$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa File: 63a799f7-620c-3e6d-a174-e979e3a9bd06.roa (raw, json) Hash identifier: 33qsVFXrsLYnAuonHuTz1SyK/C0hAD+7hw3/hKA1gkI= Subject key identifier: 60:9A:EB:AC:51:39:3A:9D:9E:68:EB:F0:A5:2B:71:66:E7:4F:A1:8D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D96D382967710B96C3580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:96:d3:82:96:77:10:b9:6c:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a67ddfe5-1193-431f-a98a-9e7ac58e631e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:cd:d4:91:ca:1f:8e:a4:a6:27:55:fe:00: fc:32:76:de:ef:c0:2e:25:57:2e:06:86:f2:40:8a: 79:25:6a:0f:5e:02:f9:3f:09:5c:61:fb:4e:08:18: 3c:5f:57:bf:64:8a:26:40:50:f1:6f:53:2b:88:60: e7:13:64:56:eb:3f:3b:41:59:34:87:75:c3:ad:25: 8d:c7:3a:d3:f5:ac:83:2b:9c:7c:b0:13:84:b3:69: 1f:cf:2d:86:78:01:9b:1e:d3:2c:13:ea:06:69:f1: 10:b5:8d:ac:e3:e4:9d:88:84:ee:60:51:3b:bc:ae: f5:73:f8:99:79:f2:78:1b:c1:22:9a:51:df:97:c4: c0:9f:99:e3:0a:06:72:a9:e6:25:0f:14:e2:1c:47: 20:57:30:c0:45:30:15:ad:95:2e:01:82:a9:63:66: c6:97:66:08:0f:de:d4:28:a5:61:a2:d7:40:cb:bc: f2:af:c6:0b:02:67:bc:80:f4:f5:ad:54:7a:fe:68: 45:77:03:3b:d6:61:d6:2c:cc:d2:48:86:60:f8:62: 59:5a:50:0a:51:91:46:b8:03:be:8d:6b:a8:36:f7: df:a5:c1:9f:eb:c7:ea:69:0d:1a:77:ab:1b:58:cb: e9:d9:a1:f1:f8:6b:9c:bb:06:52:81:7f:3f:d2:9f: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9A:EB:AC:51:39:3A:9D:9E:68:EB:F0:A5:2B:71:66:E7:4F:A1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f2:07:5c:40:73:e1:b2:b7:2c:e4:fb:84:30:f0:b1:1c:86: 95:a7:22:e0:e9:48:e6:c9:5a:aa:01:55:5f:26:45:3c:43:13: 5b:ce:68:03:96:e0:01:1e:87:bf:1e:41:85:e2:73:35:58:02: ea:36:6c:33:4c:2f:e7:65:ec:6b:ab:88:55:45:be:b5:a2:69: e7:18:b1:e8:8e:81:5b:92:af:65:11:88:93:32:d7:6a:d2:ff: ec:9c:5e:83:df:ab:5a:fa:09:04:95:a1:01:e3:80:1e:6d:45: fa:a3:b6:f5:6f:df:6c:59:8d:92:54:5f:3d:d6:d6:84:09:cd: 49:1e:37:59:74:33:41:0c:ce:6c:d1:8a:1c:6b:f7:e1:07:32: 02:d3:8b:57:6a:0b:a5:be:c2:80:ed:38:b9:05:58:16:2e:53: b3:12:27:0c:c9:1f:e8:8d:43:e4:70:12:6b:00:75:81:f0:ce: 77:8f:cd:e0:c8:ee:84:a2:d9:b1:3a:c1:ad:4f:25:b9:76:28: 1f:f8:30:6c:dd:eb:92:2b:aa:27:15:94:e9:ff:55:6d:4a:b0: e7:09:9f:08:ba:c5:c0:c4:9e:d4:ac:8d:16:ed:1a:0b:26:c5: d6:43:53:f6:3e:e6:74:37:20:2a:8b:e0:c6:ea:5f:00:1d:af: 8b:cb:c4:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZbTgpZ3ELlsNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTY3ZGRmZTUtMTE5My00MzFmLWE5OGEtOWU3YWM1OGU2MzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2djN1JHKH46kpidV/gD8Mnbe78AuJVcuBoby QIp5JWoPXgL5PwlcYftOCBg8X1e/ZIomQFDxb1MriGDnE2RW6z87QVk0h3XDrSWN xzrT9ayDK5x8sBOEs2kfzy2GeAGbHtMsE+oGafEQtY2s4+SdiITuYFE7vK71c/iZ efJ4G8EimlHfl8TAn5njCgZyqeYlDxTiHEcgVzDARTAVrZUuAYKpY2bGl2YID97U KKVhotdAy7zyr8YLAme8gPT1rVR6/mhFdwM71mHWLMzSSIZg+GJZWlAKUZFGuAO+ jWuoNvffpcGf68fqaQ0ad6sbWMvp2aHx+GucuwZSgX8/0p/7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCa66xROTqdnmjr8KUrcWbnT6GNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjNhNzk5ZjctNjIwYy0z ZTZkLWExNzQtZTk3OWUzYTliZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzyB1xAc+Gytyzk+4Qw8LEchpWnIuDpSObJWqoBVV8mRTxDE1vOaAOW 4AEeh78eQYXiczVYAuo2bDNML+dl7GuriFVFvrWiaecYseiOgVuSr2URiJMy12rS /+ycXoPfq1r6CQSVoQHjgB5tRfqjtvVv32xZjZJUXz3W1oQJzUkeN1l0M0EMzmzR ihxr9+EHMgLTi1dqC6W+woDtOLkFWBYuU7MSJwzJH+iNQ+RwEmsAdYHwznePzeDI 7oSi2bE6wa1PJbl2KB/4MGzd65IrqicVlOn/VW1KsOcJnwi6xcDEntSsjRbtGgsm xdZDU/Y+5nQ3ICqL4MbqXwAdr4vLxLo= -----END CERTIFICATE-----Generated at Mon Sep 28 19:30:29 2026 by rpki-client