$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa File: b2678a67-8ef4-3062-adc8-762daaa2d576.roa (raw, json) Hash identifier: Hf1aCaVdHnCmHK8yK/BfRBqXC25OTuSzrlPW7SgTBkE= Subject key identifier: 5B:FC:AA:C3:BF:F1:8B:7B:F9:BD:1A:AD:FF:F2:6C:83:DE:11:04:B9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBEFA4EC446E7A330AD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.203.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:be:fa:4e:c4:46:e7:a3:30:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e8938cd9-5089-46f3-957f-a78d61b46837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:86:31:dc:6b:c3:fb:b1:b4:f0:26:aa:f1:14: 7a:5e:2a:09:e6:dc:66:f1:58:43:a2:cb:2b:e0:5b: 26:3c:81:66:08:f4:93:b0:ff:f2:c7:88:cc:88:6e: 64:7d:e0:c1:1d:de:ff:54:f2:7c:72:2c:8b:a1:63: ab:52:42:85:b9:f9:33:00:d7:f3:7a:9e:36:95:3f: 5e:1b:37:96:43:7a:ef:4a:4b:41:42:a4:5f:be:75: 16:ac:62:50:ca:51:4c:1d:81:2b:c5:77:9b:1b:f5: 38:5f:f4:64:e3:19:ea:a7:42:07:64:b4:07:bc:89: fb:a3:00:2e:27:ca:66:66:59:31:ce:fa:65:1a:59: cb:1f:be:03:4f:86:71:df:8c:d3:24:1f:7a:7f:40: 83:57:f8:3a:b3:2f:03:ef:62:70:b8:5f:7e:e0:0f: fe:d7:0c:ea:a6:62:ed:b8:f9:3c:ca:61:1c:0b:28: a3:d7:5a:3b:b5:e6:fb:f2:9f:cd:d1:1e:ab:4a:fe: bf:44:6a:cf:47:c4:26:f0:31:42:b0:d0:fc:b7:e1: 8f:1d:4b:d4:48:2c:3a:0f:92:ac:8e:27:40:30:b8: 7f:e7:91:2e:6f:5b:94:62:99:45:72:38:54:67:ba: 2a:aa:d9:cc:20:a0:ad:17:1b:5e:65:f9:cb:25:a1: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FC:AA:C3:BF:F1:8B:7B:F9:BD:1A:AD:FF:F2:6C:83:DE:11:04:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5a:64:5b:b0:4b:56:7e:c6:ba:59:ae:77:cb:3d:3a:91:eb: e5:ba:2c:22:9c:50:db:4b:20:18:5e:7e:04:79:ff:6d:3e:e8: 2a:df:29:1c:70:94:d2:c8:51:69:21:e1:57:c8:aa:57:10:56: c8:1d:69:6b:91:05:23:74:55:a9:c0:95:c1:6e:fb:55:92:8b: f1:63:00:c5:94:76:e2:15:bd:2f:86:02:4e:5f:5a:f5:a1:6a: d2:3a:19:79:ec:95:35:81:0c:ee:a6:83:e0:b9:14:d1:36:7b: 89:d4:d2:de:d0:ab:a8:6d:46:a0:aa:16:11:7d:55:f0:ef:b5: d6:79:fa:4f:e5:de:72:cb:c3:80:08:e9:a1:55:c7:8d:ee:f7: 4a:10:49:11:e1:9a:7e:8c:42:40:f4:9b:58:ba:2b:85:12:49: f8:fc:3a:6f:e2:3e:cb:44:4f:96:2c:d7:4d:19:a9:d1:60:a4: af:2b:32:d4:87:84:08:8f:f4:86:04:ba:0d:f0:31:de:68:16: b9:49:a3:f0:3a:7a:25:49:fa:1f:6b:4e:b5:4e:7d:ea:52:1e: b3:20:17:f7:11:7b:bf:c4:c9:81:43:40:91:9a:7c:e3:e8:48: 57:fc:12:ed:aa:d5:53:f2:7b:ff:bf:74:c7:58:90:fe:ba:5c: bc:8b:ad:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb76TsRG56MwrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTg5MzhjZDktNTA4OS00NmYzLTk1N2YtYTc4ZDYxYjQ2ODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54Yx3GvD+7G08Caq8RR6XioJ5txm8VhDossr 4FsmPIFmCPSTsP/yx4jMiG5kfeDBHd7/VPJ8ciyLoWOrUkKFufkzANfzep42lT9e GzeWQ3rvSktBQqRfvnUWrGJQylFMHYErxXebG/U4X/Rk4xnqp0IHZLQHvIn7owAu J8pmZlkxzvplGlnLH74DT4Zx34zTJB96f0CDV/g6sy8D72JwuF9+4A/+1wzqpmLt uPk8ymEcCyij11o7teb78p/N0R6rSv6/RGrPR8Qm8DFCsND8t+GPHUvUSCw6D5Ks jidAMLh/55Eub1uUYplFcjhUZ7oqqtnMIKCtFxteZfnLJaEWJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv8qsO/8Yt7+b0arf/ybIPeEQS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjI2NzhhNjctOGVmNC0z MDYyLWFkYzgtNzYyZGFhYTJkNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1aZFuwS1Z+xrpZrnfLPTqR6+W6LCKcUNtLIBhefgR5/20+6CrfKRxw lNLIUWkh4VfIqlcQVsgdaWuRBSN0VanAlcFu+1WSi/FjAMWUduIVvS+GAk5fWvWh atI6GXnslTWBDO6mg+C5FNE2e4nU0t7Qq6htRqCqFhF9VfDvtdZ5+k/l3nLLw4AI 6aFVx43u90oQSRHhmn6MQkD0m1i6K4USSfj8Om/iPstET5Ys100ZqdFgpK8rMtSH hAiP9IYEug3wMd5oFrlJo/A6eiVJ+h9rTrVOfepSHrMgF/cRe7/EyYFDQJGafOPo SFf8Eu2q1VPye/+/dMdYkP66XLyLrQU= -----END CERTIFICATE-----Generated at Tue Sep 29 23:26:18 2026 by rpki-client