$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9971d3a-ef82-3b61-a04f-86b3170023df.roa File: b9971d3a-ef82-3b61-a04f-86b3170023df.roa (raw, json) Hash identifier: iJsdIZ2Hg/a+zrDdTIsf2T9et5RqiCCYS6/8Xkt+6dM= Subject key identifier: 19:FF:4D:65:4C:5C:15:7A:47:3D:C6:D5:A7:CE:23:9C:A6:17:2E:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC4002C41FA49F6A66180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9971d3a-ef82-3b61-a04f-86b3170023df.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19527 IP address blocks: 35.206.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c4:00:2c:41:fa:49:f6:a6:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b6a6c3a1-f5cc-4ab0-9266-de99804abe69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:06:a4:02:e8:16:58:5b:35:10:79:54:41: 57:52:b5:66:58:bf:e4:d8:02:64:57:0e:7f:77:f6: eb:6d:8b:b1:45:c0:12:26:d4:14:c1:21:50:76:1f: 70:d1:8b:be:61:04:1c:b4:d7:9c:76:76:bc:19:9c: 0c:fa:33:f0:4d:22:6d:e7:ab:22:44:b3:ce:7c:18: c9:93:8c:2f:0f:1a:75:45:54:30:f7:03:54:da:05: 18:c3:ae:24:73:07:7c:fa:a3:68:6c:d6:bd:32:00: 10:d1:0c:78:69:3d:dc:51:6d:24:6f:9c:db:0f:28: 80:5a:5f:38:f8:50:45:21:c1:a2:b5:b9:c1:ea:15: 57:a8:d5:31:8a:5d:52:d4:ce:8b:98:c5:aa:ce:98: b2:d9:b5:d6:6e:9a:f0:c0:fa:0a:8d:b9:3c:09:cb: 31:f5:b7:41:f4:63:26:ea:0d:d3:16:d5:6e:89:03: 59:82:97:89:b3:fb:6a:95:4d:53:87:76:4f:09:eb: 9e:89:ea:e8:5d:de:20:4d:ca:05:57:ad:ab:56:ef: a0:31:f3:c9:57:d4:8b:f9:b8:ee:cf:bb:bd:a9:85: 8b:d2:94:81:b0:d2:74:d6:c0:eb:bd:a1:6d:ea:7b: b3:02:fe:52:cf:58:24:86:1b:96:3a:05:75:83:c8: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:4D:65:4C:5C:15:7A:47:3D:C6:D5:A7:CE:23:9C:A6:17:2E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9971d3a-ef82-3b61-a04f-86b3170023df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:03:96:22:fd:36:13:97:31:c6:06:6b:ae:8f:f7:33:a1:2e: de:c3:e2:2d:9e:ba:23:b8:01:4c:1e:8c:5a:00:e5:3c:dd:d4: cc:76:48:05:81:9d:42:52:ef:a2:e4:c0:28:e8:54:a3:c1:91: 0b:45:e4:4b:90:a0:09:da:df:a9:e2:fb:3b:ff:92:a4:b1:ea: 7d:e5:05:05:12:b0:57:4e:87:b4:48:4b:17:d0:47:6b:29:63: 7d:04:f4:e0:f5:d7:81:86:4e:29:8c:5b:7a:a8:be:7e:a3:b8: 72:ba:f1:2f:29:03:a6:0d:5c:f9:b7:4f:d3:01:8b:85:36:c2: 7e:a2:2d:19:fe:a6:df:21:17:e5:2c:08:6a:f3:46:d5:e4:06: da:5f:cb:60:8f:05:3f:dd:57:83:b1:08:77:d8:b3:b4:80:40: eb:45:ed:4f:62:f9:e7:12:df:f4:0c:37:03:c1:e6:fd:7f:82: ce:61:2a:31:0e:55:dc:43:f6:3b:8a:41:1f:90:a1:10:66:ca: 8c:c9:df:78:fe:6e:8b:46:4d:e8:b4:89:c2:1e:c2:c1:ef:3b: 1b:c4:51:61:a7:19:34:f6:bf:b9:61:9f:a6:1e:f2:0d:16:54: 88:f2:25:c8:90:b3:eb:60:46:ce:40:a3:4e:5c:d2:c2:4e:4f: e7:65:2a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcQALEH6SfamYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjZhNmMzYTEtZjVjYy00YWIwLTkyNjYtZGU5OTgwNGFiZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNwGpALoFlhbNRB5VEFXUrVmWL/k2AJkVw5/ d/brbYuxRcASJtQUwSFQdh9w0Yu+YQQctNecdna8GZwM+jPwTSJt56siRLPOfBjJ k4wvDxp1RVQw9wNU2gUYw64kcwd8+qNobNa9MgAQ0Qx4aT3cUW0kb5zbDyiAWl84 +FBFIcGitbnB6hVXqNUxil1S1M6LmMWqzpiy2bXWbprwwPoKjbk8Ccsx9bdB9GMm 6g3TFtVuiQNZgpeJs/tqlU1Th3ZPCeueieroXd4gTcoFV62rVu+gMfPJV9SL+bju z7u9qYWL0pSBsNJ01sDrvaFt6nuzAv5Sz1gkhhuWOgV1g8ibLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn/TWVMXBV6Rz3G1afOI5ymFy6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjk5NzFkM2EtZWY4Mi0z YjYxLWEwNGYtODZiMzE3MDAyM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUDliL9NhOXMcYGa66P9zOhLt7D4i2euiO4AUwejFoA5Tzd1Mx2SAWB nUJS76LkwCjoVKPBkQtF5EuQoAna36ni+zv/kqSx6n3lBQUSsFdOh7RISxfQR2sp Y30E9OD114GGTimMW3qovn6juHK68S8pA6YNXPm3T9MBi4U2wn6iLRn+pt8hF+Us CGrzRtXkBtpfy2CPBT/dV4OxCHfYs7SAQOtF7U9i+ecS3/QMNwPB5v1/gs5hKjEO VdxD9juKQR+QoRBmyozJ33j+botGTei0icIewsHvOxvEUWGnGTT2v7lhn6Ye8g0W VIjyJciQs+tgRs5Ao05c0sJOT+dlKk0= -----END CERTIFICATE-----Generated at Tue Sep 29 05:10:41 2026 by rpki-client