$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95cd8706-2062-33b5-99fb-f90fa6486db3.roa File: 95cd8706-2062-33b5-99fb-f90fa6486db3.roa (raw, json) Hash identifier: bZF1ORfzP9QTcSDMpbkh6NoiF3XFQ7VVybYCFyltHS0= Subject key identifier: 9E:41:34:20:58:2A:AA:E6:94:1F:14:F2:93:05:B2:B8:FA:FE:4F:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBAF3C8A7754396AC0080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95cd8706-2062-33b5-99fb-f90fa6486db3.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.246.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ba:f3:c8:a7:75:43:96:ac:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3a7543e7-3c1c-4610-9f86-eae04b2dc7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:31:df:19:d5:d8:94:a6:23:8a:d1:92:a6: 84:d1:ab:12:cb:a4:4e:a9:3d:51:6b:ee:44:5a:36: 96:bb:ba:be:d9:18:8b:c3:02:89:f7:af:39:a0:b3: 81:07:1f:7a:6b:1b:ee:de:77:79:7f:43:61:0c:72: 05:3f:ca:f5:87:1c:74:07:c3:f7:32:76:d8:a5:ac: 9d:4d:02:55:1f:13:b5:08:91:7a:35:92:86:3f:1b: 12:bc:19:db:07:73:14:06:c5:68:10:76:b3:9a:9b: 0c:f0:68:fb:dc:66:66:39:0c:cb:ae:0f:03:18:82: 18:2a:be:a1:93:b4:cb:49:6a:bd:d1:f8:9b:eb:4c: 0c:95:b4:1b:e4:8d:60:55:af:41:bd:4c:8b:b0:01: c1:6b:07:7e:7a:61:df:8a:db:36:96:91:be:20:8d: 8c:ab:ee:ef:55:70:33:d3:23:ef:59:d3:e7:ee:05: 76:6d:18:24:a2:dc:63:a7:69:1a:8d:aa:4e:a9:61: 32:48:2a:0e:f7:b5:a0:1d:17:55:27:eb:3b:df:b8: 63:32:0a:6a:5c:31:69:5a:70:91:c5:d9:39:a6:dc: a9:af:fd:fc:bc:a8:77:93:87:04:c7:f8:a3:c4:1c: 6b:e7:d1:33:a7:5c:64:5f:16:ce:ff:c7:87:42:c0: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:41:34:20:58:2A:AA:E6:94:1F:14:F2:93:05:B2:B8:FA:FE:4F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95cd8706-2062-33b5-99fb-f90fa6486db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c4:a6:19:22:c7:dd:26:0f:e5:5d:47:87:87:49:f0:7c:10: 93:24:39:75:f0:b1:cb:ce:7f:a6:4a:74:5b:74:85:5e:a2:6b: e8:ca:2a:e9:91:5f:fa:14:6d:10:30:09:23:60:68:63:6a:5c: 21:ae:3b:1c:47:31:cd:79:3b:7b:79:f5:92:17:57:38:ec:b0: 89:9a:c4:d8:63:83:d3:e4:8c:e2:77:63:f7:bf:f5:62:3a:d1: 8f:e1:f4:8e:82:15:79:b5:91:5f:98:5e:81:c7:68:85:9b:da: 02:9a:54:52:d6:39:1e:29:a7:eb:08:fc:cd:45:a0:8c:f8:93: a0:81:4d:a6:ee:e7:18:d1:b5:b4:62:90:b1:92:f4:6a:86:36: eb:f4:72:24:cb:6c:07:43:da:88:91:e1:a0:eb:8a:c6:aa:32: ff:54:22:44:06:8e:bd:20:e6:2d:93:7f:10:5e:a7:85:91:42: 9e:e6:a7:8b:bb:9f:d2:47:38:61:26:e5:98:ef:cc:67:af:3b: 75:25:5e:a3:56:db:15:ce:36:4b:3a:05:0a:ac:2b:34:71:8b: cf:76:80:19:31:61:28:74:e7:49:6e:45:68:05:b7:82:09:14: 89:7c:61:e7:51:72:c7:19:2c:5e:c1:3b:44:07:49:06:03:9d: 42:f5:c2:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbrzyKd1Q5asAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk M2E3NTQzZTctM2MxYy00NjEwLTlmODYtZWFlMDRiMmRjN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnYx3xnV2JSmI4rRkqaE0asSy6ROqT1Ra+5E WjaWu7q+2RiLwwKJ9685oLOBBx96axvu3nd5f0NhDHIFP8r1hxx0B8P3MnbYpayd TQJVHxO1CJF6NZKGPxsSvBnbB3MUBsVoEHazmpsM8Gj73GZmOQzLrg8DGIIYKr6h k7TLSWq90fib60wMlbQb5I1gVa9BvUyLsAHBawd+emHfits2lpG+II2Mq+7vVXAz 0yPvWdPn7gV2bRgkotxjp2kajapOqWEySCoO97WgHRdVJ+s737hjMgpqXDFpWnCR xdk5ptypr/38vKh3k4cEx/ijxBxr59Ezp1xkXxbO/8eHQsA5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5BNCBYKqrmlB8U8pMFsrj6/k8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTVjZDg3MDYtMjA2Mi0z M2I1LTk5ZmItZjkwZmE2NDg2ZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/ZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7Ephkix90mD+VdR4eHSfB8EJMkOXXwscvOf6ZKdFt0hV6ia+jKKumR X/oUbRAwCSNgaGNqXCGuOxxHMc15O3t59ZIXVzjssImaxNhjg9PkjOJ3Y/e/9WI6 0Y/h9I6CFXm1kV+YXoHHaIWb2gKaVFLWOR4pp+sI/M1FoIz4k6CBTabu5xjRtbRi kLGS9GqGNuv0ciTLbAdD2oiR4aDrisaqMv9UIkQGjr0g5i2TfxBep4WRQp7mp4u7 n9JHOGEm5ZjvzGevO3UlXqNW2xXONks6BQqsKzRxi892gBkxYSh050luRWgFt4IJ FIl8YedRcscZLF7BO0QHSQYDnUL1wvM= -----END CERTIFICATE-----Generated at Sun Oct 11 08:06:07 2026 by rpki-client