$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/57341d25-e87a-3066-8208-eb0bc1ac3cd3.roa File: 57341d25-e87a-3066-8208-eb0bc1ac3cd3.roa (raw, json) Hash identifier: 3rpapyGRvSqijZNsEHklxJwPVdvd3KGmks6MCCjByrM= Subject key identifier: 5D:9B:4D:F7:70:23:73:4C:0E:10:A0:B1:D3:79:AB:CA:5B:49:F3:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DABE08CBB647CD1D74F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/57341d25-e87a-3066-8208-eb0bc1ac3cd3.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.243.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ab:e0:8c:bb:64:7c:d1:d7:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6b1c16cc-1ef7-4d7e-b182-c50036d8ecf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:09:63:f7:70:35:0a:6c:17:cc:6f:9e:c1: 40:4b:5f:d6:6f:c4:e3:7f:1f:9e:49:c9:a7:b3:e1: 1a:4b:70:c4:03:14:73:a2:05:5c:60:f9:64:f9:4d: bb:f3:97:5f:b8:17:d5:49:91:45:2b:bf:43:56:9c: de:15:6f:66:5a:ec:6c:5a:5a:e6:37:43:51:18:48: 59:5b:5d:92:8e:30:60:b4:1e:0f:de:91:97:d4:5a: d7:dc:42:48:af:e0:65:8e:ec:ed:83:e6:e7:98:15: de:31:6f:09:f7:47:c7:3c:51:86:46:11:1e:90:92: 5b:32:77:29:5c:21:9e:ef:5c:59:7f:e2:90:b1:50: 69:86:f4:b9:e2:2a:39:be:de:96:3e:b2:70:b4:c6: db:20:ed:fc:9f:7b:76:8b:d3:14:3f:59:44:16:a0: 3c:07:01:da:35:51:4c:9c:91:92:14:c4:35:b5:e9: 34:da:28:c1:9f:cf:8d:62:26:3b:72:d7:c2:8a:7d: b8:e1:b5:9f:47:0b:7c:36:ec:e3:41:12:f5:49:64: e4:be:19:64:af:f9:32:58:d0:d2:04:14:ec:0f:09: 01:7b:5a:af:12:1f:37:cb:43:f0:a9:c3:00:74:bb: 5e:a8:e3:5b:1b:e0:c7:7f:d1:48:87:e8:08:60:4c: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9B:4D:F7:70:23:73:4C:0E:10:A0:B1:D3:79:AB:CA:5B:49:F3:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/57341d25-e87a-3066-8208-eb0bc1ac3cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:27:45:87:83:96:e8:40:02:6e:a3:65:4e:7c:65:24:c2:0f: 08:bb:55:6d:e6:96:3d:3a:bf:f8:35:2f:29:f3:dd:4d:47:7e: bd:72:07:30:ea:c6:37:a3:8a:9b:be:86:f7:8f:ed:9c:c6:a8: e4:a4:f4:52:0b:27:73:7d:6a:8c:c3:88:c0:e5:1f:0e:c4:87: 1f:25:b7:70:81:46:85:a7:88:7e:4b:ac:f7:74:ae:60:f9:3f: fe:b0:28:29:df:f0:48:16:8f:e3:d8:63:c5:d6:17:d4:01:29: 1e:fb:73:c6:b4:3b:df:a2:79:e0:25:6c:72:db:a2:27:4b:1e: 02:f6:c9:48:af:fd:3a:66:bf:dd:62:35:38:10:1a:be:92:32: 22:ec:a6:ff:58:b0:3d:01:28:fa:58:fd:87:56:3c:96:db:52: a6:23:b7:88:c3:4f:3d:9d:7b:90:70:9a:f9:64:40:19:22:f4: 51:e9:7d:93:94:48:4a:9d:e9:0f:20:40:92:ed:9b:b7:b1:c9: 07:0d:56:63:17:91:86:ee:08:9b:23:3b:12:65:1d:b2:80:f7: f3:55:33:4d:d6:bd:97:e5:6e:9d:20:84:68:03:31:1a:cf:c5: e7:f1:f7:27:4d:a4:70:0d:24:56:24:31:62:e4:73:9b:fd:43: 6d:25:f2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPavgjLtkfNHXTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmIxYzE2Y2MtMWVmNy00ZDdlLWIxODItYzUwMDM2ZDhlY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyekJY/dwNQpsF8xvnsFAS1/Wb8Tjfx+eScmn s+EaS3DEAxRzogVcYPlk+U2785dfuBfVSZFFK79DVpzeFW9mWuxsWlrmN0NRGEhZ W12SjjBgtB4P3pGX1FrX3EJIr+Bljuztg+bnmBXeMW8J90fHPFGGRhEekJJbMncp XCGe71xZf+KQsVBphvS54io5vt6WPrJwtMbbIO38n3t2i9MUP1lEFqA8BwHaNVFM nJGSFMQ1tek02ijBn8+NYiY7ctfCin244bWfRwt8NuzjQRL1SWTkvhlkr/kyWNDS BBTsDwkBe1qvEh83y0PwqcMAdLteqONbG+DHf9FIh+gIYEzXuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2bTfdwI3NMDhCgsdN5q8pbSfO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTczNDFkMjUtZTg3YS0z MDY2LTgyMDgtZWIwYmMxYWMzY2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI/MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIonRYeDluhAAm6jZU58ZSTCDwi7VW3mlj06v/g1Lynz3U1Hfr1yBzDq xjejipu+hveP7ZzGqOSk9FILJ3N9aozDiMDlHw7Ehx8lt3CBRoWniH5LrPd0rmD5 P/6wKCnf8EgWj+PYY8XWF9QBKR77c8a0O9+ieeAlbHLboidLHgL2yUiv/Tpmv91i NTgQGr6SMiLspv9YsD0BKPpY/YdWPJbbUqYjt4jDTz2de5BwmvlkQBki9FHpfZOU SEqd6Q8gQJLtm7exyQcNVmMXkYbuCJsjOxJlHbKA9/NVM03WvZflbp0ghGgDMRrP xefx9ydNpHANJFYkMWLkc5v9Q20l8s4= -----END CERTIFICATE-----Generated at Tue Sep 29 04:17:01 2026 by rpki-client