$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa File: 7c790206-baf3-3f4b-8f97-000c46c3e016.roa (raw, json) Hash identifier: lLN3NEUgHenKPtOuDrPHAc9XENfJmQ5gPOJVc/HlBXo= Subject key identifier: D6:2D:D7:21:1B:04:82:C5:26:E7:C4:D4:F6:C7:01:09:96:2C:98:F9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD202B9C4C37F492B6700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.220.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d2:02:b9:c4:c3:7f:49:2b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=55d4f645-2419-48b3-a7fd-f0ab8a02526b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:21:a2:18:fc:d0:9c:0a:0d:17:14:1b:b8: 9d:9e:37:64:40:45:47:91:08:15:93:0d:6d:16:ab: 8b:a8:a9:82:48:ad:f3:3d:ba:37:ef:f9:95:d8:db: 0f:a8:56:53:d8:46:4d:be:2c:55:c4:3d:c5:66:96: 16:03:3d:1d:62:02:73:71:76:10:80:4f:f6:ef:4d: a4:50:44:90:f9:f0:ca:70:94:c9:84:84:47:7d:f4: b2:90:df:12:e5:e9:1b:1c:25:0f:98:32:6a:68:7e: e8:a3:97:f3:97:92:26:96:21:e6:e6:23:73:3a:a1: 5e:3f:29:e1:ae:77:d7:21:7a:a0:e5:92:c6:1e:d9: 1b:36:bc:5c:4e:34:1c:8f:10:11:f6:27:f5:b6:40: 49:36:24:08:75:60:1d:e5:3e:79:2f:d3:15:d5:f2: dc:90:07:e7:c1:37:83:b1:e0:50:e1:61:ad:66:07: fd:56:6f:b3:0e:81:c6:48:23:2d:21:9c:86:d2:66: 9f:70:4a:d5:11:3d:e4:8e:b9:83:83:82:33:0e:54: 05:3b:70:bc:09:64:c0:69:93:31:16:45:f0:10:f8: 9b:be:bd:76:a6:5d:66:bf:5b:c0:91:3a:0c:7a:9b: 16:e5:af:ae:1a:1e:50:96:60:64:f8:4f:86:2b:da: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2D:D7:21:1B:04:82:C5:26:E7:C4:D4:F6:C7:01:09:96:2C:98:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9f:87:0c:0c:3e:3f:59:58:4a:1d:df:76:78:f2:3b:5a:8d: d2:ee:45:41:db:20:45:72:29:42:14:ce:63:0f:dd:8c:9d:f3: 6c:ba:bd:c7:eb:7c:cc:38:5f:61:29:d2:40:e5:9e:7e:67:f2: 6e:2b:4a:3f:0d:75:c3:f9:ac:c9:a2:df:a0:13:32:97:36:ea: ae:aa:e9:ed:4b:d9:a6:91:dc:a0:b3:60:f1:1a:6c:93:c7:33: f4:a2:14:54:c8:2e:ae:b6:bd:d2:42:85:e2:69:b3:16:00:a1: af:8b:2e:d8:13:ad:f4:ad:59:bd:b6:ec:d1:7e:c4:72:f5:41: 5b:f9:fb:b7:2a:2f:2c:aa:44:32:c5:60:53:f6:d8:35:6b:60: d4:09:a9:39:dd:3d:5e:db:55:d6:e6:a4:1e:54:a3:bb:4f:e3: b4:25:85:3f:43:a3:75:ed:81:c9:5f:b1:8b:5f:2a:e1:fe:fd: fe:66:d2:fd:3c:eb:88:7c:fe:4d:87:f3:ce:99:3e:da:eb:62: b6:1c:a4:e6:97:64:b9:cf:f2:14:14:9d:d6:f5:12:e8:31:b8: a5:d5:31:5c:c4:87:0e:1a:a8:34:df:e4:21:a1:31:00:91:d1: e5:c6:15:d2:30:6a:56:7e:e7:f3:b9:a0:85:74:70:ca:57:50: e3:c6:67:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdICucTDf0krZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTVkNGY2NDUtMjQxOS00OGIzLWE3ZmQtZjBhYjhhMDI1MjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMohohj80JwKDRcUG7idnjdkQEVHkQgVkw1t FquLqKmCSK3zPbo37/mV2NsPqFZT2EZNvixVxD3FZpYWAz0dYgJzcXYQgE/2702k UESQ+fDKcJTJhIRHffSykN8S5ekbHCUPmDJqaH7oo5fzl5ImliHm5iNzOqFePynh rnfXIXqg5ZLGHtkbNrxcTjQcjxAR9if1tkBJNiQIdWAd5T55L9MV1fLckAfnwTeD seBQ4WGtZgf9Vm+zDoHGSCMtIZyG0mafcErVET3kjrmDg4IzDlQFO3C8CWTAaZMx FkXwEPibvr12pl1mv1vAkToMepsW5a+uGh5QlmBk+E+GK9oeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYt1yEbBILFJufE1PbHAQmWLJj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2M3OTAyMDYtYmFmMy0z ZjRiLThmOTctMDAwYzQ2YzNlMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2fhwwMPj9ZWEod33Z48jtajdLuRUHbIEVyKUIUzmMP3Yyd82y6vcfr fMw4X2Ep0kDlnn5n8m4rSj8NdcP5rMmi36ATMpc26q6q6e1L2aaR3KCzYPEabJPH M/SiFFTILq62vdJCheJpsxYAoa+LLtgTrfStWb227NF+xHL1QVv5+7cqLyyqRDLF YFP22DVrYNQJqTndPV7bVdbmpB5Uo7tP47QlhT9Do3XtgclfsYtfKuH+/f5m0v08 64h8/k2H886ZPtrrYrYcpOaXZLnP8hQUndb1EugxuKXVMVzEhw4aqDTf5CGhMQCR 0eXGFdIwalZ+5/O5oIV0cMpXUOPGZzo= -----END CERTIFICATE-----Generated at Tue Sep 29 05:26:28 2026 by rpki-client