$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa File: 3fba3afa-94b4-32ab-a016-746169353e51.roa (raw, json) Hash identifier: O2wzxZZH02yT9V6zPp59bdsJ0XwiFw6n+QWZ0NtyuNU= Subject key identifier: 50:50:33:B4:25:83:AE:7A:D2:46:2D:EB:62:01:4B:04:5E:19:90:62 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D99EA73FDBAACF3BB1E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.222.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:99:ea:73:fd:ba:ac:f3:bb:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6d38b4bf-d665-41c7-95ad-517fc9c4e5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:e3:91:2c:6a:78:3c:16:1a:9b:37:56:ba: ff:15:3b:d1:88:d3:8c:1e:e5:cd:41:56:d3:a8:7d: 98:59:68:10:06:b5:ec:99:95:bf:f9:05:a0:0e:ad: 52:17:55:39:2b:47:46:c4:96:31:13:4d:aa:6b:47: 18:d6:91:8e:5c:ce:35:b2:50:83:af:0f:7e:fc:eb: e7:00:79:12:ad:04:d5:a7:e3:ef:cf:fe:20:3f:ba: 68:7d:bf:44:24:96:f1:b5:f5:9b:31:50:5b:7c:9f: 77:e7:43:ef:9e:b8:50:29:e0:4d:fa:40:7d:56:0b: df:fe:4e:f2:f3:0a:c8:96:5d:3c:66:97:0f:b6:9c: 74:ef:62:86:ed:69:8e:5f:97:42:fe:98:48:bd:0a: 61:37:55:08:ac:e5:12:14:a3:62:76:fa:b1:6b:59: 5d:ca:86:8e:c1:e1:78:e9:b8:6a:46:43:fa:41:2d: b5:9e:f9:9c:ba:48:ce:b0:15:e6:32:d5:95:cf:f1: 97:ef:3f:99:77:16:5b:9b:e9:dc:d6:c6:81:4a:b5: 2c:1f:61:af:2e:84:c0:56:99:ad:81:73:3d:9e:de: fe:06:78:d4:76:15:c5:26:7a:48:ce:ec:41:c6:9e: 3e:42:21:5d:83:78:fa:3e:0a:29:06:9c:c8:e4:5a: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:50:33:B4:25:83:AE:7A:D2:46:2D:EB:62:01:4B:04:5E:19:90:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:24:88:07:d7:69:ae:23:4c:e4:92:bf:8c:65:b6:ac:a2:bc: 40:2c:ad:59:00:7b:b0:22:81:20:02:79:b7:5b:e9:86:05:5c: 95:8a:c0:3b:90:1d:9b:d5:81:1b:c1:38:63:3c:27:5a:22:7b: 14:38:8b:c2:2c:ec:90:36:20:c3:43:b8:13:24:1b:cc:89:8f: 50:a1:15:1d:5d:b8:9f:18:7c:c6:3f:dd:dd:8f:4f:67:cd:cf: 4f:cd:cf:a0:eb:29:e0:06:f3:b7:85:02:84:84:f1:d8:55:47: af:ff:9e:5a:6b:0d:d0:25:cc:16:a7:f4:6d:9e:0a:6b:08:83: 6f:c5:2f:fe:40:5b:a2:98:71:89:ea:b8:4b:6d:a4:8a:b6:30: d8:a9:05:c8:8a:6b:46:33:10:4c:e0:6b:84:c8:af:3a:70:18: 78:83:55:7a:ee:eb:af:03:e9:89:c7:42:5f:6b:4e:8c:c4:2f: 79:87:af:d0:d4:4e:0d:a8:8b:d6:38:cb:e7:c8:0f:dc:17:59: 55:24:e6:dd:7e:69:d4:ba:b7:5f:24:09:99:69:6c:af:1c:2c: b1:c2:89:96:c6:f8:48:1d:25:8a:1e:9a:ba:c1:22:05:d9:45: fa:af:5f:03:df:7c:28:54:d5:1f:d8:d9:0d:b7:28:2a:af:ff: 37:28:1d:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZnqc/26rPO7HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmQzOGI0YmYtZDY2NS00MWM3LTk1YWQtNTE3ZmM5YzRlNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbvjkSxqeDwWGps3Vrr/FTvRiNOMHuXNQVbT qH2YWWgQBrXsmZW/+QWgDq1SF1U5K0dGxJYxE02qa0cY1pGOXM41slCDrw9+/Ovn AHkSrQTVp+Pvz/4gP7pofb9EJJbxtfWbMVBbfJ9350PvnrhQKeBN+kB9Vgvf/k7y 8wrIll08ZpcPtpx072KG7WmOX5dC/phIvQphN1UIrOUSFKNidvqxa1ldyoaOweF4 6bhqRkP6QS21nvmcukjOsBXmMtWVz/GX7z+ZdxZbm+nc1saBSrUsH2GvLoTAVpmt gXM9nt7+BnjUdhXFJnpIzuxBxp4+QiFdg3j6PgopBpzI5FqYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBQM7Qlg6560kYt62IBSwReGZBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiYTNhZmEtOTRiNC0z MmFiLWEwMTYtNzQ2MTY5MzUzZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUkiAfXaa4jTOSSv4xltqyivEAsrVkAe7AigSACebdb6YYFXJWKwDuQ HZvVgRvBOGM8J1oiexQ4i8Is7JA2IMNDuBMkG8yJj1ChFR1duJ8YfMY/3d2PT2fN z0/Nz6DrKeAG87eFAoSE8dhVR6//nlprDdAlzBan9G2eCmsIg2/FL/5AW6KYcYnq uEttpIq2MNipBciKa0YzEEzga4TIrzpwGHiDVXru668D6YnHQl9rTozEL3mHr9DU Tg2oi9Y4y+fID9wXWVUk5t1+adS6t18kCZlpbK8cLLHCiZbG+EgdJYoemrrBIgXZ RfqvXwPffChU1R/Y2Q23KCqv/zcoHb4= -----END CERTIFICATE-----Generated at Sun Oct 4 09:27:28 2026 by rpki-client