$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa File: 491d92ac-1ea7-36bc-9147-49134bad70d4.roa (raw, json) Hash identifier: Z5Ny8nsv8t/JV8G/5xLILMWZPbW5fU364qnPWmBTypM= Subject key identifier: F8:CA:36:84:F7:9F:1B:F0:57:DB:D5:11:1A:78:83:79:B9:5B:B4:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8D6DAC0AC15D37912080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.238.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8d:6d:ac:0a:c1:5d:37:91:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0fdde117-8eb1-4df5-9af0-2baac9a09a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:22:9c:47:3d:9f:17:8e:c0:3d:8b:3d:09: 1d:59:52:8e:4a:b5:28:81:77:ed:85:f5:37:00:30: 09:89:54:f0:ea:01:bb:89:a5:73:60:e0:22:a8:62: 39:bd:ec:af:2e:03:bf:87:0a:d8:a2:af:d0:fd:b1: 7f:e2:03:91:b9:34:45:79:ec:39:8f:1e:a9:55:ff: 66:1f:0d:81:e1:5f:74:0f:54:8e:3a:fc:e3:9c:b4: b7:12:be:a6:b2:d7:ce:be:cc:49:f9:11:95:b1:ec: 86:aa:2f:09:97:6a:ae:7c:92:b3:b7:90:12:e2:89: fb:ed:2c:6a:cf:27:2c:82:7e:69:72:d8:4e:d5:3d: d3:6a:4c:0e:7e:04:d7:d9:f2:6d:41:df:b3:a5:a8: 42:e0:df:4d:f3:9d:c0:2f:05:e6:3c:a7:75:37:bc: 7d:37:b6:4a:6f:65:84:33:f1:fe:9e:c3:c7:07:e8: a2:51:d7:eb:bd:e9:28:1e:d8:93:01:b4:6d:c5:a9: a6:08:df:f9:5f:5a:26:2f:b4:70:ba:5d:7f:25:08: fc:96:cc:f0:a9:db:e2:ef:70:20:83:70:75:0b:19: 64:29:89:8d:8c:ac:4d:e9:0a:1d:5b:26:84:14:cd: ec:90:04:d4:49:ba:4f:1d:93:94:cf:0c:da:7c:24: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:36:84:F7:9F:1B:F0:57:DB:D5:11:1A:78:83:79:B9:5B:B4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f2:be:9d:f4:38:ef:b7:14:e9:89:fd:a4:74:8d:36:1d:41: 34:aa:19:fa:a7:fc:b5:e2:df:32:7b:e4:69:6f:48:20:35:1e: 46:2f:66:b1:c1:93:f2:26:e8:41:3b:3c:32:5c:03:4b:e0:f4: a2:9f:f2:a4:ca:04:73:10:86:bf:a9:c8:51:4e:5a:a3:f9:98: 82:d1:5b:0a:c6:d1:74:15:c4:aa:6a:f1:76:58:c5:5c:4b:9d: 25:e5:28:d3:e9:7d:60:e0:7b:38:3c:79:4a:d4:36:3e:de:f3: 2d:2c:2e:46:46:a6:23:4f:d5:16:08:dd:ce:12:82:d4:7f:ee: c8:1f:a6:30:7e:76:1e:39:01:d3:e9:74:46:de:ab:36:d8:07: ff:06:de:cc:ec:66:ca:4c:02:f8:8e:d3:11:8b:d6:8b:ef:2e: a2:05:54:ea:98:42:71:2d:dd:51:e4:c5:46:37:fb:10:5d:9f: 62:f1:90:2c:23:31:84:6a:73:03:6e:07:62:4d:84:2c:d8:6e: 65:9f:55:6b:e7:80:08:f1:3c:e5:b0:c4:00:d7:8d:77:99:cc: b7:ee:4f:8f:e5:8e:ff:77:85:98:b5:91:7d:78:35:e0:90:d5: 31:48:bf:1a:28:83:14:eb:d2:4f:36:30:06:ea:9e:03:a2:cb: d6:2d:b4:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY1trArBXTeRIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGZkZGUxMTctOGViMS00ZGY1LTlhZjAtMmJhYWM5YTA5YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTcinEc9nxeOwD2LPQkdWVKOSrUogXfthfU3 ADAJiVTw6gG7iaVzYOAiqGI5veyvLgO/hwrYoq/Q/bF/4gORuTRFeew5jx6pVf9m Hw2B4V90D1SOOvzjnLS3Er6mstfOvsxJ+RGVseyGqi8Jl2qufJKzt5AS4on77Sxq zycsgn5pcthO1T3TakwOfgTX2fJtQd+zpahC4N9N853ALwXmPKd1N7x9N7ZKb2WE M/H+nsPHB+iiUdfrvekoHtiTAbRtxammCN/5X1omL7Rwul1/JQj8lszwqdvi73Ag g3B1CxlkKYmNjKxN6QodWyaEFM3skATUSbpPHZOUzwzafCTJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjKNoT3nxvwV9vVERp4g3m5W7RQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDkxZDkyYWMtMWVhNy0z NmJjLTkxNDctNDkxMzRiYWQ3MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPyvp30OO+3FOmJ/aR0jTYdQTSqGfqn/LXi3zJ75GlvSCA1HkYvZrHB k/Im6EE7PDJcA0vg9KKf8qTKBHMQhr+pyFFOWqP5mILRWwrG0XQVxKpq8XZYxVxL nSXlKNPpfWDgezg8eUrUNj7e8y0sLkZGpiNP1RYI3c4SgtR/7sgfpjB+dh45AdPp dEbeqzbYB/8G3szsZspMAviO0xGL1ovvLqIFVOqYQnEt3VHkxUY3+xBdn2LxkCwj MYRqcwNuB2JNhCzYbmWfVWvngAjxPOWwxADXjXeZzLfuT4/ljv93hZi1kX14NeCQ 1TFIvxoogxTr0k82MAbqngOiy9YttJY= -----END CERTIFICATE-----Generated at Thu Oct 8 12:27:21 2026 by rpki-client