$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b254641-3da0-3772-a082-60261fe92f1a.roa File: 4b254641-3da0-3772-a082-60261fe92f1a.roa (raw, json) Hash identifier: KBKaTRkV7zme118Hbl6T1tBk1W+3G410YMY/duUvIQQ= Subject key identifier: E9:79:A4:5B:5F:93:C8:69:D9:28:C5:AA:B8:03:23:7D:65:F4:99:26 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD4AB0D6A05D19404B000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b254641-3da0-3772-a082-60261fe92f1a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.203.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d4:ab:0d:6a:05:d1:94:04:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bf420872-f7d4-4037-aec4-5dee420b4d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:82:51:a6:1e:ad:c8:ce:99:a4:df:91:a1: 3b:37:29:a2:e5:32:22:47:f5:60:03:c1:55:38:7f: cb:c0:cf:ee:8c:e8:ba:ad:78:36:26:81:20:1b:25: 2a:af:97:dd:91:e9:ec:e3:5f:24:9f:2b:84:08:dd: 8a:f1:f2:52:d1:e0:c5:0d:c9:14:c6:df:55:73:f3: fe:23:0b:64:18:42:a0:54:ba:7b:b1:a2:3a:93:9b: c5:06:00:0e:10:a8:00:5e:ee:f3:60:8f:9e:3e:2d: 25:f5:1b:1a:a5:a8:5e:72:1a:84:fc:bc:d3:a2:be: cd:54:b4:23:66:b3:03:02:7c:49:e9:3b:c2:47:b0: 57:90:06:38:e9:80:b8:d5:af:31:67:c4:93:fc:89: 03:ff:91:7c:85:9e:72:5a:28:08:5a:cd:93:fd:bd: d6:14:ab:ca:15:69:51:2e:9a:e8:aa:d1:d9:e5:9b: f1:c2:05:a6:3c:c8:be:4c:77:0e:e3:b8:d7:40:20: e7:96:fc:ce:1c:09:d5:7f:85:da:98:16:17:91:96: 71:8a:70:0e:95:85:69:94:83:3b:be:49:91:15:4b: a3:1e:57:db:d1:0c:e4:46:93:0c:0e:31:45:9e:64: c7:fa:ef:23:e2:c1:d2:e0:7e:0c:89:35:fc:66:b3: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:79:A4:5B:5F:93:C8:69:D9:28:C5:AA:B8:03:23:7D:65:F4:99:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b254641-3da0-3772-a082-60261fe92f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:90:8c:2e:76:6e:37:48:af:da:5d:76:0e:b2:45:b9:e3:c3: 03:05:60:0c:e7:93:82:7f:e8:4e:b2:0b:00:b6:c1:8c:42:64: d3:de:0c:c9:b9:62:c6:a2:20:7e:72:09:06:c6:e1:e8:00:9f: 55:93:14:e0:8e:0b:7e:f6:45:96:65:7e:8e:ec:4a:69:00:4b: b7:81:68:50:ae:b7:f6:fe:26:ab:07:b5:8a:66:01:e8:80:d1: 5a:28:4c:ee:ee:fd:55:51:d5:13:8c:f7:d2:da:1e:17:13:7d: f1:1d:05:c5:b7:e9:14:53:91:28:4e:32:70:f1:c9:54:c1:fa: 7a:b2:c6:e2:39:fb:56:6e:1d:0b:83:40:60:82:01:3b:44:e8: e2:43:47:2b:06:95:51:b5:2f:b2:6a:5e:0c:11:e0:0c:07:91: 1b:55:4f:39:63:4f:09:92:1c:78:01:f2:e1:ae:4c:41:e5:65: c2:a2:a0:92:e1:8e:b6:ae:50:bc:94:f8:fb:fe:89:eb:40:83: e6:62:02:f9:01:35:68:9e:c0:0d:1a:0c:13:7d:7f:b7:97:43: ec:e1:15:b8:81:7e:58:6d:45:c7:1b:4e:03:8f:98:f2:34:9b: a6:e3:f9:83:d9:a0:f7:76:d7:93:33:5c:c3:4b:31:64:6b:5e: a3:5c:df:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdSrDWoF0ZQEsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmY0MjA4NzItZjdkNC00MDM3LWFlYzQtNWRlZTQyMGI0ZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cKCUaYercjOmaTfkaE7Nymi5TIiR/VgA8FV OH/LwM/ujOi6rXg2JoEgGyUqr5fdkens418knyuECN2K8fJS0eDFDckUxt9Vc/P+ IwtkGEKgVLp7saI6k5vFBgAOEKgAXu7zYI+ePi0l9RsapahechqE/LzTor7NVLQj ZrMDAnxJ6TvCR7BXkAY46YC41a8xZ8ST/IkD/5F8hZ5yWigIWs2T/b3WFKvKFWlR LproqtHZ5ZvxwgWmPMi+THcO47jXQCDnlvzOHAnVf4XamBYXkZZxinAOlYVplIM7 vkmRFUujHlfb0QzkRpMMDjFFnmTH+u8j4sHS4H4MiTX8ZrNtDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl5pFtfk8hp2SjFqrgDI31l9JkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGIyNTQ2NDEtM2RhMC0z NzcyLWEwODItNjAyNjFmZTkyZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI8voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmQjC52bjdIr9pddg6yRbnjwwMFYAznk4J/6E6yCwC2wYxCZNPeDMm5 YsaiIH5yCQbG4egAn1WTFOCOC372RZZlfo7sSmkAS7eBaFCut/b+JqsHtYpmAeiA 0VooTO7u/VVR1ROM99LaHhcTffEdBcW36RRTkShOMnDxyVTB+nqyxuI5+1ZuHQuD QGCCATtE6OJDRysGlVG1L7JqXgwR4AwHkRtVTzljTwmSHHgB8uGuTEHlZcKioJLh jrauULyU+Pv+ietAg+ZiAvkBNWiewA0aDBN9f7eXQ+zhFbiBflhtRccbTgOPmPI0 m6bj+YPZoPd215MzXMNLMWRrXqNc3yw= -----END CERTIFICATE-----Generated at Sun Oct 4 12:19:21 2026 by rpki-client