$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa File: ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa (raw, json) Hash identifier: ixOjrldmq0apk4ATvO1QTdAZwe0CNVKnIko2p/zM4Fo= Subject key identifier: 9E:A9:F1:2B:C5:59:9C:75:9C:64:5E:A3:73:03:BC:AB:F8:A3:59:7B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8E8B5888C8F9748C9FC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.199.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8e:8b:58:88:c8:f9:74:8c:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e49e3636-c73c-4c04-9817-e15a1c8180c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:61:e3:14:f2:35:32:6e:f5:57:86:43:89:9a: 3d:fc:c7:3f:ea:12:e6:c8:7b:d9:b2:c6:00:0e:11: 6f:d8:1a:16:ac:00:22:bf:3c:da:50:92:8d:68:01: 51:b0:70:7c:4b:a5:a6:ac:8c:67:6f:2b:aa:b1:2d: ac:b8:d3:7a:cf:b7:fb:a9:37:14:76:6f:e0:2f:f5: f3:2e:42:dd:9a:a1:20:b2:2d:1a:75:b5:22:47:f2: e4:5b:24:b8:63:85:7d:2b:83:ea:01:d9:97:a1:9e: 0e:93:07:36:dd:03:e6:2e:b2:49:96:11:17:c1:8c: ef:be:d0:f5:55:d6:cb:09:cc:d6:89:c8:b5:9d:ed: af:fa:0e:71:e4:65:52:e0:21:7b:2f:f1:da:78:43: 8b:f1:d8:ba:81:71:c8:b5:2f:56:5f:f9:06:89:fb: 31:7b:64:f2:d7:77:89:7b:13:2d:47:1f:a4:bc:eb: aa:de:55:aa:78:9b:f4:35:04:bb:45:25:7f:7f:4a: d7:00:ec:5f:4c:cd:76:21:7d:dd:76:ce:86:5e:15: 45:bd:ee:a5:72:a0:81:4e:3a:1f:1d:1d:52:85:8b: 1b:ac:5a:45:87:48:08:86:96:68:43:cd:c0:17:2d: f0:75:38:e1:c2:d2:22:2a:e1:17:00:34:4f:fc:33: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A9:F1:2B:C5:59:9C:75:9C:64:5E:A3:73:03:BC:AB:F8:A3:59:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c3:5d:06:07:fa:2c:70:0e:5b:a8:56:1c:1a:69:59:18:70: 00:4d:66:dd:7a:16:1a:61:94:8b:0a:5c:ba:30:20:69:c6:9d: 86:29:92:12:6b:f6:c1:be:ef:8c:0d:27:35:97:12:29:2b:a0: 65:f1:8b:b5:5f:be:8f:aa:17:95:42:63:a8:9c:08:37:5c:a9: 6e:5f:77:75:2f:c9:4b:37:a8:ed:aa:7e:f4:96:18:c0:d4:8f: 18:a9:e0:29:a7:a8:88:69:94:18:a2:15:6d:aa:0a:b4:b8:a7: e1:d1:53:18:82:7d:f8:68:d3:8a:80:1a:26:69:8f:59:82:35: ec:0a:29:17:ba:ae:46:46:b8:37:ee:62:fe:bd:c1:8a:5b:aa: 00:c8:4d:a1:c4:98:1d:8a:55:90:de:46:e7:f7:16:9f:23:c8: d3:ab:00:4e:32:4a:59:28:3d:a3:93:2b:81:b5:9a:5f:6c:ef: 83:ae:7b:f0:79:db:cc:14:4a:e9:cd:74:7b:f6:bd:ea:42:7f: 11:d5:cc:87:0f:b6:a2:ec:58:bb:f9:83:c0:88:4f:81:05:2e: eb:f4:ac:3f:94:a5:63:d1:9a:cb:05:83:7e:ea:3b:a1:df:13: 32:19:f5:94:a7:0e:0b:f0:fd:49:d8:7b:f5:0b:0d:e0:86:23: 03:7c:bb:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY6LWIjI+XSMn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTQ5ZTM2MzYtYzczYy00YzA0LTk4MTctZTE1YTFjODE4MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGHjFPI1Mm71V4ZDiZo9/Mc/6hLmyHvZssYA DhFv2BoWrAAivzzaUJKNaAFRsHB8S6WmrIxnbyuqsS2suNN6z7f7qTcUdm/gL/Xz LkLdmqEgsi0adbUiR/LkWyS4Y4V9K4PqAdmXoZ4Okwc23QPmLrJJlhEXwYzvvtD1 VdbLCczWici1ne2v+g5x5GVS4CF7L/HaeEOL8di6gXHItS9WX/kGifsxe2Ty13eJ exMtRx+kvOuq3lWqeJv0NQS7RSV/f0rXAOxfTM12IX3dds6GXhVFve6lcqCBTjof HR1ShYsbrFpFh0gIhpZoQ83AFy3wdTjhwtIiKuEXADRP/DPE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6p8SvFWZx1nGReo3MDvKv4o1l7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmEyZmExZDktZDVlOS0z YTM3LWE2NmQtYjA2MDA4ZTAzYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvDXQYH+ixwDluoVhwaaVkYcABNZt16FhphlIsKXLowIGnGnYYpkhJr 9sG+74wNJzWXEikroGXxi7Vfvo+qF5VCY6icCDdcqW5fd3UvyUs3qO2qfvSWGMDU jxip4CmnqIhplBiiFW2qCrS4p+HRUxiCffho04qAGiZpj1mCNewKKRe6rkZGuDfu Yv69wYpbqgDITaHEmB2KVZDeRuf3Fp8jyNOrAE4ySlkoPaOTK4G1ml9s74Oue/B5 28wUSunNdHv2vepCfxHVzIcPtqLsWLv5g8CIT4EFLuv0rD+UpWPRmssFg37qO6Hf EzIZ9ZSnDgvw/UnYe/ULDeCGIwN8uwg= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:32 2026 by rpki-client