$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f0c6913-6d92-3c32-b9e0-ba7a053c9e6a.roa File: 9f0c6913-6d92-3c32-b9e0-ba7a053c9e6a.roa (raw, json) Hash identifier: 7ZjTVt2AXpVuW0iIrMb7uJ03ZWA4rk4G41xtJ3h2TRU= Subject key identifier: 3E:F2:FC:9D:84:D1:93:6A:33:41:5C:F2:F7:70:D2:68:3B:F1:1A:5D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC9C227D93F8FE9FDBA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f0c6913-6d92-3c32-b9e0-ba7a053c9e6a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.234.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c9:c2:27:d9:3f:8f:e9:fd:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c0ef2642-0bd7-4a17-975f-09a34ba9f8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:be:c5:68:32:22:75:29:7c:9a:3b:dc:70:0f: 06:e4:45:1f:c6:78:76:64:9d:f4:49:b7:ad:b5:c5: 8f:a9:21:97:d1:07:e8:d2:2c:a1:39:4b:de:2c:a0: 95:46:87:bb:fe:c6:83:b4:9f:67:3d:75:f3:25:26: e8:77:69:63:d6:5d:af:59:63:34:2e:93:f6:e6:76: 0d:7f:dd:9c:07:3b:8c:8b:3a:98:6b:71:7f:28:65: f8:2b:96:25:3f:c1:20:f8:38:92:5c:e7:ec:56:7a: 1f:d2:46:1d:fe:a2:33:c1:af:b1:e3:6a:ff:3a:84: fe:56:16:02:be:30:29:7e:3d:d1:8f:01:d6:f5:f6: 39:83:c4:ef:0e:84:33:59:21:bf:2e:36:8c:c5:3e: 8a:4a:52:17:45:97:a2:35:85:0b:32:57:e0:29:a3: ff:21:46:e4:e4:bd:1c:13:c0:5c:25:02:d7:70:ef: c6:13:ce:cf:f7:39:d8:f6:1c:77:c9:75:c9:47:58: a4:36:16:65:0d:13:08:66:39:89:1e:0c:15:ce:f7: 3e:5d:03:77:bc:85:2d:55:a2:20:1d:68:54:b7:07: 20:27:11:b3:be:11:12:ae:7b:71:87:63:29:9f:8f: 9d:4c:06:d8:27:f6:e9:b1:55:b2:0c:6d:a7:92:dc: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F2:FC:9D:84:D1:93:6A:33:41:5C:F2:F7:70:D2:68:3B:F1:1A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f0c6913-6d92-3c32-b9e0-ba7a053c9e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.234.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:82:28:9b:bb:68:0e:04:db:ad:9b:19:79:e0:38:0f:dc:9f: ca:9e:b4:aa:b7:20:b4:86:24:04:bb:61:34:ec:5e:0b:a0:46: 98:09:20:3c:30:c0:e3:53:d7:ce:a2:33:96:9a:44:aa:42:72: 9d:9d:db:c1:f7:1c:7a:e4:6c:08:4e:5f:36:06:93:51:77:e5: 9e:d9:f7:61:ec:61:32:3b:41:c8:49:65:8e:96:1c:26:eb:b1: 12:06:6c:71:e9:77:12:66:70:5c:fd:94:4a:f1:ac:93:92:08: 99:cd:66:0f:2b:48:9d:c3:dc:77:67:a4:c7:69:ca:34:56:00: 1a:14:d6:5b:f8:82:f9:f2:3a:ff:0b:59:1a:08:2e:b4:b4:96: ec:f3:87:3e:de:6e:f9:51:5f:c7:57:ba:e2:39:2e:63:5b:17: 21:53:44:df:a9:de:d0:f7:bc:30:ba:94:48:9e:a5:03:ad:f3: 16:f8:08:07:f5:f0:fb:f0:43:ef:a9:ac:8f:31:96:df:d0:51: 3b:4a:0d:a0:d1:92:ac:e7:55:09:bd:79:ac:c3:4b:aa:86:65: c6:89:4b:4c:1e:85:dd:99:d1:f1:aa:5a:00:a5:2e:0b:60:ca: a2:8f:d1:75:0c:89:dd:c4:8d:09:89:5c:5b:67:f6:91:03:27: 2f:65:ef:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcnCJ9k/j+n9uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzBlZjI2NDItMGJkNy00YTE3LTk3NWYtMDlhMzRiYTlmOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb7FaDIidSl8mjvccA8G5EUfxnh2ZJ30Sbet tcWPqSGX0Qfo0iyhOUveLKCVRoe7/saDtJ9nPXXzJSbod2lj1l2vWWM0LpP25nYN f92cBzuMizqYa3F/KGX4K5YlP8Eg+DiSXOfsVnof0kYd/qIzwa+x42r/OoT+VhYC vjApfj3RjwHW9fY5g8TvDoQzWSG/LjaMxT6KSlIXRZeiNYULMlfgKaP/IUbk5L0c E8BcJQLXcO/GE87P9znY9hx3yXXJR1ikNhZlDRMIZjmJHgwVzvc+XQN3vIUtVaIg HWhUtwcgJxGzvhESrntxh2Mpn4+dTAbYJ/bpsVWyDG2nktx1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7y/J2E0ZNqM0Fc8vdw0mg78RpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWYwYzY5MTMtNmQ5Mi0z YzMyLWI5ZTAtYmE3YTA1M2M5ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaCKJu7aA4E262bGXngOA/cn8qetKq3ILSGJAS7YTTsXgugRpgJIDww wONT186iM5aaRKpCcp2d28H3HHrkbAhOXzYGk1F35Z7Z92HsYTI7QchJZY6WHCbr sRIGbHHpdxJmcFz9lErxrJOSCJnNZg8rSJ3D3HdnpMdpyjRWABoU1lv4gvnyOv8L WRoILrS0luzzhz7ebvlRX8dXuuI5LmNbFyFTRN+p3tD3vDC6lEiepQOt8xb4CAf1 8PvwQ++prI8xlt/QUTtKDaDRkqznVQm9eazDS6qGZcaJS0wehd2Z0fGqWgClLgtg yqKP0XUMid3EjQmJXFtn9pEDJy9l7zc= -----END CERTIFICATE-----Generated at Tue Sep 29 00:07:38 2026 by rpki-client