$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c61f430f-f64b-34d9-900f-dcf84d8a86a8.roa File: c61f430f-f64b-34d9-900f-dcf84d8a86a8.roa (raw, json) Hash identifier: tkvwDs5zsMf8EIt7M5GSQsVtEAH9plsEYoDHVwdsRnE= Subject key identifier: 1F:AB:6E:68:7F:D3:6C:5F:D9:BC:D2:E1:A2:6B:1D:92:1F:D6:E8:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD017913288AA826E9880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c61f430f-f64b-34d9-900f-dcf84d8a86a8.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.199.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d0:17:91:32:88:aa:82:6e:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d9161d72-ca50-49d0-b0a0-5ef6c621f2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:9b:5f:61:9d:54:d9:78:25:3b:40:29:cc: e7:e3:0c:73:47:e4:b6:80:28:76:b0:f3:d7:0b:64: 5b:9f:7a:ad:0f:3e:35:7e:87:53:50:68:e0:53:ba: e9:88:1d:23:60:9d:57:80:f0:b3:78:ce:f1:a6:f8: 59:4e:f7:c7:c5:e4:c3:dd:cf:61:d8:c0:99:4f:c4: 65:57:06:e3:68:12:20:7e:4a:0a:fd:12:f7:88:12: db:0f:8b:c8:12:3c:0f:c6:3f:f5:f4:aa:03:23:32: f7:d8:0d:27:19:11:7f:1b:76:93:ab:46:00:29:98: c6:c4:c7:d4:38:42:93:87:9b:df:a1:44:f2:71:64: 36:f3:68:52:f1:5a:d3:3a:32:21:bf:a3:3a:c3:25: 6a:d9:be:20:33:ce:24:48:fb:d3:f4:20:12:de:b4: 14:ef:5b:7d:80:24:6c:b4:17:53:d6:22:94:f9:8f: 73:5f:76:82:e8:63:8b:6a:1e:41:aa:88:be:4f:bf: 2b:3a:09:90:78:39:df:6f:4e:17:81:48:1f:70:6a: a7:e0:ab:09:fe:a0:8e:48:3d:c2:4a:1d:c4:f6:9b: f9:ee:3b:95:50:ef:ea:43:6f:a0:af:8c:37:36:3f: 4e:77:5e:27:2b:70:6c:d0:2e:7e:e5:46:51:b9:6e: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AB:6E:68:7F:D3:6C:5F:D9:BC:D2:E1:A2:6B:1D:92:1F:D6:E8:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c61f430f-f64b-34d9-900f-dcf84d8a86a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1d:b0:5e:83:6c:32:36:3b:c5:88:68:f6:e9:45:e7:cc:b5: 82:b5:c9:2a:e0:21:c1:f7:18:63:06:05:d9:fa:7e:26:d2:66: 35:1f:73:43:5d:5a:f2:52:03:3c:af:2d:7c:2c:22:be:88:2d: 26:3d:2a:44:21:b9:45:f9:49:75:b0:41:cb:51:cd:40:f3:a0: ae:84:02:71:a9:31:b9:2d:47:8b:64:08:81:81:df:aa:0d:6d: 28:be:26:65:a8:6e:90:f7:b7:1d:84:6e:8e:d7:73:25:86:b9: b1:08:b1:fa:2d:e2:99:a8:5f:66:0d:77:a6:ba:a6:b6:2e:7b: c6:a4:f4:42:18:b9:6e:4a:ff:53:31:29:1d:c5:f6:cd:aa:8e: 3c:12:ee:a4:c3:b8:b4:7f:6b:e5:27:66:79:d6:8e:da:00:02: 4e:d7:24:f1:60:0c:50:3c:7e:2a:44:ab:89:bb:3a:0b:9a:f5: da:09:34:aa:22:74:45:66:38:6d:34:f7:1d:92:e7:18:d4:15: f7:74:d4:79:f3:75:62:a6:fc:c3:a1:cd:9e:af:9e:61:19:eb: eb:63:01:0e:b2:87:6f:11:b6:fa:b4:79:17:e6:37:de:b7:47: 0b:3e:e7:33:ba:25:0f:63:36:90:ed:73:0e:66:7b:47:e9:30: 05:3e:d8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdAXkTKIqoJumIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDkxNjFkNzItY2E1MC00OWQwLWIwYTAtNWVmNmM2MjFmMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dibX2GdVNl4JTtAKczn4wxzR+S2gCh2sPPX C2Rbn3qtDz41fodTUGjgU7rpiB0jYJ1XgPCzeM7xpvhZTvfHxeTD3c9h2MCZT8Rl VwbjaBIgfkoK/RL3iBLbD4vIEjwPxj/19KoDIzL32A0nGRF/G3aTq0YAKZjGxMfU OEKTh5vfoUTycWQ282hS8VrTOjIhv6M6wyVq2b4gM84kSPvT9CAS3rQU71t9gCRs tBdT1iKU+Y9zX3aC6GOLah5Bqoi+T78rOgmQeDnfb04XgUgfcGqn4KsJ/qCOSD3C Sh3E9pv57juVUO/qQ2+gr4w3Nj9Od14nK3Bs0C5+5UZRuW7dYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+rbmh/02xf2bzS4aJrHZIf1uhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzYxZjQzMGYtZjY0Yi0z NGQ5LTkwMGYtZGNmODRkOGE4NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8eQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEdsF6DbDI2O8WIaPbpRefMtYK1ySrgIcH3GGMGBdn6fibSZjUfc0Nd WvJSAzyvLXwsIr6ILSY9KkQhuUX5SXWwQctRzUDzoK6EAnGpMbktR4tkCIGB36oN bSi+JmWobpD3tx2Ebo7XcyWGubEIsfot4pmoX2YNd6a6prYue8ak9EIYuW5K/1Mx KR3F9s2qjjwS7qTDuLR/a+UnZnnWjtoAAk7XJPFgDFA8fipEq4m7Ogua9doJNKoi dEVmOG009x2S5xjUFfd01HnzdWKm/MOhzZ6vnmEZ6+tjAQ6yh28Rtvq0eRfmN963 Rws+5zO6JQ9jNpDtcw5me0fpMAU+2IE= -----END CERTIFICATE-----Generated at Sat Oct 3 11:30:47 2026 by rpki-client