$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/947a1928-22b7-3188-913f-8233e9e063ef.roa File: 947a1928-22b7-3188-913f-8233e9e063ef.roa (raw, json) Hash identifier: 5lGMBkzLYEquhIUyB16OohGjwlPZ8wX5AlPu5getjkE= Subject key identifier: 21:AF:67:48:89:84:AA:E1:7E:25:B4:E3:EB:A4:5C:CB:ED:3C:BC:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAEB07AC6D47C4BB9A900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/947a1928-22b7-3188-913f-8233e9e063ef.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.200.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ae:b0:7a:c6:d4:7c:4b:b9:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e058ce85-24d9-4d02-96f0-e40f8d11c622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:82:a1:17:03:d3:bb:4a:68:75:9a:01:7e: 0c:89:9e:f7:f9:ef:44:99:17:82:da:a1:22:ca:84: c8:3b:fa:01:b2:01:aa:42:1d:54:9c:ed:97:6c:c3: 8f:1c:33:13:9c:22:9c:23:43:84:5c:b0:63:f1:87: 8b:11:11:4d:cd:fd:fd:e4:1c:2e:cc:c6:68:cb:4f: 25:b1:92:81:40:da:20:09:ee:52:28:f7:5a:f2:7e: e7:42:59:5d:a9:dd:87:53:c7:f0:f6:60:17:ae:6f: 52:cc:f1:70:49:52:56:bd:58:b0:0e:60:ff:29:0d: fd:9c:ec:30:ec:ad:ef:85:ac:3e:52:90:8e:42:e7: ea:e9:39:2f:0c:30:9e:5a:42:97:25:90:33:f7:6c: 37:80:72:11:32:fd:ed:e0:07:03:2d:02:77:b9:d2: ad:17:4c:ab:b2:02:4f:c3:58:e7:8c:7f:65:d6:0e: bd:64:6d:4d:c8:1c:2c:6d:05:a1:f2:43:4a:be:44: b4:19:c2:6e:13:e2:bf:6c:d3:51:95:d1:e4:12:1a: 28:56:70:68:53:da:68:47:12:24:cb:be:a6:bc:32: 20:b5:b5:cd:66:dc:d2:b7:f1:16:e9:fa:b8:11:cc: 2d:87:be:ba:ba:0b:84:18:f3:9c:c5:46:7d:94:04: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AF:67:48:89:84:AA:E1:7E:25:B4:E3:EB:A4:5C:CB:ED:3C:BC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/947a1928-22b7-3188-913f-8233e9e063ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ce:d3:3e:38:e0:b4:b0:c6:36:6f:2a:fb:0f:3e:d8:ef:65: 48:72:fe:15:c1:03:4e:b0:29:9d:22:2d:a0:39:4e:87:a8:d5: 82:ac:a4:23:a5:d2:af:d9:8e:c4:1b:4d:96:30:99:ad:51:7d: 54:28:6f:3a:63:aa:6d:d7:ca:3a:6f:b0:12:7f:d5:3a:da:b7: 3a:e6:c5:72:72:fb:28:36:9d:d7:c0:92:53:a2:86:00:7f:ab: ce:8d:ed:8c:fc:5d:aa:18:93:b6:03:ed:92:b8:d6:b0:47:34: 6e:45:d7:e1:c2:21:85:7c:18:00:bc:a0:7c:03:81:7b:6a:d5: 62:16:5c:c6:73:4d:ec:73:0c:e4:ef:ab:e5:48:d9:e0:14:7a: 9a:36:e4:c7:ae:4a:e9:86:85:6d:40:48:0a:3b:c3:f0:e2:ba: 1a:e8:2d:d3:25:c7:30:d4:d8:5d:88:77:7a:c7:55:20:bb:20: b2:46:7e:88:de:18:eb:8a:76:8d:7d:b5:5a:5d:5d:1a:30:7d: 0c:aa:53:bc:28:9f:ab:2a:c4:f1:5e:b7:fd:0b:c7:17:44:cc: 0d:0e:9d:51:d0:98:94:cc:e7:df:dc:ff:96:3b:e2:da:9c:58: c1:79:2d:6b:6a:2f:03:f0:65:fd:f3:12:36:03:56:f4:90:3d: 31:07:5b:ee -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9MPa6wesbUfEu5qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTA1OGNlODUtMjRkOS00ZDAyLTk2ZjAtZTQwZjhkMTFjNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpGCoRcD07tKaHWaAX4MiZ73+e9EmReC2qEi yoTIO/oBsgGqQh1UnO2XbMOPHDMTnCKcI0OEXLBj8YeLERFNzf395BwuzMZoy08l sZKBQNogCe5SKPda8n7nQlldqd2HU8fw9mAXrm9SzPFwSVJWvViwDmD/KQ39nOww 7K3vhaw+UpCOQufq6TkvDDCeWkKXJZAz92w3gHIRMv3t4AcDLQJ3udKtF0yrsgJP w1jnjH9l1g69ZG1NyBwsbQWh8kNKvkS0GcJuE+K/bNNRldHkEhooVnBoU9poRxIk y76mvDIgtbXNZtzSt/EW6fq4Ecwth766uguEGPOcxUZ9lATvCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCGvZ0iJhKrhfiW04+ukXMvtPLzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTQ3YTE5MjgtMjJiNy0z MTg4LTkxM2YtODIzM2U5ZTA2M2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBI8gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAY87TPjjgtLDGNm8q+w8+2O9lSHL+FcEDTrApnSItoDlOh6jVgqykI6XS r9mOxBtNljCZrVF9VChvOmOqbdfKOm+wEn/VOtq3OubFcnL7KDad18CSU6KGAH+r zo3tjPxdqhiTtgPtkrjWsEc0bkXX4cIhhXwYALygfAOBe2rVYhZcxnNN7HMM5O+r 5UjZ4BR6mjbkx65K6YaFbUBICjvD8OK6Gugt0yXHMNTYXYh3esdVILsgskZ+iN4Y 64p2jX21Wl1dGjB9DKpTvCifqyrE8V63/QvHF0TMDQ6dUdCYlMzn39z/ljvi2pxY wXkta2ovA/Bl/fMSNgNW9JA9MQdb7g== -----END CERTIFICATE-----Generated at Tue Oct 6 21:41:43 2026 by rpki-client