$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa File: a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa (raw, json) Hash identifier: jpxR96MCOyrdK0ZG1NwebeA+LFuZGbKD+CBFWlccBZQ= Subject key identifier: 32:47:22:84:7C:0C:03:67:19:23:9C:BF:BC:12:6F:05:B2:77:98:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA7F749C2891721E73E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.245.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a7:f7:49:c2:89:17:21:e7:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cfcb29b0-465b-457d-9927-a0308afad981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:38:36:47:2f:c8:31:df:c4:8f:f6:02:93: 58:d0:9c:0e:02:26:e0:ac:5a:18:1a:87:2a:07:c7: 34:ae:a3:3d:f6:ab:54:d5:06:0c:f0:fb:c3:8c:76: 29:e4:8a:4a:42:c6:aa:8f:3e:dd:7f:df:41:cf:86: 86:de:b2:a8:3e:03:df:a3:3d:c6:a5:f4:65:a3:4b: 8b:44:c1:df:c0:f8:e2:30:54:f6:f1:37:54:5b:fa: 26:f9:0a:af:06:02:ec:2c:2d:b0:22:17:80:1c:d8: 1c:b8:07:98:7b:69:c1:39:c2:cb:a0:6d:ba:e0:52: 1a:13:23:a8:2c:13:04:fe:8e:48:b1:f5:b8:60:66: a7:e8:ac:fa:9a:a3:78:25:f4:65:a7:bb:a5:51:0e: 65:12:fd:06:6d:8a:7f:df:c3:12:a1:f6:95:8e:2e: d2:4e:99:1f:f8:b4:28:cf:f2:2c:07:4d:e5:bb:aa: a9:3b:26:47:8e:a9:1a:fb:fa:56:bf:28:cb:4f:e0: 93:d0:c0:00:2a:29:42:ff:aa:e2:3e:25:85:cf:1e: 6d:46:d1:49:f2:c7:84:ce:18:ce:00:40:52:8d:e5: a0:7c:bd:a4:3d:c6:e4:37:32:bc:df:5e:5a:34:31: be:de:65:2e:c4:11:34:08:76:82:3b:37:d4:cb:bd: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:47:22:84:7C:0C:03:67:19:23:9C:BF:BC:12:6F:05:B2:77:98:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3acf67e-140c-31cd-9ba1-e355a0e98c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.245.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:11:e3:b8:6a:62:59:a1:6b:d5:b6:62:1b:bd:d0:df:5b:ea: 0f:87:23:d0:4d:19:cb:d6:3d:14:a0:d2:35:97:27:e7:48:f4: 43:4f:5f:55:53:4c:8f:38:2a:38:78:75:fc:a3:47:91:eb:ed: 30:c1:d2:da:13:57:15:fe:7f:f1:b7:8a:ad:c9:fc:3a:14:70: 52:25:08:88:8a:c8:f9:e7:07:30:df:68:83:3a:cc:4c:1e:71: ed:22:9f:43:39:5b:86:d8:b3:71:da:d4:1e:54:1e:a6:3b:2d: bb:69:61:86:4b:ea:46:24:e8:ff:4b:5c:d4:e0:b5:73:bd:b4: 8c:c2:c8:44:0a:ae:49:29:64:d0:09:82:09:7c:5a:e6:56:dc: 02:ef:36:7b:4c:ec:9d:29:96:1b:8f:bd:5a:cd:ad:ca:b9:e9: 10:d1:c5:a2:a9:de:2c:ab:13:07:21:ca:ee:91:12:97:01:5d: 91:d5:6d:8b:8b:56:61:f3:4c:63:41:5a:bc:4d:3d:ec:ff:42: 77:4f:bb:c7:7a:3c:51:eb:54:64:b1:c5:72:f1:92:da:69:ca: 23:5d:08:c8:1a:25:f5:39:d9:74:bf:cb:5a:ce:85:4e:ab:9c: 31:4f:41:5b:c7:c1:a0:dc:fa:1e:fb:3c:00:2a:53:05:b3:c1: 42:25:ca:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaf3ScKJFyHnPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2ZjYjI5YjAtNDY1Yi00NTdkLTk5MjctYTAzMDhhZmFkOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02U4NkcvyDHfxI/2ApNY0JwOAibgrFoYGocq B8c0rqM99qtU1QYM8PvDjHYp5IpKQsaqjz7df99Bz4aG3rKoPgPfoz3GpfRlo0uL RMHfwPjiMFT28TdUW/om+QqvBgLsLC2wIheAHNgcuAeYe2nBOcLLoG264FIaEyOo LBME/o5IsfW4YGan6Kz6mqN4JfRlp7ulUQ5lEv0GbYp/38MSofaVji7STpkf+LQo z/IsB03lu6qpOyZHjqka+/pWvyjLT+CT0MAAKilC/6riPiWFzx5tRtFJ8seEzhjO AEBSjeWgfL2kPcbkNzK8315aNDG+3mUuxBE0CHaCOzfUy73vWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJHIoR8DANnGSOcv7wSbwWyd5jwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTNhY2Y2N2UtMTQwYy0z MWNkLTliYTEtZTM1NWEwZTk4YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQR47hqYlmha9W2Yhu90N9b6g+HI9BNGcvWPRSg0jWXJ+dI9ENPX1VT TI84Kjh4dfyjR5Hr7TDB0toTVxX+f/G3iq3J/DoUcFIlCIiKyPnnBzDfaIM6zEwe ce0in0M5W4bYs3Ha1B5UHqY7LbtpYYZL6kYk6P9LXNTgtXO9tIzCyEQKrkkpZNAJ ggl8WuZW3ALvNntM7J0plhuPvVrNrcq56RDRxaKp3iyrEwchyu6REpcBXZHVbYuL VmHzTGNBWrxNPez/QndPu8d6PFHrVGSxxXLxktppyiNdCMgaJfU52XS/y1rOhU6r nDFPQVvHwaDc+h77PAAqUwWzwUIlyg0= -----END CERTIFICATE-----Generated at Wed Sep 30 07:51:19 2026 by rpki-client