$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa File: a31dff1c-139d-388a-a3e6-347acb99e941.roa (raw, json) Hash identifier: KDURiwxe2qcq/F9wYOTLvX2O+WxKxBO0MLFVs3l9MPM= Subject key identifier: 0E:51:CD:C7:44:B3:12:D7:06:E3:AC:23:23:5C:42:DB:8E:5C:76:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D843922EB740B69ED07D8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.243.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:84:39:22:eb:74:0b:69:ed:07:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=328a27dd-4096-4cbb-a235-be8b86252923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:23:51:5b:cb:0c:dc:8b:64:3c:fa:9d:05: 5f:cc:19:38:a9:15:45:80:66:f8:19:95:ad:51:05: 33:6e:bf:6d:61:43:02:b3:f7:b3:97:ad:d0:21:d1: 12:49:e7:5a:3a:7b:1e:af:12:af:12:8f:66:a9:ec: 82:e7:b5:18:54:fb:48:cb:82:fb:25:38:4e:2e:78: c0:53:3d:3e:85:d1:ec:aa:3d:b4:0a:09:04:34:b7: 49:85:47:d5:86:d5:06:1f:af:50:27:79:32:c1:10: e6:b8:43:b6:51:8e:36:a3:b5:a3:58:48:4a:c2:62: 23:08:c6:5b:2f:a4:f1:39:89:02:4e:78:e7:7f:e1: c7:1f:a1:03:84:a4:a4:6d:c2:ba:5a:d4:30:cb:1a: ca:57:07:cc:24:96:60:db:59:31:97:14:a2:65:67: 20:f3:12:4a:b7:fa:35:38:9c:8a:75:16:9b:70:2b: 91:be:f2:7f:be:30:e4:38:3d:e4:10:7d:20:53:6a: 04:bd:d2:5b:c4:2e:8a:3f:4b:54:dd:e7:04:59:83: 20:38:03:82:a6:60:2a:44:29:40:1b:f9:db:05:5c: aa:ed:b5:5c:90:52:97:0e:56:a1:32:7c:fa:de:51: cf:31:8a:0b:d7:42:26:63:9b:f8:d8:74:44:5b:fd: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:51:CD:C7:44:B3:12:D7:06:E3:AC:23:23:5C:42:DB:8E:5C:76:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8d:79:2e:84:2f:28:67:39:03:c8:f3:f4:35:53:a4:8a:fa: d3:1b:f6:c6:f2:ef:0a:2f:33:b4:2a:2d:08:38:9d:12:09:62: 5c:a4:a9:35:99:ca:cc:cb:86:78:57:fb:2b:6e:38:d9:c8:d4: c0:3c:54:6d:66:af:2b:42:60:15:1f:85:7f:43:d3:8c:8a:cd: f5:d6:e9:fa:2b:e8:de:d4:e7:d8:ad:08:d0:8a:b0:14:6e:c0: 0d:e8:80:80:37:3f:47:18:bf:dd:04:49:de:a1:d7:8a:27:fb: 41:b7:33:d8:e7:ff:6b:9e:14:fa:23:a3:6b:b6:91:24:3b:17: 1e:f5:06:24:ee:58:60:ff:bd:52:07:ff:ee:29:41:fa:aa:62: f9:16:cb:01:2e:bf:9a:0e:f0:f5:f3:25:ae:71:a5:19:6e:61: e0:72:4c:c7:d7:90:ad:df:a5:05:8d:18:87:e6:09:72:9b:da: 1e:47:5d:f4:74:47:1f:a9:6e:26:a3:36:bd:eb:19:3a:dc:0d: 64:51:c8:09:2c:2b:f4:4c:1b:93:57:4c:82:e2:cb:21:ea:85: 21:9f:37:0f:cf:62:1c:68:f7:c7:f2:ed:d3:b0:04:1a:74:7c: 24:32:c2:d4:93:c7:50:59:08:0d:82:31:b0:ee:6e:90:2e:64: 59:b9:be:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYQ5Iut0C2ntB9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzI4YTI3ZGQtNDA5Ni00Y2JiLWEyMzUtYmU4Yjg2MjUyOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iUjUVvLDNyLZDz6nQVfzBk4qRVFgGb4GZWt UQUzbr9tYUMCs/ezl63QIdESSedaOnserxKvEo9mqeyC57UYVPtIy4L7JThOLnjA Uz0+hdHsqj20CgkENLdJhUfVhtUGH69QJ3kywRDmuEO2UY42o7WjWEhKwmIjCMZb L6TxOYkCTnjnf+HHH6EDhKSkbcK6WtQwyxrKVwfMJJZg21kxlxSiZWcg8xJKt/o1 OJyKdRabcCuRvvJ/vjDkOD3kEH0gU2oEvdJbxC6KP0tU3ecEWYMgOAOCpmAqRClA G/nbBVyq7bVckFKXDlahMnz63lHPMYoL10ImY5v42HREW/1ZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5RzcdEsxLXBuOsIyNcQtuOXHaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTMxZGZmMWMtMTM5ZC0z ODhhLWEzZTYtMzQ3YWNiOTllOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6NeS6ELyhnOQPI8/Q1U6SK+tMb9sby7wovM7QqLQg4nRIJYlykqTWZ yszLhnhX+ytuONnI1MA8VG1mrytCYBUfhX9D04yKzfXW6for6N7U59itCNCKsBRu wA3ogIA3P0cYv90ESd6h14on+0G3M9jn/2ueFPojo2u2kSQ7Fx71BiTuWGD/vVIH /+4pQfqqYvkWywEuv5oO8PXzJa5xpRluYeByTMfXkK3fpQWNGIfmCXKb2h5HXfR0 Rx+pbiajNr3rGTrcDWRRyAksK/RMG5NXTILiyyHqhSGfNw/PYhxo98fy7dOwBBp0 fCQywtSTx1BZCA2CMbDubpAuZFm5vsg= -----END CERTIFICATE-----Generated at Mon Sep 28 22:58:19 2026 by rpki-client