$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71c53023-7440-3706-8e58-5b7505dc0909.roa File: 71c53023-7440-3706-8e58-5b7505dc0909.roa (raw, json) Hash identifier: pm4hj7Zf7DwewL5+NXDYPWrpwpS1/gcfPVpsdRAArCc= Subject key identifier: 84:12:F4:59:F2:78:A1:E6:DB:C8:46:C6:4B:CB:73:AB:41:4C:3B:C0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9274A00D970AAF135500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71c53023-7440-3706-8e58-5b7505dc0909.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.187.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:92:74:a0:0d:97:0a:af:13:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=10ab002c-b164-462b-8eeb-5f78160fefac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:c3:a4:93:82:21:5a:95:f5:ca:03:12:44: c9:0e:ee:c8:56:ea:85:3f:dd:cf:61:99:9e:46:47: bc:1b:06:0d:c3:14:4a:02:67:b2:a5:a5:1b:10:94: 8e:6b:48:bc:fa:fc:61:ae:24:ae:49:19:b5:1c:7b: 05:dd:f8:57:2d:14:45:82:1a:a2:de:04:ca:51:b6: 15:64:51:ad:8d:06:64:f7:46:ac:05:1c:9a:6b:49: e9:5c:c9:96:74:39:48:2a:fd:58:8a:34:28:f1:5d: af:cc:e1:e2:da:34:88:ad:d4:86:19:b1:9d:37:bd: 2c:8a:46:06:79:5a:8a:52:a0:ff:93:bc:5c:46:68: 61:74:6e:a9:23:ad:25:6f:9d:80:e2:39:7f:19:9a: 10:a7:0e:9d:ff:76:ef:1f:c3:93:42:5a:3a:fd:a1: 3d:1b:0a:bb:a0:77:a7:1e:7c:27:77:94:8c:82:e9: d5:78:c2:b0:b4:48:e1:dd:aa:b0:8d:3d:2a:83:95: b0:69:f3:ef:5d:3a:a0:b3:78:21:29:3d:e6:1c:ed: 8d:a5:c0:76:a3:2e:57:d0:a8:f1:ad:33:58:77:af: 03:e4:98:0e:6b:f8:87:54:9a:8b:2b:a3:52:91:1e: e3:f4:69:6d:9a:4e:32:a7:0c:8a:b7:59:50:bc:e3: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:F4:59:F2:78:A1:E6:DB:C8:46:C6:4B:CB:73:AB:41:4C:3B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71c53023-7440-3706-8e58-5b7505dc0909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:56:66:32:b8:7c:38:af:a0:09:ce:1d:2e:46:6e:5f:a9:12: 43:1a:ac:e1:01:14:67:aa:2c:1f:13:e0:a5:db:11:9c:7e:ea: 7e:ae:2e:ee:19:a6:cc:d9:79:99:02:33:2a:68:9f:d2:5b:24: 9a:1a:fe:39:31:84:60:20:41:27:33:75:ec:92:bb:b7:b5:d3: 58:3e:01:0e:ae:41:9e:cf:c5:98:3d:c5:9c:76:3c:19:37:b0: d8:80:40:d2:1f:5f:bf:b6:6f:b5:e1:16:19:54:14:bf:d7:fc: cd:b2:d7:36:e6:f7:e2:a6:f9:5e:c4:40:7a:01:16:f5:f9:79: bf:f3:fd:92:8f:9b:54:aa:56:75:bb:58:73:7c:4b:aa:c3:e3: 29:71:4e:cd:02:6f:b9:fe:ac:6f:ac:e5:c5:41:4a:9b:48:03: 2e:a0:03:8e:42:9c:be:84:b9:a2:fe:d6:70:41:3d:b0:89:f9: 0a:3a:1a:d5:0b:50:5e:84:3c:11:e0:77:18:90:cb:2e:3b:e9: ff:a3:44:29:b7:3d:59:80:1f:7c:0c:e7:02:5e:2d:0e:04:fb: 12:bc:b4:2d:ad:83:31:31:fe:5b:d7:c8:58:b7:4b:6d:fb:4d: 06:8e:c2:e5:6b:2a:fb:39:0a:a1:9f:a9:de:f3:d5:d3:1d:86: 6c:ec:1f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZJ0oA2XCq8TVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTBhYjAwMmMtYjE2NC00NjJiLThlZWItNWY3ODE2MGZlZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs7DpJOCIVqV9coDEkTJDu7IVuqFP93PYZme Rke8GwYNwxRKAmeypaUbEJSOa0i8+vxhriSuSRm1HHsF3fhXLRRFghqi3gTKUbYV ZFGtjQZk90asBRyaa0npXMmWdDlIKv1YijQo8V2vzOHi2jSIrdSGGbGdN70sikYG eVqKUqD/k7xcRmhhdG6pI60lb52A4jl/GZoQpw6d/3bvH8OTQlo6/aE9Gwq7oHen Hnwnd5SMgunVeMKwtEjh3aqwjT0qg5WwafPvXTqgs3ghKT3mHO2NpcB2oy5X0Kjx rTNYd68D5JgOa/iHVJqLK6NSkR7j9Gltmk4ypwyKt1lQvOOQRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQS9FnyeKHm28hGxkvLc6tBTDvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzFjNTMwMjMtNzQ0MC0z NzA2LThlNTgtNWI3NTA1ZGMwOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9WZjK4fDivoAnOHS5Gbl+pEkMarOEBFGeqLB8T4KXbEZx+6n6uLu4Z pszZeZkCMypon9JbJJoa/jkxhGAgQSczdeySu7e101g+AQ6uQZ7PxZg9xZx2PBk3 sNiAQNIfX7+2b7XhFhlUFL/X/M2y1zbm9+Km+V7EQHoBFvX5eb/z/ZKPm1SqVnW7 WHN8S6rD4ylxTs0Cb7n+rG+s5cVBSptIAy6gA45CnL6EuaL+1nBBPbCJ+Qo6GtUL UF6EPBHgdxiQyy476f+jRCm3PVmAH3wM5wJeLQ4E+xK8tC2tgzEx/lvXyFi3S237 TQaOwuVrKvs5CqGfqd7z1dMdhmzsH4E= -----END CERTIFICATE-----Generated at Mon Sep 28 10:38:22 2026 by rpki-client