$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa File: a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa (raw, json) Hash identifier: w1tXhO7d3e0ndQOe7QozXPtrvIAf3XJOc5kP+leyXFM= Subject key identifier: 29:25:88:3D:80:07:4D:31:6D:08:B2:BF:9F:DF:67:99:FA:BA:A0:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D81387C99A234BC5D8C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.240.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:81:38:7c:99:a2:34:bc:5d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5774ba00-21f7-4c34-aeb5-ecbf33ec95b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:1b:4f:52:35:eb:bc:8b:a2:1d:2e:99:0f: a2:78:85:34:8d:36:83:ea:fc:a3:09:24:1b:de:fb: 65:a8:86:b9:51:31:92:68:f1:91:71:db:6a:46:b7: dd:32:c8:a0:64:37:05:3b:c4:f2:d4:03:8b:eb:ce: 46:6f:94:0e:c1:ec:e5:5a:2c:d1:04:09:69:d3:c5: dd:5f:4a:80:e4:79:7a:61:8d:e0:c3:3b:d4:2f:67: 38:b7:b7:05:16:2b:50:22:73:49:f1:cc:d4:1b:2d: d2:1d:9c:b2:3c:c2:19:ee:12:47:d3:84:e9:ab:cd: e8:1e:99:69:f0:92:cf:8e:4c:0e:9e:41:86:e6:31: 0a:38:0a:2f:a2:69:8c:97:16:db:78:90:2e:77:97: b2:75:ae:85:f6:ea:de:1f:51:5a:27:08:46:43:bf: 54:1a:64:f1:42:3d:08:ab:d8:88:0c:f3:d7:3c:87: ea:7a:0f:06:ae:6d:35:fb:f7:f1:ef:47:92:45:24: 0b:48:6f:11:54:7c:25:bb:31:39:f4:95:8a:db:73: c2:a8:03:fe:7c:ee:42:39:03:cf:d4:ad:e1:50:fb: 8e:97:54:75:bd:60:c9:53:5c:42:0b:6d:84:32:9c: 0b:1a:45:82:75:a5:56:c9:2a:37:d3:99:ac:03:b4: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:25:88:3D:80:07:4D:31:6D:08:B2:BF:9F:DF:67:99:FA:BA:A0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e0:d4:98:3a:ea:54:4d:0f:d8:c8:c2:9f:0f:4a:cb:9f:b4: f1:27:c5:aa:86:f8:6b:3c:44:3d:b6:75:b4:7e:a3:c4:95:2a: e6:97:15:2e:40:c0:59:8c:20:02:fe:86:e3:18:f4:6c:82:00: 51:9f:dd:13:b2:96:e6:05:f4:65:f0:a4:56:c2:46:35:6a:7b: 6a:96:c0:c6:9b:4e:90:b3:e1:d7:aa:48:ec:1f:d6:e5:fd:88: bc:2f:ef:19:1e:7c:f5:7c:f9:89:7c:a4:27:d9:99:47:5d:c3: 76:2b:b7:d1:ae:f8:9e:d9:08:46:81:cc:b7:bf:8a:eb:e4:4f: 98:54:0c:c7:66:ae:98:80:f2:96:81:e5:07:c6:49:92:e4:eb: f4:77:d4:66:c4:90:62:ad:a7:98:b0:7c:f5:4d:8c:ab:b0:b8: cc:98:9a:ef:ac:4a:52:64:e4:d8:47:da:f8:38:5f:23:08:71: 8f:7f:15:60:91:df:8f:b3:b7:95:20:39:6b:ff:9a:7d:5d:30: 6e:56:f0:36:78:3d:7a:c5:b4:f9:13:9c:a9:af:da:7e:cb:22: 83:fb:c9:6a:d0:62:a7:ba:02:7f:50:a9:30:79:d4:7f:17:7c: db:05:65:b5:05:d5:2d:0e:01:df:7f:ff:2a:69:eb:a4:3d:3f: 15:85:3b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYE4fJmiNLxdjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTc3NGJhMDAtMjFmNy00YzM0LWFlYjUtZWNiZjMzZWM5NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFsbT1I167yLoh0umQ+ieIU0jTaD6vyjCSQb 3vtlqIa5UTGSaPGRcdtqRrfdMsigZDcFO8Ty1AOL685Gb5QOwezlWizRBAlp08Xd X0qA5Hl6YY3gwzvUL2c4t7cFFitQInNJ8czUGy3SHZyyPMIZ7hJH04Tpq83oHplp 8JLPjkwOnkGG5jEKOAovommMlxbbeJAud5eyda6F9ureH1FaJwhGQ79UGmTxQj0I q9iIDPPXPIfqeg8Grm01+/fx70eSRSQLSG8RVHwluzE59JWK23PCqAP+fO5COQPP 1K3hUPuOl1R1vWDJU1xCC22EMpwLGkWCdaVWySo305msA7TeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkliD2AB00xbQiyv5/fZ5n6uqDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRhYTIzMGEtZTQ2NC0z ZWFkLWE1NDMtMTNlOGQ3YTNkZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzg1Jg66lRND9jIwp8PSsuftPEnxaqG+Gs8RD22dbR+o8SVKuaXFS5A wFmMIAL+huMY9GyCAFGf3ROyluYF9GXwpFbCRjVqe2qWwMabTpCz4deqSOwf1uX9 iLwv7xkefPV8+Yl8pCfZmUddw3Yrt9Gu+J7ZCEaBzLe/iuvkT5hUDMdmrpiA8paB 5QfGSZLk6/R31GbEkGKtp5iwfPVNjKuwuMyYmu+sSlJk5NhH2vg4XyMIcY9/FWCR 34+zt5UgOWv/mn1dMG5W8DZ4PXrFtPkTnKmv2n7LIoP7yWrQYqe6An9QqTB51H8X fNsFZbUF1S0OAd9//ypp66Q9PxWFO6s= -----END CERTIFICATE-----Generated at Tue Sep 29 03:59:42 2026 by rpki-client