$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa File: a4216241-8789-3504-8e99-5bd2f64d40a4.roa (raw, json) Hash identifier: D/ueRdqnYERhJbQV6ARsi+pxUAQcXORwRVmhp8MPBeU= Subject key identifier: 48:D9:76:2D:D2:9D:D9:EF:44:17:80:46:62:5C:33:D6:0A:57:12:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCB99C284051A0E1C6A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.189.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:cb:99:c2:84:05:1a:0e:1c:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=193a7095-a8c0-47fa-bf42-7996c6d5256a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:1e:fc:98:24:31:a5:64:5e:60:39:a9:da: 2e:bc:b3:f6:e2:14:8c:08:ef:64:06:3f:80:7f:da: 66:8b:0c:7a:96:7d:70:11:6e:7f:8c:ed:96:92:28: 05:6b:f3:fa:74:56:5c:73:08:a0:6c:8e:45:65:f7: e1:6e:f8:83:7c:c4:2c:e1:2e:a2:e0:ac:1d:2a:d8: d1:21:87:d1:4d:5a:93:97:e9:cb:cb:0f:de:10:02: 88:83:18:1c:2e:ca:76:48:bb:cf:15:1c:92:36:5b: 64:86:df:9f:4d:cc:33:f8:3c:02:02:dd:28:50:9c: 3c:6e:05:4c:99:13:c4:16:6f:c2:02:10:c1:b0:3f: d4:90:03:70:23:29:8f:9e:b8:d8:0e:b2:52:68:fb: 6d:c4:2b:c6:54:5e:10:cd:dd:73:45:5d:dd:e0:58: 82:b1:28:bc:3a:6a:58:fb:23:d2:04:42:1b:a8:e8: 55:d3:24:39:5c:82:f9:4a:72:f4:a4:98:d9:c3:e1: 2d:0c:9c:68:74:05:7e:9b:8f:d9:01:f0:0f:30:26: 27:99:84:9b:ee:a4:74:b2:71:f0:f1:57:01:3d:a7: d5:b4:fd:e5:61:a4:60:30:22:be:90:94:7b:99:1e: a9:d3:21:12:6d:ab:e9:5a:ef:72:96:c0:b6:1d:27: 17:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D9:76:2D:D2:9D:D9:EF:44:17:80:46:62:5C:33:D6:0A:57:12:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:92:14:04:62:f3:32:b9:df:80:35:73:1e:4c:dd:76:ff:07: 8b:4c:6a:7f:ea:01:b9:ee:e4:ae:24:1b:4f:5d:cc:05:af:9c: 0e:92:69:4b:f6:ce:89:3a:43:7b:10:7b:72:16:22:77:dc:3b: 1d:07:20:88:ff:cc:b1:1b:83:d8:6e:55:c4:af:af:f9:b3:42: ae:15:dc:fa:4b:2a:11:88:37:20:0d:27:0c:bc:eb:c1:e6:72: 0b:e7:6b:17:86:c6:95:c9:41:2b:bc:9a:38:e2:b3:79:a2:75: 17:ca:6f:92:3f:9a:fd:3a:f7:2d:b3:cf:66:60:16:33:7a:1f: 8e:72:15:aa:74:92:10:67:e2:90:fb:69:36:46:7a:ae:01:04: 2f:16:a3:98:2a:c2:12:ee:0c:18:43:f1:1d:49:23:4c:72:ec: a3:0a:4e:97:ba:de:d7:2b:fd:5b:0c:b2:a8:ee:65:36:13:9b: 45:34:bc:41:22:b8:9d:2a:f3:c3:6c:e4:04:e4:fb:e1:66:4f: 59:2d:e5:7c:dd:a6:48:15:d2:a4:3e:f9:9d:04:c1:1c:fb:1d: 96:99:af:a7:8b:52:74:f3:dc:29:cd:b1:f3:2c:42:f8:d0:1b: 05:1a:9c:de:71:6c:00:33:4a:62:a6:f8:29:c7:4d:0e:3b:98: 03:9e:97:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcuZwoQFGg4caoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTkzYTcwOTUtYThjMC00N2ZhLWJmNDItNzk5NmM2ZDUyNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLge/JgkMaVkXmA5qdouvLP24hSMCO9kBj+A f9pmiwx6ln1wEW5/jO2WkigFa/P6dFZccwigbI5FZffhbviDfMQs4S6i4KwdKtjR IYfRTVqTl+nLyw/eEAKIgxgcLsp2SLvPFRySNltkht+fTcwz+DwCAt0oUJw8bgVM mRPEFm/CAhDBsD/UkANwIymPnrjYDrJSaPttxCvGVF4Qzd1zRV3d4FiCsSi8OmpY +yPSBEIbqOhV0yQ5XIL5SnL0pJjZw+EtDJxodAV+m4/ZAfAPMCYnmYSb7qR0snHw 8VcBPafVtP3lYaRgMCK+kJR7mR6p0yESbavpWu9ylsC2HScXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjZdi3SndnvRBeARmJcM9YKVxJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQyMTYyNDEtODc4OS0z NTA0LThlOTktNWJkMmY2NGQ0MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI72gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWSFARi8zK534A1cx5M3Xb/B4tMan/qAbnu5K4kG09dzAWvnA6SaUv2 zok6Q3sQe3IWInfcOx0HIIj/zLEbg9huVcSvr/mzQq4V3PpLKhGINyANJwy868Hm cgvnaxeGxpXJQSu8mjjis3midRfKb5I/mv069y2zz2ZgFjN6H45yFap0khBn4pD7 aTZGeq4BBC8Wo5gqwhLuDBhD8R1JI0xy7KMKTpe63tcr/VsMsqjuZTYTm0U0vEEi uJ0q88Ns5ATk++FmT1kt5XzdpkgV0qQ++Z0EwRz7HZaZr6eLUnTz3CnNsfMsQvjQ GwUanN5xbAAzSmKm+CnHTQ47mAOel90= -----END CERTIFICATE-----Generated at Mon Sep 28 08:42:58 2026 by rpki-client