$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c666720c-c4a6-3c57-a83f-23e2786a99c2.roa File: c666720c-c4a6-3c57-a83f-23e2786a99c2.roa (raw, json) Hash identifier: G15XPQY3v2u54m8u2PuW00vVQJgG21zD7FIBaAqsbSY= Subject key identifier: 98:30:1A:86:38:5D:23:D1:02:7E:ED:13:9B:8A:C7:F1:40:7C:17:B7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49872781C49D5FECD13E6F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c666720c-c4a6-3c57-a83f-23e2786a99c2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 35.206.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:27:81:c4:9d:5f:ec:d1:3e:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=04d0e8f7-57c8-4778-bd3f-bc216efe976a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:00:e0:53:4a:aa:85:7a:5e:bb:07:44:6d: 17:ac:c4:85:83:87:f8:ab:07:78:9c:8b:8c:7a:e5: 41:72:60:ba:37:c3:a5:e3:c6:27:f0:91:0b:30:ff: 7a:2f:c5:41:a4:b0:08:ec:d6:2a:b5:1a:b2:75:91: e5:e8:4f:95:a2:08:23:38:89:c1:cf:1c:83:e9:98: 83:81:c1:51:bc:64:0e:c7:1b:69:62:98:76:90:23: 2f:b8:aa:66:aa:e3:6c:51:4d:5c:bb:75:79:3c:b8: c8:9b:9a:6b:5c:11:91:62:37:12:b3:82:2c:d0:95: e8:5b:8a:0b:43:e9:5d:8c:7a:d3:e4:3e:1f:f5:23: 36:73:b3:cd:a1:cb:dc:37:d0:f6:4e:37:b7:8f:71: a6:6d:3b:b8:42:ad:47:3d:c9:03:b4:39:62:55:94: 10:02:98:9d:77:65:b1:fa:42:54:03:e8:bf:5a:aa: 49:45:89:0b:b7:db:58:0e:7b:e2:fb:26:3e:01:ae: 61:dd:99:95:0a:ac:52:e0:20:b7:14:4c:76:66:25: b0:8c:be:54:3f:1e:64:70:b1:51:91:99:0e:2f:59: c6:d1:04:b4:24:05:46:4d:45:97:d4:af:54:12:55: 10:25:e7:01:24:ca:eb:66:a9:cf:00:76:2d:e9:bc: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:30:1A:86:38:5D:23:D1:02:7E:ED:13:9B:8A:C7:F1:40:7C:17:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c666720c-c4a6-3c57-a83f-23e2786a99c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a6:b6:56:c5:a3:60:36:81:05:a0:d1:f1:dd:d0:77:24:98: 1f:9d:46:da:7e:18:d1:c6:0b:88:c4:f3:7e:bb:9e:af:1d:b0: 32:62:28:e5:f4:52:ff:32:a4:c7:2b:a6:58:22:6d:51:73:91: 93:03:08:88:44:02:95:a7:68:96:ca:2e:f1:f2:0e:d8:6f:2e: 9e:3e:5d:d7:4a:8a:92:3f:90:86:41:98:25:d8:e0:66:b8:f5: 9b:89:f5:85:2b:5c:92:a0:13:78:39:fc:87:4b:49:c6:f5:47: ea:4d:58:01:77:b0:82:62:b9:c0:2e:c9:64:6b:dd:b4:65:0a: 65:d6:5a:51:5c:4b:6e:e8:d1:b0:c1:0c:62:5c:e6:39:df:27: 82:c7:93:0f:a0:bd:d0:4f:ac:64:36:7b:86:01:03:3f:c3:eb: ce:77:2e:b5:40:d8:6e:a3:98:1e:e6:a1:4d:b1:30:df:b2:d2: 69:43:c5:f6:31:10:2b:9c:05:d6:a1:29:e2:4d:84:67:25:6f: 4c:29:18:04:8f:3e:a8:a7:a6:1c:74:06:45:00:7f:66:1f:96: f8:99:fd:fe:a0:96:29:e5:ec:7e:c1:1d:8c:78:cd:6d:25:90: 1f:a6:e4:e9:4a:cc:78:3f:9f:5b:58:db:f1:48:1f:30:37:89: 47:53:ce:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhyeBxJ1f7NE+b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDRkMGU4ZjctNTdjOC00Nzc4LWJkM2YtYmMyMTZlZmU5NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vgA4FNKqoV6XrsHRG0XrMSFg4f4qwd4nIuM euVBcmC6N8Ol48Yn8JELMP96L8VBpLAI7NYqtRqydZHl6E+VoggjOInBzxyD6ZiD gcFRvGQOxxtpYph2kCMvuKpmquNsUU1cu3V5PLjIm5prXBGRYjcSs4Is0JXoW4oL Q+ldjHrT5D4f9SM2c7PNocvcN9D2Tje3j3GmbTu4Qq1HPckDtDliVZQQApidd2Wx +kJUA+i/WqpJRYkLt9tYDnvi+yY+Aa5h3ZmVCqxS4CC3FEx2ZiWwjL5UPx5kcLFR kZkOL1nG0QS0JAVGTUWX1K9UElUQJecBJMrrZqnPAHYt6by4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgwGoY4XSPRAn7tE5uKx/FAfBe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzY2NjcyMGMtYzRhNi0z YzU3LWE4M2YtMjNlMjc4NmE5OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqmtlbFo2A2gQWg0fHd0HckmB+dRtp+GNHGC4jE8367nq8dsDJiKOX0 Uv8ypMcrplgibVFzkZMDCIhEApWnaJbKLvHyDthvLp4+XddKipI/kIZBmCXY4Ga4 9ZuJ9YUrXJKgE3g5/IdLScb1R+pNWAF3sIJiucAuyWRr3bRlCmXWWlFcS27o0bDB DGJc5jnfJ4LHkw+gvdBPrGQ2e4YBAz/D6853LrVA2G6jmB7moU2xMN+y0mlDxfYx ECucBdahKeJNhGclb0wpGASPPqinphx0BkUAf2YflviZ/f6glinl7H7BHYx4zW0l kB+m5OlKzHg/n1tY2/FIHzA3iUdTzmk= -----END CERTIFICATE-----Generated at Sun Sep 27 01:48:57 2026 by rpki-client