$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa File: 893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa (raw, json) Hash identifier: iQFpzfA+/zrCtpXfAwMu5iKMhm5qbNQ6COfXMEJLdss= Subject key identifier: 8A:77:7A:82:13:21:AE:29:F1:BB:E3:FC:7E:52:27:9A:40:63:CB:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBFB5DB3FC9E09ECF5440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.225.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bf:b5:db:3f:c9:e0:9e:cf:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b0612a94-44b8-4966-b61a-598daa097069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:54:64:db:0a:e6:04:fd:b2:e4:82:d8:a2: 6b:96:da:26:7c:06:99:ea:5b:46:b5:b8:23:b8:df: c7:66:7d:95:f9:12:8c:f0:cc:8f:a8:d4:f7:25:b0: 12:ca:88:01:8d:eb:7c:c3:26:65:ce:6d:69:aa:7e: 84:3a:80:fc:08:c9:56:2a:01:98:56:87:ba:65:6d: c6:f7:9f:ad:b4:61:5c:21:97:1e:5e:ed:0c:09:dd: 2f:5b:a1:e3:ac:bd:f1:96:ba:12:7c:a9:b1:e4:c1: 8b:5b:ee:28:89:33:00:dd:e4:92:2a:c9:5d:44:1d: 9d:19:ee:41:f1:e4:a1:d5:2e:47:af:3f:23:dc:a1: 74:97:9c:01:1a:7d:ae:68:d6:c1:cb:41:92:f4:12: cf:45:04:5a:5f:4e:6f:c4:4a:bb:16:6e:f1:90:d5: d6:3f:e6:2e:01:c4:20:e0:d7:90:c2:f6:ca:cb:4e: fc:06:5a:df:de:fd:4e:2c:12:c4:6c:f0:72:d6:51: aa:32:60:7f:67:23:25:e9:5e:54:72:cb:d0:60:da: 07:f8:db:0d:ae:2a:73:80:91:95:90:02:1e:0d:e8: 37:5e:77:12:8d:d9:7b:4a:95:de:2a:42:34:67:05: 54:64:d0:19:07:2f:bc:4a:07:ca:03:9d:f3:04:ac: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:77:7A:82:13:21:AE:29:F1:BB:E3:FC:7E:52:27:9A:40:63:CB:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e7:1e:e3:95:6a:76:f7:aa:53:a7:8c:00:d4:17:ee:58:64: 53:6a:c4:e3:c6:b8:00:38:01:39:00:df:f9:25:ad:0f:ce:cc: c4:93:70:77:aa:cc:61:b4:12:58:2e:79:3a:e2:e2:88:73:00: fe:2c:da:0c:91:bf:c4:95:19:bc:76:e7:58:73:6c:09:d9:4b: 08:3a:82:24:d6:2a:fd:37:c2:b7:b8:d7:94:c5:f2:76:f3:f4: 4b:14:a8:6c:b4:a3:9c:51:fc:4a:03:34:92:b8:96:c3:0c:cd: a5:55:30:c1:a7:2f:fe:32:eb:5a:87:c7:f6:01:a4:30:13:88: a1:dc:de:4f:e4:38:76:f2:66:e8:ac:f3:cb:ee:e2:33:3d:8c: 9c:c2:9f:98:22:30:f7:7d:ca:d5:06:17:2b:b9:01:56:35:e2: 8b:14:3c:af:03:33:dc:a1:0c:8b:d8:74:41:b1:8c:47:f1:d2: 92:47:fb:f9:03:b1:38:f3:e1:10:46:fb:4f:38:14:4a:87:cd: 61:10:d9:c2:4e:9c:1c:2f:b5:b1:7a:a1:33:3c:87:35:09:5e: a8:56:80:0e:2b:26:4c:77:85:a1:5a:3d:9f:98:b6:e0:65:64: 5b:64:4e:cc:ab:3c:15:ed:e7:d0:b4:c0:42:8d:cd:45:0d:21: cc:3b:cc:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb+12z/J4J7PVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjA2MTJhOTQtNDRiOC00OTY2LWI2MWEtNTk4ZGFhMDk3MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JtUZNsK5gT9suSC2KJrltomfAaZ6ltGtbgj uN/HZn2V+RKM8MyPqNT3JbASyogBjet8wyZlzm1pqn6EOoD8CMlWKgGYVoe6ZW3G 95+ttGFcIZceXu0MCd0vW6HjrL3xlroSfKmx5MGLW+4oiTMA3eSSKsldRB2dGe5B 8eSh1S5Hrz8j3KF0l5wBGn2uaNbBy0GS9BLPRQRaX05vxEq7Fm7xkNXWP+YuAcQg 4NeQwvbKy078Blrf3v1OLBLEbPBy1lGqMmB/ZyMl6V5UcsvQYNoH+NsNripzgJGV kAIeDeg3XncSjdl7SpXeKkI0ZwVUZNAZBy+8SgfKA53zBKzJJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIp3eoITIa4p8bvj/H5SJ5pAY8sVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODkzZDliZGItYTAwMy0z YWE1LWEyOGQtNGQ2MjdjY2Q5ZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/nHuOVanb3qlOnjADUF+5YZFNqxOPGuAA4ATkA3/klrQ/OzMSTcHeq zGG0ElgueTri4ohzAP4s2gyRv8SVGbx251hzbAnZSwg6giTWKv03wre415TF8nbz 9EsUqGy0o5xR/EoDNJK4lsMMzaVVMMGnL/4y61qHx/YBpDATiKHc3k/kOHbyZuis 88vu4jM9jJzCn5giMPd9ytUGFyu5AVY14osUPK8DM9yhDIvYdEGxjEfx0pJH+/kD sTjz4RBG+084FEqHzWEQ2cJOnBwvtbF6oTM8hzUJXqhWgA4rJkx3haFaPZ+YtuBl ZFtkTsyrPBXt59C0wEKNzUUNIcw7zOI= -----END CERTIFICATE-----Generated at Tue Sep 29 17:38:58 2026 by rpki-client