$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa File: 436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa (raw, json) Hash identifier: 8rYMIBJpZrVX0GmTyAVd7ZT/c5+HrcqhGItQNtWP8/A= Subject key identifier: B9:A0:89:1D:54:97:CA:B6:60:AB:06:8A:7B:25:F9:30:59:0D:B0:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D804258F39393CE1B1B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.187.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:80:42:58:f3:93:93:ce:1b:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=897e3bde-c61f-4e3f-ac1e-1dcabf79b45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:8d:e2:19:18:84:d4:90:37:f0:11:df:75: 8d:6e:7f:93:1f:fd:c3:5b:31:fb:4b:4a:c7:4f:03: 2f:8b:7a:24:eb:9d:dd:67:74:88:c2:46:77:51:18: 18:8e:12:fb:7e:f9:e5:59:b8:fa:f6:e2:c6:33:10: 08:79:f8:59:b0:81:5c:a9:0e:77:ac:44:24:9f:f0: e8:02:7c:f5:34:3e:45:c7:41:49:2a:1d:42:24:50: 5f:b0:4f:4f:4a:f1:05:7d:3c:92:15:64:53:1e:03: 53:e4:f0:33:35:9e:bd:6c:90:00:c2:9a:32:e1:6f: 94:68:11:4f:ad:04:69:55:4b:ef:62:a8:f0:49:49: b2:20:d2:b9:ea:74:33:64:15:3f:ea:ce:14:58:ae: 29:40:c7:89:69:b8:a2:3a:08:ad:02:02:59:af:1c: 7b:ea:d4:dd:f3:bb:74:11:4b:96:dc:57:95:b4:e9: c1:cf:7b:63:b4:f9:52:57:4f:0e:e6:ad:37:b2:e8: 12:26:16:56:8f:a2:57:8e:fd:16:db:76:cf:80:fb: fd:77:2f:29:ff:ab:96:ff:c6:64:d9:dc:cb:8d:da: 11:a4:d2:3c:ba:5e:9a:10:cc:99:1c:1f:95:58:ea: 0f:26:60:b7:1f:3c:e8:ac:e1:7b:aa:90:42:78:35: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A0:89:1D:54:97:CA:B6:60:AB:06:8A:7B:25:F9:30:59:0D:B0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5e:cf:23:aa:19:d0:e0:1e:ab:9f:2a:c3:74:9e:09:32:e5: 0d:d1:48:df:4a:8e:1d:b9:38:21:7a:44:fc:d6:50:5e:3e:ad: a8:e1:29:c4:8a:61:e7:97:b7:42:ef:6c:a6:a6:c1:84:1f:07: 36:c3:d0:2e:71:c0:8e:87:fd:12:c0:92:14:e4:65:d3:b5:54: 41:c7:e0:e5:7a:09:76:a6:6e:0d:df:6d:03:4d:05:91:e1:5d: b1:6a:e1:20:73:4e:73:de:35:4e:6d:12:68:0e:51:c4:f3:8c: 42:4a:2f:96:71:45:2a:44:c9:92:fe:bf:57:b3:5d:9f:da:1d: 4b:36:be:00:1f:80:2f:53:5e:99:13:91:69:e3:ae:f7:3b:fe: a2:d3:23:15:1e:86:43:6d:77:38:3b:00:11:64:52:21:5f:2d: 22:6d:a6:67:14:66:83:e0:99:70:04:3e:7a:cb:80:9c:68:e4: 31:af:77:0d:5a:e7:e0:8b:40:73:e3:c2:65:7c:2d:8c:5d:e8: 19:e6:6e:14:8e:91:a9:3f:c7:3c:b8:13:d5:eb:1a:32:a7:8f: 4b:f0:78:95:f9:b5:f8:6e:e1:6c:64:8f:ed:50:74:3d:6b:86: dc:63:16:7e:69:e6:49:c8:5b:2f:07:2a:3d:a8:8d:4d:df:f5: c5:fb:b9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYBCWPOTk84bG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODk3ZTNiZGUtYzYxZi00ZTNmLWFjMWUtMWRjYWJmNzliNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRyN4hkYhNSQN/AR33WNbn+TH/3DWzH7S0rH TwMvi3ok653dZ3SIwkZ3URgYjhL7fvnlWbj69uLGMxAIefhZsIFcqQ53rEQkn/Do Anz1ND5Fx0FJKh1CJFBfsE9PSvEFfTySFWRTHgNT5PAzNZ69bJAAwpoy4W+UaBFP rQRpVUvvYqjwSUmyINK56nQzZBU/6s4UWK4pQMeJabiiOgitAgJZrxx76tTd87t0 EUuW3FeVtOnBz3tjtPlSV08O5q03sugSJhZWj6JXjv0W23bPgPv9dy8p/6uW/8Zk 2dzLjdoRpNI8ul6aEMyZHB+VWOoPJmC3HzzorOF7qpBCeDUvpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmgiR1Ul8q2YKsGinsl+TBZDbAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM2YTkwYmMtMGYyZi0z ZDRhLWI3NWItYzcyZjExNzVkZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFezyOqGdDgHqufKsN0ngky5Q3RSN9Kjh25OCF6RPzWUF4+rajhKcSK YeeXt0LvbKamwYQfBzbD0C5xwI6H/RLAkhTkZdO1VEHH4OV6CXambg3fbQNNBZHh XbFq4SBzTnPeNU5tEmgOUcTzjEJKL5ZxRSpEyZL+v1ezXZ/aHUs2vgAfgC9TXpkT kWnjrvc7/qLTIxUehkNtdzg7ABFkUiFfLSJtpmcUZoPgmXAEPnrLgJxo5DGvdw1a 5+CLQHPjwmV8LYxd6BnmbhSOkak/xzy4E9XrGjKnj0vweJX5tfhu4Wxkj+1QdD1r htxjFn5p5knIWy8HKj2ojU3f9cX7uR0= -----END CERTIFICATE-----Generated at Mon Sep 28 20:13:19 2026 by rpki-client