$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5042ece7-39b2-342d-9dde-41375fc87ca4.roa File: 5042ece7-39b2-342d-9dde-41375fc87ca4.roa (raw, json) Hash identifier: vUFOX50D7UKQ2SDmkp3/Yxp1L4m4qM9pE3GphkYFI3Y= Subject key identifier: A3:10:A9:68:9D:7E:BD:7A:E8:9E:2B:B9:3C:78:7F:90:D8:AE:BE:A0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA342BDE303DA8C49B100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5042ece7-39b2-342d-9dde-41375fc87ca4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.236.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a3:42:bd:e3:03:da:8c:49:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=215ecb4d-ca3c-4afa-9aea-8a2851a5a98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:41:30:44:d0:2d:a6:7d:c6:28:5c:9f:8d: 4d:ac:29:b2:71:8e:14:5a:e6:26:ca:fc:5b:e8:63: 8b:27:35:42:02:1f:52:ab:1c:9a:20:82:4a:2e:38: 69:ab:36:14:2f:b3:30:ac:ad:32:1f:6c:a2:9a:0a: ae:5b:08:d3:8f:fb:d1:4f:ff:37:0f:7b:ab:0f:1a: 9e:68:d5:94:a1:13:25:92:4d:17:ad:46:b7:a9:41: f8:66:96:ea:a8:e8:e8:5a:bc:b4:5f:5c:cc:4c:92: b0:64:af:00:34:4e:33:0a:a1:d8:92:2e:a8:15:a3: 52:dc:63:0f:86:04:5c:0a:05:50:ee:da:5a:3d:8e: d3:f6:81:86:ca:b4:95:d4:76:92:cc:ca:1d:1e:07: f0:d9:c1:a4:54:c9:3c:20:fe:77:f7:b4:ed:07:28: 81:6b:da:b1:e6:10:f2:af:68:a2:bd:1e:b7:6a:08: fc:f4:09:df:39:39:18:2b:c2:4b:ba:31:b4:46:63: 95:b2:ed:b4:14:97:05:80:d2:cc:b7:82:88:22:b8: d9:ff:a5:bd:54:ed:5f:e8:cb:3e:38:9e:7e:9f:d3: a8:f6:c1:c4:ce:26:e1:0b:38:43:69:23:7e:2a:cf: 75:bc:0f:ae:3b:d0:2f:3f:51:3c:73:ab:b5:62:45: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:A9:68:9D:7E:BD:7A:E8:9E:2B:B9:3C:78:7F:90:D8:AE:BE:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5042ece7-39b2-342d-9dde-41375fc87ca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:03:b9:bc:45:b3:4c:44:98:ec:78:13:ae:f0:74:29:5d:f3: 9d:71:0f:53:5e:90:e8:09:aa:48:9e:dd:3e:10:21:20:42:5a: 9c:d3:a6:a2:74:25:94:70:7b:ee:5d:6a:31:91:d7:64:2b:0b: 9b:2f:29:1a:c0:a3:e4:ad:a1:0e:0a:72:26:e4:4a:aa:a1:34: 06:99:98:71:52:94:90:d7:fc:cc:5d:e2:ea:1d:0f:a7:44:19: 53:c3:09:05:b6:ba:51:b8:64:78:b7:28:03:ed:65:98:fe:e2: 97:16:fd:56:90:fb:a3:73:71:ee:82:ce:0a:a6:f9:fc:22:4f: 9b:62:c6:0b:92:e3:9d:bd:a4:f8:2e:c9:be:d1:fc:4b:28:ab: 84:2b:77:e8:69:0e:ed:a6:07:ec:59:f1:c1:9f:ab:f0:ab:dd: 3b:1b:10:bf:4b:cc:33:f0:77:b0:71:19:cd:96:e6:44:75:ed: 82:7f:c6:71:9c:e4:30:fc:72:d5:6b:e1:98:5e:eb:dd:9a:a2: 70:0c:ef:fc:4c:93:de:ee:65:97:cd:c4:d2:57:52:82:7d:e7: 3f:b3:85:d9:38:8f:e5:1e:a5:f7:7e:4a:da:f3:90:72:e6:95: b1:17:5e:85:36:e3:41:c9:0b:09:77:3f:32:1b:8c:89:78:0d: d3:6f:c0:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaNCveMD2oxJsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjE1ZWNiNGQtY2EzYy00YWZhLTlhZWEtOGEyODUxYTVhOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL9BMETQLaZ9xihcn41NrCmycY4UWuYmyvxb 6GOLJzVCAh9SqxyaIIJKLjhpqzYUL7MwrK0yH2yimgquWwjTj/vRT/83D3urDxqe aNWUoRMlkk0XrUa3qUH4ZpbqqOjoWry0X1zMTJKwZK8ANE4zCqHYki6oFaNS3GMP hgRcCgVQ7tpaPY7T9oGGyrSV1HaSzModHgfw2cGkVMk8IP5397TtByiBa9qx5hDy r2iivR63agj89AnfOTkYK8JLujG0RmOVsu20FJcFgNLMt4KIIrjZ/6W9VO1f6Ms+ OJ5+n9Oo9sHEzibhCzhDaSN+Ks91vA+uO9AvP1E8c6u1YkUoFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMQqWidfr166J4ruTx4f5DYrr6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTA0MmVjZTctMzliMi0z NDJkLTlkZGUtNDEzNzVmYzg3Y2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoDubxFs0xEmOx4E67wdCld851xD1NekOgJqkie3T4QISBCWpzTpqJ0 JZRwe+5dajGR12QrC5svKRrAo+StoQ4KcibkSqqhNAaZmHFSlJDX/Mxd4uodD6dE GVPDCQW2ulG4ZHi3KAPtZZj+4pcW/VaQ+6Nzce6Czgqm+fwiT5tixguS4529pPgu yb7R/Esoq4Qrd+hpDu2mB+xZ8cGfq/Cr3TsbEL9LzDPwd7BxGc2W5kR17YJ/xnGc 5DD8ctVr4Zhe692aonAM7/xMk97uZZfNxNJXUoJ95z+zhdk4j+Uepfd+StrzkHLm lbEXXoU240HJCwl3PzIbjIl4DdNvwE4= -----END CERTIFICATE-----Generated at Mon Sep 28 21:33:14 2026 by rpki-client