$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491428b9-829e-3245-93b9-d7e91070c389.roa File: 491428b9-829e-3245-93b9-d7e91070c389.roa (raw, json) Hash identifier: FTeM3AYKLCNw6WgzyM4aT8EwyUBhVnK3EtvIH9l/a4A= Subject key identifier: 42:58:96:D7:EF:1B:AF:7D:64:2D:68:BC:CF:77:7C:E2:BD:D3:A9:AA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBD71D1A93F4B2F3F2C40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491428b9-829e-3245-93b9-d7e91070c389.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.239.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bd:71:d1:a9:3f:4b:2f:3f:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=06b2d7a6-47e1-42ef-b90d-82a39b22d52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3e:fe:f4:be:50:72:2d:79:ee:af:9f:d4:1c: 86:48:47:5d:f8:81:ff:3f:ef:7b:58:30:0c:63:be: e7:8a:b0:5b:1d:d7:b4:8d:02:05:73:fd:b0:56:4b: 9a:f7:b1:54:f4:a0:a1:84:94:6d:00:7e:e9:c9:97: 6c:de:95:d0:40:6d:35:1b:e3:65:26:96:84:27:24: 56:ed:99:8a:aa:e2:b3:ed:c9:9a:bf:9c:99:b3:6d: 54:2a:76:5e:e7:63:37:70:60:3d:20:f9:a5:a0:e5: b0:8c:f1:aa:7b:df:39:52:06:42:81:b7:ca:42:ea: ad:1b:68:cc:a1:7a:c8:ae:a3:16:13:1d:3c:31:58: ff:ff:e0:5a:83:cf:9b:70:92:1f:8b:fc:bd:1d:48: bf:0d:f2:1c:5c:1e:01:2e:bc:56:60:01:81:4a:62: f8:a5:0e:58:99:46:8f:43:8a:27:1a:27:1d:2e:78: 95:77:d0:a0:57:a4:47:96:3b:ae:a2:17:9c:f4:09: 33:a8:85:41:89:2a:3b:5a:8f:bc:1f:98:78:cd:92: 79:5d:4b:82:9a:34:6a:ff:5a:e3:a1:d8:3f:16:b6: 5c:8f:17:b0:1c:46:ca:9a:10:af:12:87:ba:de:54: d0:31:36:92:86:24:85:90:0f:9b:15:d3:3a:33:9e: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:58:96:D7:EF:1B:AF:7D:64:2D:68:BC:CF:77:7C:E2:BD:D3:A9:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491428b9-829e-3245-93b9-d7e91070c389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9a:85:e8:b0:b7:aa:4f:3a:77:c9:fb:0d:ce:da:2d:f5:44: 29:b1:de:04:35:48:85:7a:65:58:37:c7:c1:66:85:31:73:1f: 3f:6a:b5:23:fc:33:4b:dd:78:a8:f2:68:98:00:9e:24:a1:53: b8:31:6e:e1:e7:2a:56:e9:56:bb:b5:a3:e5:fd:40:23:6a:2f: d6:0f:4e:ca:94:59:82:39:31:39:e7:99:3a:e5:12:e9:fd:6c: 34:4d:ad:2a:d8:68:cf:36:7b:24:82:c0:47:e5:4a:0a:bf:33: 9f:b2:cb:8d:a1:d1:5b:c3:6c:e1:d5:83:96:cb:3e:47:8a:1c: 5e:3d:79:07:bc:d6:f7:41:58:a2:11:ab:21:00:b1:e2:9f:ed: 39:b2:6e:48:cc:3e:4c:68:a4:47:60:12:05:36:72:2a:7b:4f: d5:e9:16:bb:0e:fc:3c:25:ec:41:3c:16:28:e2:4d:d9:2c:3e: 26:c1:e4:b6:27:54:fb:87:bf:88:db:cc:4f:12:48:a6:ca:80: 1a:59:90:a4:88:bc:71:63:3d:37:27:bd:1f:9b:7e:39:01:70: 79:a7:10:a5:df:5f:a8:ab:c9:3c:a0:8e:eb:ef:f5:45:b2:73: 9f:16:8c:27:47:07:fc:c9:04:98:d5:6f:dc:1a:b3:86:e2:2d: 7e:4e:d6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb1x0ak/Sy8/LEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDZiMmQ3YTYtNDdlMS00MmVmLWI5MGQtODJhMzliMjJkNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj7+9L5Qci157q+f1ByGSEdd+IH/P+97WDAM Y77nirBbHde0jQIFc/2wVkua97FU9KChhJRtAH7pyZds3pXQQG01G+NlJpaEJyRW 7ZmKquKz7cmav5yZs21UKnZe52M3cGA9IPmloOWwjPGqe985UgZCgbfKQuqtG2jM oXrIrqMWEx08MVj//+Bag8+bcJIfi/y9HUi/DfIcXB4BLrxWYAGBSmL4pQ5YmUaP Q4onGicdLniVd9CgV6RHljuuohec9AkzqIVBiSo7Wo+8H5h4zZJ5XUuCmjRq/1rj odg/FrZcjxewHEbKmhCvEoe63lTQMTaShiSFkA+bFdM6M56ARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJYltfvG699ZC1ovM93fOK906mqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDkxNDI4YjktODI5ZS0z MjQ1LTkzYjktZDdlOTEwNzBjMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuaheiwt6pPOnfJ+w3O2i31RCmx3gQ1SIV6ZVg3x8FmhTFzHz9qtSP8 M0vdeKjyaJgAniShU7gxbuHnKlbpVru1o+X9QCNqL9YPTsqUWYI5MTnnmTrlEun9 bDRNrSrYaM82eySCwEflSgq/M5+yy42h0VvDbOHVg5bLPkeKHF49eQe81vdBWKIR qyEAseKf7TmybkjMPkxopEdgEgU2cip7T9XpFrsO/Dwl7EE8FijiTdksPibB5LYn VPuHv4jbzE8SSKbKgBpZkKSIvHFjPTcnvR+bfjkBcHmnEKXfX6iryTygjuvv9UWy c58WjCdHB/zJBJjVb9was4biLX5O1rc= -----END CERTIFICATE-----Generated at Mon Sep 28 22:19:15 2026 by rpki-client