$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e7f1a9b-456a-33de-9f84-02a708243ab6.roa File: 9e7f1a9b-456a-33de-9f84-02a708243ab6.roa (raw, json) Hash identifier: 1yjPQrsWo3k8EuPtAjqNTnoNP4f70mucAwnbjmGx46g= Subject key identifier: C5:CE:1C:1D:E4:87:8C:14:87:42:A0:85:2B:55:F5:AE:94:41:D1:40 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCA067492BE79648F0180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e7f1a9b-456a-33de-9f84-02a708243ab6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.188.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ca:06:74:92:be:79:64:8f:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0706f97a-34ca-4cc1-aac8-96e20f6da7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fd:28:72:5b:f9:79:d4:77:d1:7a:43:13:47: bc:80:88:fb:93:87:ff:75:22:69:89:8e:02:51:99: 05:98:82:98:9d:4d:e1:a2:5d:d1:64:15:ce:12:50: 15:f8:2c:f6:54:ac:c4:9f:6a:3c:37:fc:62:e1:e9: 9b:f9:7a:31:43:08:fd:93:83:6c:10:21:82:a7:7e: f7:54:fb:2b:d5:a5:04:5f:cb:ba:86:44:52:03:7a: f0:24:39:82:30:ee:0d:96:1a:58:77:7f:5c:9b:c8: cb:46:54:4c:38:e9:68:a1:82:35:0e:4c:95:c4:47: d9:82:0b:9a:e9:bb:13:b8:5b:80:ee:3d:70:a2:a3: f4:63:65:cc:4c:a5:f0:06:df:d4:40:34:e1:4e:93: f4:95:40:35:74:b3:68:51:7e:fa:d8:c7:79:64:65: e5:3e:1c:39:0b:99:06:ee:6a:d0:4f:5f:bb:05:a2: a5:1c:78:d6:67:3b:4e:8f:91:61:d2:d2:d4:48:5d: aa:a9:c0:d9:a7:75:35:f2:97:fc:0a:f7:8a:5e:24: 23:c8:81:06:a4:87:a9:3f:18:0e:f9:40:15:43:47: 6e:1d:27:75:73:8d:3e:46:06:71:79:96:e7:43:19: d3:b1:ba:f6:14:bf:a2:43:da:e5:3e:1c:ce:7a:f8: cf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CE:1C:1D:E4:87:8C:14:87:42:A0:85:2B:55:F5:AE:94:41:D1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e7f1a9b-456a-33de-9f84-02a708243ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6f:4b:51:af:2f:5a:82:a8:c0:78:8b:ff:d5:e9:e2:2c:ab: 3e:3f:c6:57:4f:f5:97:b2:26:2d:9a:02:d0:5a:a1:5f:9c:b4: 66:41:92:bb:82:62:f9:83:8c:d2:d5:b5:fa:54:fb:cf:06:cd: 40:d9:4c:a6:5c:46:4d:2c:43:2d:4c:35:e6:35:13:ea:72:1e: 22:6e:56:7a:58:9f:d5:5f:43:b7:e9:cd:0b:61:c1:9d:c4:e5: db:6d:00:92:b7:ed:8b:12:20:e6:69:6c:57:61:e5:04:fd:82: b6:95:75:c4:ff:66:ff:b6:9b:51:fe:5e:28:02:3e:da:61:76: 27:d2:55:39:f0:f5:b2:db:ba:e5:b6:44:4a:12:18:63:c8:ee: ab:f1:2d:ec:6a:9e:1d:95:32:36:3b:83:46:f7:f0:25:ac:33: 20:c0:c1:f7:90:cd:80:6b:b6:f5:6e:ba:43:a8:68:3e:fd:96: 06:c0:d4:26:c1:22:85:64:f2:5a:ea:25:a7:52:01:7e:4e:be: 4e:d6:25:bf:2a:ea:da:1f:be:da:1f:06:da:82:b0:d6:16:ea: dc:50:d6:9c:fc:f4:e6:fc:1c:95:6d:9a:e1:4b:28:00:f0:56: 8f:42:59:77:87:10:0f:6f:3a:a4:1c:ac:3b:43:da:0b:39:fe: 7e:96:d7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcoGdJK+eWSPAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDcwNmY5N2EtMzRjYS00Y2MxLWFhYzgtOTZlMjBmNmRhN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf0oclv5edR30XpDE0e8gIj7k4f/dSJpiY4C UZkFmIKYnU3hol3RZBXOElAV+Cz2VKzEn2o8N/xi4emb+XoxQwj9k4NsECGCp373 VPsr1aUEX8u6hkRSA3rwJDmCMO4NlhpYd39cm8jLRlRMOOlooYI1DkyVxEfZggua 6bsTuFuA7j1woqP0Y2XMTKXwBt/UQDThTpP0lUA1dLNoUX762Md5ZGXlPhw5C5kG 7mrQT1+7BaKlHHjWZztOj5Fh0tLUSF2qqcDZp3U18pf8CveKXiQjyIEGpIepPxgO +UAVQ0duHSd1c40+RgZxeZbnQxnTsbr2FL+iQ9rlPhzOevjPWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXOHB3kh4wUh0KghStV9a6UQdFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWU3ZjFhOWItNDU2YS0z M2RlLTlmODQtMDJhNzA4MjQzYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFvS1GvL1qCqMB4i//V6eIsqz4/xldP9ZeyJi2aAtBaoV+ctGZBkruC YvmDjNLVtfpU+88GzUDZTKZcRk0sQy1MNeY1E+pyHiJuVnpYn9VfQ7fpzQthwZ3E 5dttAJK37YsSIOZpbFdh5QT9graVdcT/Zv+2m1H+XigCPtphdifSVTnw9bLbuuW2 REoSGGPI7qvxLexqnh2VMjY7g0b38CWsMyDAwfeQzYBrtvVuukOoaD79lgbA1CbB IoVk8lrqJadSAX5Ovk7WJb8q6tofvtofBtqCsNYW6txQ1pz89Ob8HJVtmuFLKADw Vo9CWXeHEA9vOqQcrDtD2gs5/n6W18o= -----END CERTIFICATE-----Generated at Sat Oct 3 10:57:26 2026 by rpki-client