$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc48c5a-0619-32ca-94f2-a7102831f8f0.roa File: cbc48c5a-0619-32ca-94f2-a7102831f8f0.roa (raw, json) Hash identifier: QdiIo5RUFz52Nv5P8Lv7/T5yXMbx6IY9wUpuSIieOJQ= Subject key identifier: 01:9B:CD:D0:1A:33:D1:52:87:7F:11:99:E9:29:C1:64:82:20:DD:FD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DDE29CFC60EDE99AFEE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc48c5a-0619-32ca-94f2-a7102831f8f0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19527 IP address blocks: 35.219.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:de:29:cf:c6:0e:de:99:af:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b35ea051-d693-4e9d-8652-385f7bd3dce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:74:c8:89:fe:6f:21:9d:24:38:9b:91:20: 17:4a:6c:87:b5:e2:29:b3:49:81:d1:8a:25:2a:01: 26:ee:51:18:63:7c:64:b3:6c:75:cf:ae:10:ba:d9: 3c:3d:4e:1d:92:89:b4:60:7b:07:e1:c5:dc:04:fe: c6:81:fd:6f:06:5c:e4:f6:1b:9e:49:f8:56:dd:4c: 7e:cc:20:f8:e0:b6:14:66:76:be:9d:d6:c1:e9:e6: d6:8f:2a:ef:a2:8d:72:ce:13:8c:ca:5d:09:c4:c5: e5:d4:0d:7d:aa:bd:78:3b:e2:bb:c5:38:f1:66:b9: a4:22:34:c4:8f:d8:f5:a7:c5:52:d4:07:9c:0b:c3: a2:20:a8:19:ce:79:fb:7a:23:d4:d3:76:96:2b:87: 0d:39:db:92:d1:e5:cb:df:7e:36:7b:97:75:af:25: 9b:58:3b:2a:8b:62:b6:41:05:8d:5d:21:79:43:34: c6:24:99:76:f8:29:ed:57:9b:0e:2a:0e:04:8c:75: 2a:fd:bd:43:75:5a:37:e2:81:61:d1:23:7c:4c:80: cf:a9:22:69:1f:a3:09:3a:3f:e9:24:17:6b:29:a6: 74:99:12:4a:b2:0b:f8:e3:f6:df:dd:b6:21:d1:02: 83:70:75:07:e9:e4:2b:4c:12:13:cc:4d:94:53:52: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9B:CD:D0:1A:33:D1:52:87:7F:11:99:E9:29:C1:64:82:20:DD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc48c5a-0619-32ca-94f2-a7102831f8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.219.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ac:0b:e9:5d:17:ef:f3:57:1a:ce:31:b2:b1:f6:67:61:2a: e7:25:6d:38:e3:08:9f:ad:f6:b8:e5:5c:40:a6:67:98:08:85: 51:c8:65:a0:78:4e:76:5e:6c:20:b3:db:76:19:0b:3a:54:43: 82:0f:6e:21:de:82:2b:bc:73:40:e4:30:6a:29:f6:36:fa:ef: dc:57:ff:6b:3c:17:fa:ee:69:43:71:30:1a:bc:52:32:c7:a8: b6:d8:42:71:6d:a8:11:e2:8b:82:e8:c3:65:3c:71:6d:2d:24: 95:61:ff:bc:38:18:f5:eb:bc:db:4b:ea:62:24:d9:e3:bf:df: 89:ac:18:02:75:62:21:13:71:39:db:fc:d9:ac:b6:72:25:e0: ca:bc:2a:f8:30:61:2f:29:db:a7:f5:23:92:82:60:a4:52:71: d0:10:30:e1:a5:ae:07:e1:c4:8e:0c:f1:9f:04:4b:16:d3:52: 53:0d:dc:df:ca:c3:3d:f8:da:f0:89:c7:47:02:f2:fd:e0:2b: 92:41:91:3c:c8:f3:df:bf:ec:15:92:48:6c:34:3b:d8:d1:89: 58:83:a7:4b:63:11:bf:e3:38:34:76:eb:86:0b:4c:68:3e:76: 37:f3:da:a7:d1:93:d9:55:0a:ce:de:c3:be:4c:b1:21:04:e3: d7:7a:f0:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd4pz8YO3pmv7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjM1ZWEwNTEtZDY5My00ZTlkLTg2NTItMzg1ZjdiZDNkY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwt0yIn+byGdJDibkSAXSmyHteIps0mB0Yol KgEm7lEYY3xks2x1z64Qutk8PU4dkom0YHsH4cXcBP7Ggf1vBlzk9hueSfhW3Ux+ zCD44LYUZna+ndbB6ebWjyrvoo1yzhOMyl0JxMXl1A19qr14O+K7xTjxZrmkIjTE j9j1p8VS1AecC8OiIKgZznn7eiPU03aWK4cNOduS0eXL3342e5d1ryWbWDsqi2K2 QQWNXSF5QzTGJJl2+CntV5sOKg4EjHUq/b1DdVo34oFh0SN8TIDPqSJpH6MJOj/p JBdrKaZ0mRJKsgv44/bf3bYh0QKDcHUH6eQrTBITzE2UU1Ll9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGbzdAaM9FSh38RmekpwWSCIN39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2JjNDhjNWEtMDYxOS0z MmNhLTk0ZjItYTcxMDI4MzFmOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGsC+ldF+/zVxrOMbKx9mdhKuclbTjjCJ+t9rjlXECmZ5gIhVHIZaB4 TnZebCCz23YZCzpUQ4IPbiHegiu8c0DkMGop9jb679xX/2s8F/ruaUNxMBq8UjLH qLbYQnFtqBHii4Low2U8cW0tJJVh/7w4GPXrvNtL6mIk2eO/34msGAJ1YiETcTnb /NmstnIl4Mq8KvgwYS8p26f1I5KCYKRScdAQMOGlrgfhxI4M8Z8ESxbTUlMN3N/K wz342vCJx0cC8v3gK5JBkTzI89+/7BWSSGw0O9jRiViDp0tjEb/jODR264YLTGg+ djfz2qfRk9lVCs7ew75MsSEE49d68GY= -----END CERTIFICATE-----Generated at Tue Sep 29 02:47:43 2026 by rpki-client