$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4418d335-6092-39e6-9344-00caca48016a.roa File: 4418d335-6092-39e6-9344-00caca48016a.roa (raw, json) Hash identifier: f1gQFcqALRv59MhA6RPBJ8a3DcXZfR0/kT2aTEVdHyk= Subject key identifier: 5A:F2:A1:82:7F:20:07:AD:37:42:30:90:9F:43:60:A8:C0:10:44:9D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC3B80F23F7CE6A6F2040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4418d335-6092-39e6-9344-00caca48016a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19527 IP address blocks: 35.206.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c3:b8:0f:23:f7:ce:6a:6f:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e24211e2-9fe3-43f3-82a0-b9e4805f00e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:4f:a5:54:ae:2b:5a:3d:1e:04:11:bd:0a: 67:6f:04:7b:ed:bc:12:2e:fa:62:d4:18:36:8c:0c: 61:58:45:fe:ca:b1:61:cb:3d:43:d5:39:28:80:c5: 44:4e:b7:b5:9c:db:0f:71:8d:3e:6b:34:49:50:2f: 27:29:79:b0:fe:ee:b9:26:e8:1b:ca:da:e1:ba:cd: 22:05:0c:d7:be:0f:14:61:f1:43:bd:6b:48:8e:05: 0f:86:5a:49:05:d5:ad:6b:af:44:e0:64:11:b1:b2: 8b:7d:f1:2f:a1:c5:c7:ab:35:3e:f2:a8:05:1a:31: 6a:48:2d:0c:91:c8:88:85:d0:5a:ac:65:5f:7d:61: 36:4c:0e:18:b9:48:5d:70:5f:08:56:d5:6e:bb:2d: 1f:fa:63:e9:b6:12:68:85:cc:ba:23:cc:58:41:6f: 85:bc:3f:8a:4e:ae:c9:9a:4c:59:90:7a:fe:c2:b4: d7:39:7a:82:af:92:86:0b:d6:4e:e2:95:d7:1f:c2: 34:5d:f6:75:48:17:6c:de:0c:3e:10:d6:ba:3d:57: 80:4f:e4:ec:bf:1c:37:1b:96:f8:27:b1:32:c2:08: 59:7f:0f:4b:5d:ee:56:27:c8:a3:60:4e:17:bd:e0: ba:ee:b0:75:b9:34:1e:39:e7:75:c1:fd:2c:3f:1f: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F2:A1:82:7F:20:07:AD:37:42:30:90:9F:43:60:A8:C0:10:44:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4418d335-6092-39e6-9344-00caca48016a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e7:f4:3f:ca:c2:55:c9:2c:df:f0:6a:b9:f8:47:65:22:c8: c5:ce:c3:6b:b7:5c:f3:5d:32:ee:cf:c4:02:82:1b:70:f8:a6: 24:0d:4a:23:00:7b:65:16:78:9c:ec:ae:7d:9e:e9:cc:85:59: 9d:c9:53:9d:1e:36:91:ca:9f:8c:52:06:0f:36:6c:4b:a9:e0: 03:b5:4a:0e:38:30:aa:06:10:b0:bb:a6:96:ad:82:96:09:d1: bc:69:6c:9b:ea:e3:94:65:03:3f:08:e4:cd:ab:c3:a7:16:50: 1f:96:10:d2:c5:c5:e9:b8:ed:eb:16:4f:9c:50:51:f6:39:87: 07:c6:88:90:98:c4:7f:c7:92:84:3d:05:12:75:c6:ee:79:51: 40:d5:b1:db:ae:ad:82:05:21:ed:32:1a:c9:09:02:7f:ee:86: 46:77:20:20:3b:2e:35:d2:f8:ac:8c:16:d7:8e:bf:fd:a3:0c: 10:0e:b0:e3:23:7e:ad:7e:90:19:88:73:43:ce:1c:c6:6e:6e: b2:2d:b2:b1:21:eb:7d:79:23:2d:57:0b:31:45:c5:2c:d1:27: cf:60:8e:71:94:d2:11:6e:a2:18:98:86:0b:71:8f:c3:5f:99: cd:21:d2:28:0c:dd:14:5d:34:ac:9d:61:47:d1:09:76:02:f9: 69:1d:7a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcO4DyP3zmpvIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTI0MjExZTItOWZlMy00M2YzLTgyYTAtYjllNDgwNWYwMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjFPpVSuK1o9HgQRvQpnbwR77bwSLvpi1Bg2 jAxhWEX+yrFhyz1D1TkogMVETre1nNsPcY0+azRJUC8nKXmw/u65Jugbytrhus0i BQzXvg8UYfFDvWtIjgUPhlpJBdWta69E4GQRsbKLffEvocXHqzU+8qgFGjFqSC0M kciIhdBarGVffWE2TA4YuUhdcF8IVtVuuy0f+mPpthJohcy6I8xYQW+FvD+KTq7J mkxZkHr+wrTXOXqCr5KGC9ZO4pXXH8I0XfZ1SBds3gw+ENa6PVeAT+Tsvxw3G5b4 J7EywghZfw9LXe5WJ8ijYE4XveC67rB1uTQeOed1wf0sPx9xnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFryoYJ/IAetN0IwkJ9DYKjAEESdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDQxOGQzMzUtNjA5Mi0z OWU2LTkzNDQtMDBjYWNhNDgwMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELn9D/KwlXJLN/warn4R2UiyMXOw2u3XPNdMu7PxAKCG3D4piQNSiMA e2UWeJzsrn2e6cyFWZ3JU50eNpHKn4xSBg82bEup4AO1Sg44MKoGELC7ppatgpYJ 0bxpbJvq45RlAz8I5M2rw6cWUB+WENLFxem47esWT5xQUfY5hwfGiJCYxH/HkoQ9 BRJ1xu55UUDVsduurYIFIe0yGskJAn/uhkZ3ICA7LjXS+KyMFteOv/2jDBAOsOMj fq1+kBmIc0POHMZubrItsrEh6315Iy1XCzFFxSzRJ89gjnGU0hFuohiYhgtxj8Nf mc0h0igM3RRdNKydYUfRCXYC+Wkdegk= -----END CERTIFICATE-----Generated at Sat Oct 3 11:00:51 2026 by rpki-client