$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5724680-d627-3a2f-8063-303a4d1575de.roa File: b5724680-d627-3a2f-8063-303a4d1575de.roa (raw, json) Hash identifier: PbbGsD2Nme1O7sBhdQ8vubFiEKbKtRbuaSW/bQfdyr4= Subject key identifier: B6:70:72:19:E2:28:06:69:93:51:24:A4:1B:56:C6:44:D9:06:2B:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC2F826A55EBC749C5400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5724680-d627-3a2f-8063-303a4d1575de.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.222.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c2:f8:26:a5:5e:bc:74:9c:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=48437b4e-c2ce-438f-9d77-278988ea53af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:82:42:d7:33:d9:21:52:2d:f6:ac:8b:52: 42:c4:d6:d5:59:1d:95:0c:08:95:6f:88:3b:d5:03: 46:c4:29:9f:31:ac:5f:05:d1:0a:19:15:50:1b:d4: 2f:7c:1c:4d:81:c6:a7:2f:e3:f4:bd:42:55:61:77: 80:76:0a:ab:bb:0f:26:34:3d:0d:61:97:a8:da:f1: f8:4e:16:41:ad:a4:50:c6:20:9c:cc:3a:df:9d:82: 56:c4:cc:b1:f6:3a:b9:d3:b8:5f:a3:0e:47:10:21: 16:5e:75:26:9a:83:6f:60:d4:62:85:79:e8:b1:02: da:43:63:27:96:34:3b:6a:23:36:86:52:b1:e6:51: 16:53:54:c7:f6:d4:4e:86:04:b7:07:b7:77:32:b8: ab:24:01:fe:5f:0c:8e:de:17:8d:c1:10:78:cc:61: 0c:86:cc:6e:1f:4a:c6:56:a4:b8:30:52:67:38:6d: 41:47:21:a8:dd:72:90:a9:32:f7:7a:7b:f6:c7:ff: dc:d4:01:cf:ef:e5:35:31:ee:6c:45:43:ff:b2:5b: f0:81:1d:a6:dd:a9:8d:de:b3:f2:9c:58:ea:ea:d2: 2c:59:32:eb:5e:19:29:16:a5:c2:c4:2f:f0:7c:16: 5b:fe:74:b8:ba:46:ed:ba:11:99:70:1f:5f:c2:d1: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:70:72:19:E2:28:06:69:93:51:24:A4:1B:56:C6:44:D9:06:2B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5724680-d627-3a2f-8063-303a4d1575de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ef:1f:b9:bd:83:ce:77:31:ac:83:af:fc:04:74:ad:c1:32: 1e:62:bf:82:6a:2c:e8:26:e0:9c:4c:8e:98:a4:14:34:e3:dd: 94:78:4b:df:9c:f8:86:68:1e:61:1d:02:23:96:04:b5:82:2d: 3d:4a:64:89:aa:70:f3:af:70:ff:7c:35:e2:af:23:8a:f5:1b: e4:b6:ae:de:7b:aa:a5:b2:e1:e8:50:53:a4:1f:c5:34:01:97: 2a:32:e3:77:bc:f7:46:83:9d:20:7f:58:fd:0b:86:ab:2c:61: a2:6d:16:02:63:60:18:11:86:70:2f:11:f1:7a:e0:af:a4:4e: de:f6:aa:35:82:2b:0c:68:da:63:1b:c3:6b:db:a2:e9:d0:95: c1:3a:5c:8e:02:6b:ee:27:d9:8b:ed:73:df:97:7c:44:d5:7f: 73:ae:d7:8e:19:b1:9e:9b:44:30:2a:b0:0f:9d:50:4d:45:ef: 00:ee:0e:e8:a3:0c:8a:66:c0:bd:33:62:9b:4a:e3:23:14:cc: aa:c1:33:dd:c4:af:af:c1:90:39:b7:53:c0:5c:d4:7a:0a:9a: 11:2d:30:09:70:bf:a6:28:46:f0:82:3e:57:3a:4c:e9:0d:27: fa:7e:a8:eb:83:f7:26:e9:cd:97:69:5d:1a:90:9d:5b:d9:e9: b8:d0:36:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcL4JqVevHScVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDg0MzdiNGUtYzJjZS00MzhmLTlkNzctMjc4OTg4ZWE1M2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroeCQtcz2SFSLfasi1JCxNbVWR2VDAiVb4g7 1QNGxCmfMaxfBdEKGRVQG9QvfBxNgcanL+P0vUJVYXeAdgqruw8mND0NYZeo2vH4 ThZBraRQxiCczDrfnYJWxMyx9jq507hfow5HECEWXnUmmoNvYNRihXnosQLaQ2Mn ljQ7aiM2hlKx5lEWU1TH9tROhgS3B7d3MrirJAH+XwyO3heNwRB4zGEMhsxuH0rG VqS4MFJnOG1BRyGo3XKQqTL3env2x//c1AHP7+U1Me5sRUP/slvwgR2m3amN3rPy nFjq6tIsWTLrXhkpFqXCxC/wfBZb/nS4ukbtuhGZcB9fwtGbpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZwchniKAZpk1EkpBtWxkTZBiv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjU3MjQ2ODAtZDYyNy0z YTJmLTgwNjMtMzAzYTRkMTU3NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI94YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3vH7m9g853MayDr/wEdK3BMh5iv4JqLOgm4JxMjpikFDTj3ZR4S9+c +IZoHmEdAiOWBLWCLT1KZImqcPOvcP98NeKvI4r1G+S2rt57qqWy4ehQU6QfxTQB lyoy43e890aDnSB/WP0LhqssYaJtFgJjYBgRhnAvEfF64K+kTt72qjWCKwxo2mMb w2vbounQlcE6XI4Ca+4n2Yvtc9+XfETVf3Ou144ZsZ6bRDAqsA+dUE1F7wDuDuij DIpmwL0zYptK4yMUzKrBM93Er6/BkDm3U8Bc1HoKmhEtMAlwv6YoRvCCPlc6TOkN J/p+qOuD9ybpzZdpXRqQnVvZ6bjQNqQ= -----END CERTIFICATE-----Generated at Sat Oct 3 11:00:27 2026 by rpki-client