$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99c9f036-b96c-3f8f-8f15-c3e435023031.roa File: 99c9f036-b96c-3f8f-8f15-c3e435023031.roa (raw, json) Hash identifier: f7ElPUDm6MNIIAQ42bgfp5i4D60Rro83TJTRRfhPcJI= Subject key identifier: 66:A0:2E:D8:6D:09:66:BC:74:E2:20:FC:EA:A8:C2:04:9C:3B:CE:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC25A687CB7A7489A3140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99c9f036-b96c-3f8f-8f15-c3e435023031.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.201.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c2:5a:68:7c:b7:a7:48:9a:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6a85c48f-7309-461b-b96e-1895d92b7285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:0a:0b:35:0f:94:38:94:f9:b4:0b:da:6b: 22:fa:bc:a6:d6:09:4e:0b:84:7c:ad:26:c9:fb:dc: cb:e1:89:39:eb:92:86:63:3c:f7:24:4e:c9:07:b4: 63:96:77:c6:85:74:60:73:86:cf:24:ce:d3:9f:7a: 15:88:a8:b0:54:7f:5c:4b:ec:18:be:d5:60:5b:99: f4:38:cb:09:97:25:df:df:e8:2a:f6:d8:e9:52:61: 81:24:46:53:03:a9:60:58:89:35:f5:3a:59:c2:d6: 16:ff:20:b7:70:da:7b:c0:1d:cc:86:82:9d:41:06: b9:ae:a7:d7:40:7d:0c:c5:7c:12:1a:6c:0f:c8:41: 27:c9:73:93:f8:34:5c:8a:5e:e4:44:17:47:42:6e: 59:40:2e:e5:2e:87:fd:17:15:5c:fc:9e:1c:b0:6e: d2:8a:c8:f5:b6:58:87:a0:85:d7:60:96:99:57:d6: 2f:92:fc:6e:cb:05:0b:3f:e8:96:4f:7d:c2:4e:b6: 57:56:13:1e:73:ac:b0:36:9d:66:53:14:bd:01:85: 55:ab:94:b2:ef:76:8b:97:95:44:f5:14:b7:9b:99: 41:8a:61:ff:02:6b:42:c5:5c:cf:68:94:19:6f:9f: af:4a:3e:0c:20:13:0f:c4:5b:69:c1:5d:f4:42:bb: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A0:2E:D8:6D:09:66:BC:74:E2:20:FC:EA:A8:C2:04:9C:3B:CE:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99c9f036-b96c-3f8f-8f15-c3e435023031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6e:c5:98:e3:9d:8f:0e:ce:da:a1:7f:7c:bf:e4:d1:ce:36: 16:86:c9:47:f4:33:35:08:06:79:87:53:d2:a1:62:e6:8c:7c: e9:f1:83:03:69:a6:b3:be:45:6b:e9:4b:1d:bb:a2:82:08:77: 95:62:20:d9:58:e2:bc:6c:3b:6b:60:0e:1e:3c:9a:7b:95:75: 4d:f6:45:ee:6f:fb:73:e8:47:ec:1a:17:63:49:98:e2:79:dd: bb:7f:4f:b9:53:ef:71:2d:76:ed:cd:1e:93:4e:b6:09:dd:cc: 40:91:7a:74:0b:d4:a5:9e:fe:7b:e4:e4:ed:a2:90:df:0c:13: 85:ea:78:f8:a5:a2:a1:77:c5:73:68:6a:b2:c3:fb:50:42:94: 94:9c:97:3d:be:99:10:9f:7b:60:1b:b1:a7:b4:59:ea:74:94: aa:ee:29:89:c1:e0:2b:c2:59:a1:04:3e:a7:2e:ca:39:e9:c8: 2e:23:6f:54:d0:ae:67:3c:18:49:99:1d:81:8a:45:57:f0:18: 3f:bc:6a:b4:c1:7f:9b:72:58:a9:06:f8:81:75:74:cc:7a:5b: 4a:5d:b3:33:76:15:10:11:1d:d2:d3:ee:d8:96:68:d3:b4:3f: cc:1d:72:d1:35:1d:15:ec:8b:34:1d:ac:f4:8e:72:b8:2f:f8: b3:b9:5e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcJaaHy3p0iaMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmE4NWM0OGYtNzMwOS00NjFiLWI5NmUtMTg5NWQ5MmI3Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgKCzUPlDiU+bQL2msi+rym1glOC4R8rSbJ +9zL4Yk565KGYzz3JE7JB7RjlnfGhXRgc4bPJM7Tn3oViKiwVH9cS+wYvtVgW5n0 OMsJlyXf3+gq9tjpUmGBJEZTA6lgWIk19TpZwtYW/yC3cNp7wB3MhoKdQQa5rqfX QH0MxXwSGmwPyEEnyXOT+DRcil7kRBdHQm5ZQC7lLof9FxVc/J4csG7Sisj1tliH oIXXYJaZV9YvkvxuywULP+iWT33CTrZXVhMec6ywNp1mUxS9AYVVq5Sy73aLl5VE 9RS3m5lBimH/AmtCxVzPaJQZb5+vSj4MIBMPxFtpwV30Qrs/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGagLthtCWa8dOIg/OqowgScO843MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTljOWYwMzYtYjk2Yy0z ZjhmLThmMTUtYzNlNDM1MDIzMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpuxZjjnY8Oztqhf3y/5NHONhaGyUf0MzUIBnmHU9KhYuaMfOnxgwNp prO+RWvpSx27ooIId5ViINlY4rxsO2tgDh48mnuVdU32Re5v+3PoR+waF2NJmOJ5 3bt/T7lT73Etdu3NHpNOtgndzECRenQL1KWe/nvk5O2ikN8ME4XqePiloqF3xXNo arLD+1BClJSclz2+mRCfe2Absae0Wep0lKruKYnB4CvCWaEEPqcuyjnpyC4jb1TQ rmc8GEmZHYGKRVfwGD+8arTBf5tyWKkG+IF1dMx6W0pdszN2FRARHdLT7tiWaNO0 P8wdctE1HRXsizQdrPSOcrgv+LO5Xpc= -----END CERTIFICATE-----Generated at Mon Sep 28 21:52:12 2026 by rpki-client