$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa File: bd538f77-993a-3a7b-b68e-2bd33845696f.roa (raw, json) Hash identifier: zpvYPd8I8Jq82QCA4tyT5U9QGpvlM7ATOYPNxF5Enno= Subject key identifier: D1:1D:70:21:4D:19:5B:3D:03:C9:DC:17:AA:6C:60:5A:62:C8:63:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA43598C4C534AB524800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.240.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a4:35:98:c4:c5:34:ab:52:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f88c959b-6a82-4a2e-81c7-642c1661e603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:1c:d3:89:9e:ce:66:69:72:65:9b:58:6f: 21:a6:e2:d7:f9:8d:3c:0e:f1:f9:bf:ec:28:72:80: c7:8d:36:f6:df:8b:19:e4:56:52:95:48:97:5b:a0: 9e:60:df:f0:58:3a:0b:7d:ac:ca:5b:2e:05:f5:8a: 2b:4e:1d:cf:97:7d:50:a5:b4:b2:a6:79:4d:8f:7b: bd:7c:69:8d:8d:9b:de:fb:5d:51:ed:39:c3:8b:63: 0c:7f:be:ca:a8:69:d0:61:2b:d7:66:07:02:72:7e: e4:2c:05:0a:03:3e:82:b5:9f:d3:3a:a6:1e:46:4c: 1a:dc:0b:94:d6:b8:26:80:00:17:1a:35:40:51:df: c5:d9:7c:36:d2:11:d2:59:c6:de:3f:85:d4:f6:47: 0a:6f:03:87:2e:70:80:86:2c:97:01:f8:c2:50:5b: 79:8d:07:83:ec:cc:ce:f3:d1:04:93:01:7b:11:8e: ec:32:66:41:31:c4:5e:85:e6:b1:b5:01:9a:60:d3: f8:0e:6f:d9:b9:74:ac:92:30:ae:dd:80:ae:8a:73: 46:d2:a2:a1:7a:71:c5:ba:64:be:14:92:fc:c5:0a: 23:46:54:1b:97:05:39:73:e3:d8:90:59:48:a0:42: 18:54:01:d6:29:1b:d5:b5:9c:1f:50:6f:38:08:4e: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1D:70:21:4D:19:5B:3D:03:C9:DC:17:AA:6C:60:5A:62:C8:63:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d6:2d:4c:ec:87:7f:ed:a7:27:66:ff:89:81:10:7a:18:db: 33:d8:80:37:32:c3:a1:c6:88:31:0a:83:c3:6c:92:87:06:03: c8:11:bd:ae:cd:4d:fa:c3:66:9b:e2:09:f6:6a:c8:91:bd:9e: 37:71:7b:1a:2d:1e:63:67:ff:9b:17:38:d6:35:2a:34:42:9c: 73:ee:8c:6e:18:68:69:9e:9e:6a:d6:c5:2b:e7:33:09:a3:09: 46:3c:82:64:3d:36:48:96:14:13:c3:67:f4:bb:bd:03:43:4c: 33:27:1d:c8:fa:83:6f:ee:7d:0f:92:23:a2:47:a0:ff:74:1a: de:97:a1:90:d4:2e:7e:d5:9e:5b:05:e0:84:d0:64:f7:31:88: a6:72:5e:6e:71:ce:59:fd:47:d7:b6:fa:ac:fb:ee:a0:4c:2d: 8b:2d:4d:d2:a8:e5:f5:6a:1e:7c:13:c7:7d:e5:99:ff:62:81: 79:5b:68:92:46:b1:20:6f:8d:74:c0:e0:b1:23:1f:f5:7d:be: 0a:fe:af:9c:3b:8c:55:bc:46:63:ca:e3:e6:bc:78:23:62:8f: ab:67:97:63:bb:8a:f1:8b:88:65:f5:b3:e7:b0:b6:b7:fe:25: 2c:e7:db:e3:5a:5e:28:72:4e:25:73:99:e4:2e:d0:9b:e9:4f: f6:4f:97:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaQ1mMTFNKtSSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Zjg4Yzk1OWItNmE4Mi00YTJlLTgxYzctNjQyYzE2NjFlNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ekc04mezmZpcmWbWG8hpuLX+Y08DvH5v+wo coDHjTb234sZ5FZSlUiXW6CeYN/wWDoLfazKWy4F9YorTh3Pl31QpbSypnlNj3u9 fGmNjZve+11R7TnDi2MMf77KqGnQYSvXZgcCcn7kLAUKAz6CtZ/TOqYeRkwa3AuU 1rgmgAAXGjVAUd/F2Xw20hHSWcbeP4XU9kcKbwOHLnCAhiyXAfjCUFt5jQeD7MzO 89EEkwF7EY7sMmZBMcReheaxtQGaYNP4Dm/ZuXSskjCu3YCuinNG0qKhenHFumS+ FJL8xQojRlQblwU5c+PYkFlIoEIYVAHWKRvVtZwfUG84CE7HswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEdcCFNGVs9A8ncF6psYFpiyGNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQ1MzhmNzctOTkzYS0z YTdiLWI2OGUtMmJkMzM4NDU2OTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3WLUzsh3/tpydm/4mBEHoY2zPYgDcyw6HGiDEKg8NskocGA8gRva7N TfrDZpviCfZqyJG9njdxexotHmNn/5sXONY1KjRCnHPujG4YaGmenmrWxSvnMwmj CUY8gmQ9NkiWFBPDZ/S7vQNDTDMnHcj6g2/ufQ+SI6JHoP90Gt6XoZDULn7VnlsF 4ITQZPcxiKZyXm5xzln9R9e2+qz77qBMLYstTdKo5fVqHnwTx33lmf9igXlbaJJG sSBvjXTA4LEjH/V9vgr+r5w7jFW8RmPK4+a8eCNij6tnl2O7ivGLiGX1s+ewtrf+ JSzn2+NaXihyTiVzmeQu0JvpT/ZPl8k= -----END CERTIFICATE-----Generated at Mon Sep 28 10:21:46 2026 by rpki-client