:05:91:56:38:95:12:df:b2:0d:78:48:10:25:a0:b1: 9b:10:03:16:93:04:37:34:6f:61:08:4b:12:e4:12:2c:24:09: 97:18:43:56:cc:39:d6:5d:f5:38:93:8b:7f:d2:30:e1:ca:75: fe:c2:12:f9:f8:ba:1c:7d:46:2c:25:e0:cf:c0:76:6b:4e:53: b2:82:92:ee:c9:71:b7:be:b4:44:e0:2d:c8:70:85:f2:bf:ee: 4f:3f:29:48:5f:d2:64:e5:a3:aa:c1:36:10:b9:8f:93:95:d1: a0:e8:a5:65:41:7e:00:d9:83:28:11:ee:e1:ca:02:3b:2a:ec: 34:b4:39:fc:45:c3:5e:e3:72:d2:5a:58:78:20:b7:81:b9:e3: 6a:6d:63:b2:a7:99:63:44:5b:bc:cb:23:df:9c:aa:6d:ab:f4: f8:0f:53:ac:11:7d:9c:20:92:c7:c8:ee:f2:d8:12:e8:80:c1: 62:4c:d2:e4:40:b2:31:b2:cb:44:75:76:e0:45:6d:93:7e:c6: c1:d3:f8:5e:ba:91:9b:e1:35:23:9d:4f:0d:7d:67:4d:a8:64: 18:c3:02:13:9b:58:f8:dd:c0:cd:de:c6:a4:4d:99:c9:68:0a: b3:42:f4:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZMR1rJDU2knbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGEyNTAzYWQtYTliYi00ZDkwLWJkZmEtZWZjNDNlNGFkMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jMbGRT7Fpi2QPK+s6eyaMNn7xxOPdzi0GK0 rdcVeIC3gDfVumeDCRi5XLRKk1FCk6wSKeY0on9T0ymZqJt6WJvoMx8Z3nYOkdWj sUVAGnw0YEzUhET2vkmSlibkCESLEu8iTX5ldGjTGtie7uWqVfYadDOuHEVhYyHd BUEP60DF16RyQMrkZty0IS2TuhvIJJhrpMOL2szvk3UKRVFOiKoloyfczhBgn8GX WhA9llF2ALOL3lpl0i/o8I0o9xoU3MJUkfGVNffrVLKW+kIqk9UJswfaaGyo00ZE caxKboA4037VfTyNAqHbaeIPYmJQKaBijFFD4xpvCW1emxyW6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbIY7w0Sp9ffqOIwcbtXZJXuI9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2YzNDAxMDQtMjdlYS0z MjQ4LWI2MDUtYjcwNTJlOTcwOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI86AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnCq2hb/QT86DgVMc3WVUmGcPmzIQWRVjiVEt+yDXhIECWgsZsQAxaT BDc0b2EISxLkEiwkCZcYQ1bMOdZd9TiTi3/SMOHKdf7CEvn4uhx9Riwl4M/AdmtO U7KCku7Jcbe+tETgLchwhfK/7k8/KUhf0mTlo6rBNhC5j5OV0aDopWVBfgDZgygR 7uHKAjsq7DS0OfxFw17jctJaWHggt4G542ptY7KnmWNEW7zLI9+cqm2r9PgPU6wR fZwgksfI7vLYEuiAwWJM0uRAsjGyy0R1duBFbZN+xsHT+F66kZvhNSOdTw19Z02o ZBjDAhObWPjdwM3exqRNmcloCrNC9PY= -----END CERTIFICATE-----Generated at Thu Oct 8 16:29:41 2026 by rpki-client