$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa File: 5899eaf1-4aac-378e-b6cc-b484a2849734.roa (raw, json) Hash identifier: GPbJJMr9VzxaJCbH8IS0wEKp+QCPfrpyA+gBHy7zD7E= Subject key identifier: 8C:77:AA:76:59:9E:37:23:5A:BE:6F:01:4C:30:02:EC:54:1F:26:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCECF074E3EAC97A40140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.243.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ce:cf:07:4e:3e:ac:97:a4:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a3c581be-867a-4e35-ba9a-4e050f78f3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:2b:1e:46:60:18:1e:6f:49:46:31:37:67: a7:1d:55:6e:60:0a:f3:42:7b:5c:2a:8b:b5:05:dd: 67:9b:ed:01:c9:d7:61:66:09:cf:4e:65:46:86:39: 4d:a4:1b:43:b7:e2:71:3d:65:36:84:20:6c:e5:f1: 38:00:9c:07:39:da:54:92:2d:9c:7b:be:9a:c3:15: cc:f1:2e:d7:98:44:1e:ce:23:e7:1e:6c:ff:46:7e: 44:2a:61:fd:78:07:48:9f:fc:79:68:3c:a3:3d:e4: 01:ec:38:7a:91:ca:41:6d:2d:d5:b8:06:4c:e6:48: 83:c3:57:2b:60:c6:7e:07:4c:d5:7a:c2:d1:78:70: dc:c8:ba:f5:95:3c:a7:16:1b:08:c5:43:cf:3a:28: 03:b0:ac:ea:d1:42:e7:ac:7f:8a:e2:5b:eb:ad:30: 78:07:ff:c5:ac:d9:f4:7d:22:84:18:e7:25:a3:dc: 58:87:06:5c:5f:f7:67:53:ba:b7:5c:9a:ba:fd:32: 81:73:f7:a6:9e:2d:48:d8:43:96:02:c0:c2:bc:af: 7b:63:4f:d8:70:a5:ed:0d:0f:df:18:fd:70:e6:d9: 3b:30:06:e1:06:9a:16:10:6e:23:01:b5:30:d7:bf: 80:a0:66:15:24:12:cb:c8:a1:db:5d:5a:20:1d:e0: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:77:AA:76:59:9E:37:23:5A:BE:6F:01:4C:30:02:EC:54:1F:26:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:63:e8:5d:a4:da:13:2b:58:be:a0:fc:ff:6d:a6:24:34:89: 54:82:27:72:ed:fc:58:d6:6e:42:dd:5d:98:ef:43:0f:e2:c1: 2c:ab:c5:81:01:d4:19:c6:af:f6:ab:1e:b0:a0:b8:80:12:85: 1b:09:39:1a:46:03:a2:d0:3c:f9:99:ff:94:26:86:72:36:d7: c0:8a:82:1e:1a:4b:14:a2:92:65:88:e0:24:fa:7e:a6:55:2d: e3:37:b5:e6:63:be:d4:8e:87:07:6f:ec:5e:a3:14:03:6f:ac: 3e:fc:d1:3e:8f:97:0f:2f:05:a3:4d:37:25:d0:cf:88:25:c8: ca:44:67:16:a7:b1:3d:52:b8:9d:d4:19:fe:62:2a:83:74:6f: 04:09:60:90:73:f7:14:3e:d8:17:31:3d:d6:5f:cb:9a:0e:d6: 13:db:0c:bf:8f:2a:c6:35:65:2c:30:96:d0:94:be:66:7f:e4: 34:91:c4:ac:f4:c3:25:eb:1a:06:19:00:11:f9:da:04:27:8d: 2c:d2:c4:b2:06:fd:b9:d4:ad:1a:2e:85:2a:67:de:61:f9:7d: 9c:db:4e:10:0c:d7:b0:c2:42:c4:14:2b:59:eb:a6:86:2e:2a: 30:42:3f:4c:c3:b3:6b:06:ca:0c:02:ef:dd:12:83:38:08:73: 84:d5:cc:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPc7PB04+rJekAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTNjNTgxYmUtODY3YS00ZTM1LWJhOWEtNGUwNTBmNzhmM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yErHkZgGB5vSUYxN2enHVVuYArzQntcKou1 Bd1nm+0ByddhZgnPTmVGhjlNpBtDt+JxPWU2hCBs5fE4AJwHOdpUki2ce76awxXM 8S7XmEQeziPnHmz/Rn5EKmH9eAdIn/x5aDyjPeQB7Dh6kcpBbS3VuAZM5kiDw1cr YMZ+B0zVesLReHDcyLr1lTynFhsIxUPPOigDsKzq0ULnrH+K4lvrrTB4B//FrNn0 fSKEGOclo9xYhwZcX/dnU7q3XJq6/TKBc/emni1I2EOWAsDCvK97Y0/YcKXtDQ/f GP1w5tk7MAbhBpoWEG4jAbUw17+AoGYVJBLLyKHbXVogHeCHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx3qnZZnjcjWr5vAUwwAuxUHyYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg5OWVhZjEtNGFhYy0z NzhlLWI2Y2MtYjQ4NGEyODQ5NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhj6F2k2hMrWL6g/P9tpiQ0iVSCJ3Lt/FjWbkLdXZjvQw/iwSyrxYEB 1BnGr/arHrCguIAShRsJORpGA6LQPPmZ/5QmhnI218CKgh4aSxSikmWI4CT6fqZV LeM3teZjvtSOhwdv7F6jFANvrD780T6Plw8vBaNNNyXQz4glyMpEZxansT1SuJ3U Gf5iKoN0bwQJYJBz9xQ+2BcxPdZfy5oO1hPbDL+PKsY1ZSwwltCUvmZ/5DSRxKz0 wyXrGgYZABH52gQnjSzSxLIG/bnUrRouhSpn3mH5fZzbThAM17DCQsQUK1nrpoYu KjBCP0zDs2sGygwC790SgzgIc4TVzMY= -----END CERTIFICATE-----Generated at Sat Oct 3 10:56:57 2026 by rpki-client