$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/404877f8-ca2b-39b0-95c3-95a11a3c927a.roa File: 404877f8-ca2b-39b0-95c3-95a11a3c927a.roa (raw, json) Hash identifier: ojNlCTbudV4WU6HRkKkRHeZgTyTLAaFyBGXVm7jseRI= Subject key identifier: FE:E8:8C:B7:24:A0:9D:CA:82:17:EF:34:C4:60:8E:69:21:71:A8:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAC75A1A34E2B5ECF9F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/404877f8-ca2b-39b0-95c3-95a11a3c927a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.186.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ac:75:a1:a3:4e:2b:5e:cf:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=99396b44-5be9-4cba-b19c-3831418e85d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:29:ce:00:92:bc:82:b2:d2:18:5b:9e:bf: ca:3f:1d:67:51:93:99:05:37:7a:7a:22:51:d1:79: f9:48:1c:07:55:24:ec:ac:42:23:42:32:bf:2c:d6: 51:16:6f:91:e1:8d:d6:2e:4b:ee:40:d2:88:59:68: 64:c1:35:1e:68:93:5b:ad:63:15:ce:14:f5:9f:85: d1:52:de:60:e4:27:18:64:09:d5:21:be:b3:6d:0f: e6:cf:ce:3f:fb:ca:e4:77:60:e9:2c:a4:3e:9c:31: 43:f1:9c:28:df:25:6f:b2:58:64:65:65:14:91:7c: 41:12:e8:54:8e:bd:e8:48:43:a9:47:df:93:04:43: e4:48:86:45:ac:c6:91:48:8b:e5:93:00:67:23:89: 53:20:af:6b:43:12:77:41:64:d4:37:50:37:a8:e5: ad:08:39:ca:97:bb:b0:80:8d:42:ce:d3:34:39:8b: 19:6c:4c:13:98:27:6f:69:5f:08:aa:8b:a6:5e:3c: 3c:b4:3c:ca:f4:ba:6a:ee:1f:73:02:bb:f3:86:a0: 4f:ef:b0:c0:1b:e7:85:5e:6e:f5:f0:63:74:42:9c: a8:2d:fc:14:9c:9a:d9:9a:63:b3:03:94:43:dc:a5: 2d:30:b1:bb:8f:4d:72:9e:9c:50:a1:3e:1e:1f:cd: 68:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:8C:B7:24:A0:9D:CA:82:17:EF:34:C4:60:8E:69:21:71:A8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/404877f8-ca2b-39b0-95c3-95a11a3c927a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.186.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b3:a8:3e:08:df:31:e9:1a:8b:6c:a0:ec:5e:c2:85:da:8b: c0:73:1d:3d:eb:ee:e8:cb:31:d6:b3:75:b5:83:38:8e:c9:41: b0:52:e1:26:87:7a:8d:90:bc:98:bb:09:62:93:d1:27:38:20: b7:44:ed:27:77:16:6a:e5:a8:7f:bf:21:e8:1e:7a:05:8c:f3: 13:0b:12:70:70:bc:0c:db:e7:13:7d:19:ec:a6:f9:19:f2:9f: c9:70:87:31:bd:bc:1d:c0:b8:ee:23:4b:fc:9f:68:78:40:b4: ab:84:c5:15:66:87:11:2c:d3:2d:50:a8:41:1a:e0:22:94:6f: 82:85:57:af:4b:93:98:28:66:bb:3f:83:91:cf:52:6d:51:1c: 4e:09:4d:0c:30:09:9f:4b:50:23:bf:d5:ff:39:a7:db:89:f4: d3:27:3a:ab:72:5d:01:9c:8f:45:bc:6c:95:ef:48:0c:d6:ed: 8e:2b:c7:43:45:36:84:8d:e6:63:c1:27:2f:4d:7a:fc:a5:d6: 73:3e:21:7c:d2:48:d0:1e:2e:32:a8:e2:91:99:25:46:3d:b4: 62:a0:34:7b:4e:f0:f2:f5:b0:b9:61:0a:38:33:87:d5:d8:8a: d8:16:89:44:71:92:c3:ac:c3:f0:ab:7e:52:d1:5b:e2:ec:17: df:df:25:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPax1oaNOK17Pn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTkzOTZiNDQtNWJlOS00Y2JhLWIxOWMtMzgzMTQxOGU4NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6cpzgCSvIKy0hhbnr/KPx1nUZOZBTd6eiJR 0Xn5SBwHVSTsrEIjQjK/LNZRFm+R4Y3WLkvuQNKIWWhkwTUeaJNbrWMVzhT1n4XR Ut5g5CcYZAnVIb6zbQ/mz84/+8rkd2DpLKQ+nDFD8Zwo3yVvslhkZWUUkXxBEuhU jr3oSEOpR9+TBEPkSIZFrMaRSIvlkwBnI4lTIK9rQxJ3QWTUN1A3qOWtCDnKl7uw gI1CztM0OYsZbEwTmCdvaV8IqoumXjw8tDzK9Lpq7h9zArvzhqBP77DAG+eFXm71 8GN0QpyoLfwUnJrZmmOzA5RD3KUtMLG7j01ynpxQoT4eH81o6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7ojLckoJ3KghfvNMRgjmkhcajPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA0ODc3ZjgtY2EyYi0z OWIwLTk1YzMtOTVhMTFhM2M5MjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCzqD4I3zHpGotsoOxewoXai8BzHT3r7ujLMdazdbWDOI7JQbBS4SaH eo2QvJi7CWKT0Sc4ILdE7Sd3FmrlqH+/IegeegWM8xMLEnBwvAzb5xN9Geym+Rny n8lwhzG9vB3AuO4jS/yfaHhAtKuExRVmhxEs0y1QqEEa4CKUb4KFV69Lk5goZrs/ g5HPUm1RHE4JTQwwCZ9LUCO/1f85p9uJ9NMnOqtyXQGcj0W8bJXvSAzW7Y4rx0NF NoSN5mPBJy9Nevyl1nM+IXzSSNAeLjKo4pGZJUY9tGKgNHtO8PL1sLlhCjgzh9XY itgWiURxksOsw/CrflLRW+LsF9/fJfo= -----END CERTIFICATE-----Generated at Mon Sep 28 16:13:13 2026 by rpki-client