$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa File: 42e27d57-82e5-3480-beac-4835f1b4b65a.roa (raw, json) Hash identifier: TixAtsDq7tel/oQbLLI21i3AoUrt+72ElrJzNKEavMc= Subject key identifier: 2D:FD:3F:B2:F1:9A:69:F2:FF:82:06:CF:9C:3B:78:DE:73:F4:3F:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAEE84C583C66FD4B3700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.243.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ae:e8:4c:58:3c:66:fd:4b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8a07bef9-2947-440c-bb40-b4db567f65e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:52:83:18:cc:5a:bc:9a:3f:c8:43:b1:ba:6d: 9f:8f:07:1a:78:36:a6:b5:48:6d:24:73:13:d9:1a: 4e:4b:2d:34:23:1b:94:85:da:1c:0b:bf:f9:b9:f5: 6b:69:7e:27:2c:01:63:da:ce:40:fe:5b:56:4e:a8: df:95:15:eb:af:d6:a0:e7:1c:b6:e5:8c:c1:e9:c1: 9e:53:40:16:59:7f:bd:a9:6e:9e:f5:99:db:db:73: 3a:ba:3f:1e:7b:7a:0f:34:06:d7:26:ca:2d:68:07: 19:f8:2e:a9:65:21:e2:9f:64:5e:39:7b:d7:23:c0: 56:ec:d6:24:e2:8b:06:a2:34:5f:9a:ba:cf:46:7b: a1:0d:78:d1:3e:e9:4f:90:ca:70:4a:f6:7a:57:d4: 43:b0:86:ed:a1:4a:69:26:82:70:5d:37:9b:37:61: 67:68:00:e1:30:c1:39:62:6b:5c:c8:7c:bf:56:aa: 36:98:3d:7f:38:bb:c0:fe:1a:82:79:c5:32:77:88: 0a:7d:cc:d4:0d:94:32:5e:69:64:49:72:c7:45:09: 95:a5:00:ee:a1:a6:bc:2d:66:0d:4f:33:56:58:9f: c4:5c:13:f5:de:c1:1b:57:b4:86:5d:5e:f0:7c:ab: e1:86:92:de:29:05:3a:90:22:98:d2:ce:e7:48:28: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FD:3F:B2:F1:9A:69:F2:FF:82:06:CF:9C:3B:78:DE:73:F4:3F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42e27d57-82e5-3480-beac-4835f1b4b65a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e6:67:3d:5b:e2:90:1e:f4:70:d1:2f:c3:b9:ff:a6:56:ba: 38:04:40:1d:0e:bc:17:9a:3b:e8:2d:88:cc:c3:cd:57:23:0d: d9:80:6b:8c:62:7d:75:b8:42:1c:93:54:64:db:68:12:bb:28: 89:95:40:e8:f0:03:c4:ac:d6:00:a6:2b:8b:8d:b2:ac:f4:37: 17:5a:4e:a6:ac:5c:64:4a:1b:c2:cb:9a:eb:3f:01:fa:66:75: 6a:96:7d:e4:36:40:3e:aa:f0:1b:9e:c6:1d:52:80:4c:67:7c: e1:ea:9b:c1:59:fe:b1:0b:c1:50:9e:f7:ac:37:94:f7:10:e8: 02:15:91:a2:ad:13:00:03:85:de:f8:28:3e:5c:6d:c9:29:b8: 0e:c7:fb:fa:66:90:31:65:cd:14:30:ad:be:a9:36:e4:49:6d: 47:35:90:f8:59:ae:2b:ac:31:fd:1f:42:f2:19:bf:1b:b0:36: 41:2c:8f:61:87:82:c2:93:03:7a:0f:1d:ab:6d:90:08:19:df: ea:70:fe:f7:1e:63:ff:ff:ac:21:d5:f9:53:a9:23:c6:6d:a8: 19:94:61:6d:86:ee:a3:9a:8f:6d:62:f4:0f:0c:30:33:dc:c7: 7b:4a:a6:32:d1:67:4a:82:05:51:31:5e:e6:a8:ce:b7:64:5f: cf:88:29:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPa7oTFg8Zv1LNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGEwN2JlZjktMjk0Ny00NDBjLWJiNDAtYjRkYjU2N2Y2NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1KDGMxavJo/yEOxum2fjwcaeDamtUhtJHMT 2RpOSy00IxuUhdocC7/5ufVraX4nLAFj2s5A/ltWTqjflRXrr9ag5xy25YzB6cGe U0AWWX+9qW6e9Znb23M6uj8ee3oPNAbXJsotaAcZ+C6pZSHin2ReOXvXI8BW7NYk 4osGojRfmrrPRnuhDXjRPulPkMpwSvZ6V9RDsIbtoUppJoJwXTebN2FnaADhMME5 YmtcyHy/Vqo2mD1/OLvA/hqCecUyd4gKfczUDZQyXmlkSXLHRQmVpQDuoaa8LWYN TzNWWJ/EXBP13sEbV7SGXV7wfKvhhpLeKQU6kCKY0s7nSCiTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC39P7Lxmmny/4IGz5w7eN5z9D/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDJlMjdkNTctODJlNS0z NDgwLWJlYWMtNDgzNWYxYjRiNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATmZz1b4pAe9HDRL8O5/6ZWujgEQB0OvBeaO+gtiMzDzVcjDdmAa4xi fXW4QhyTVGTbaBK7KImVQOjwA8Ss1gCmK4uNsqz0NxdaTqasXGRKG8LLmus/Afpm dWqWfeQ2QD6q8Buexh1SgExnfOHqm8FZ/rELwVCe96w3lPcQ6AIVkaKtEwADhd74 KD5cbckpuA7H+/pmkDFlzRQwrb6pNuRJbUc1kPhZriusMf0fQvIZvxuwNkEsj2GH gsKTA3oPHattkAgZ3+pw/vceY///rCHV+VOpI8ZtqBmUYW2G7qOaj21i9A8MMDPc x3tKpjLRZ0qCBVExXuaozrdkX8+IKX0= -----END CERTIFICATE-----Generated at Wed Sep 30 02:43:58 2026 by rpki-client