$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa File: d40d9eae-327f-3a10-8667-6fef8f5952bf.roa (raw, json) Hash identifier: wGCgs5hINc7V4T/BhKYmjKvGIE956Fx7yvCwagx3E5w= Subject key identifier: 09:9A:53:25:E7:21:CE:79:05:67:91:68:8E:CC:37:BD:71:93:6C:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA8B9E1D111EFEE9F1400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.238.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a8:b9:e1:d1:11:ef:ee:9f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a9dcc5f0-af6a-42e0-a949-513b113b9452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:ee:61:11:b5:75:97:67:33:8c:ed:5a:59: a5:81:ce:ff:ee:47:05:bb:3b:99:7f:b5:0b:a6:1a: 28:06:99:4d:9a:f9:ed:52:80:12:3b:f9:f9:14:f9: 3f:3e:ec:f8:5e:3f:e6:af:c6:e1:7f:6d:2c:2c:26: e9:94:c0:ea:a0:76:8e:d5:10:4a:83:75:27:35:73: d7:2a:74:fc:51:c8:db:ec:36:0b:fb:65:37:b4:54: b9:58:6f:6b:d4:55:6b:5b:c4:0c:40:15:b1:46:45: 12:66:c0:2e:93:09:0a:da:c1:0f:c8:ca:0d:c0:de: 0f:82:09:ec:59:44:77:d5:86:d6:94:a1:86:e3:81: bc:be:5f:27:2e:aa:92:cb:8e:12:71:36:2c:4e:7c: 82:2f:59:9f:b9:41:b7:7d:00:08:6d:8e:5f:ba:0f: b7:9c:08:a9:0b:d3:f2:74:f9:78:48:be:0d:17:d4: 30:27:e9:d2:03:09:b9:bb:2a:de:1f:1b:5a:f7:11: 9e:42:fa:d9:f6:4f:d3:13:3d:91:e4:ed:25:63:83: f8:14:59:7d:79:b1:3a:9b:94:81:39:7b:22:7d:aa: 2e:48:79:7a:39:f3:7f:10:61:df:f3:5b:29:2e:c2: 53:c6:81:90:56:17:33:1c:35:34:b3:25:35:f7:de: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9A:53:25:E7:21:CE:79:05:67:91:68:8E:CC:37:BD:71:93:6C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e9:3c:99:b9:c7:2c:67:cb:ae:e1:b4:71:99:33:03:fd:6c: ae:18:0c:8e:83:94:ca:b5:bc:5c:21:b4:8f:85:28:31:43:1b: 65:12:71:46:2a:6f:12:eb:66:c2:8b:7d:5a:18:70:59:7d:f0: 5a:45:c1:8b:7c:f8:33:9e:ff:44:ce:b1:87:53:d7:fd:5b:a8: 1c:da:77:13:a4:18:02:66:83:fe:4e:63:95:86:28:99:1e:4d: 42:30:0d:12:b0:29:b6:93:2a:8a:1e:f9:22:ec:81:fd:49:fd: ca:8c:8e:af:e4:32:2f:ad:dc:0b:cc:c6:cd:d3:cb:33:4b:45: 1b:0a:6e:36:c5:6f:23:da:ba:ef:47:74:37:a9:e0:74:72:a8: 56:65:37:66:9b:bb:31:25:db:5b:53:7a:0f:88:35:91:10:5b: 4a:89:7e:06:10:4c:2c:e5:9e:7e:ea:4c:16:57:01:32:a3:57: 5b:de:89:c4:c9:8a:db:98:c9:4e:16:af:bb:34:11:7d:93:f4: 1a:ad:3e:cb:98:ea:07:8e:91:02:8d:80:5d:58:02:96:2e:2c: 87:80:c1:c1:50:13:c4:d6:8e:e3:3f:8d:a2:a7:74:f4:1b:40: c7:98:b2:3b:7e:6b:5e:1e:7c:54:65:6f:d5:49:84:bb:df:0f: 6b:aa:fd:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPai54dER7+6fFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTlkY2M1ZjAtYWY2YS00MmUwLWE5NDktNTEzYjExM2I5NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyODuYRG1dZdnM4ztWlmlgc7/7kcFuzuZf7UL phooBplNmvntUoASO/n5FPk/Puz4Xj/mr8bhf20sLCbplMDqoHaO1RBKg3UnNXPX KnT8Ucjb7DYL+2U3tFS5WG9r1FVrW8QMQBWxRkUSZsAukwkK2sEPyMoNwN4Pggns WUR31YbWlKGG44G8vl8nLqqSy44ScTYsTnyCL1mfuUG3fQAIbY5fug+3nAipC9Py dPl4SL4NF9QwJ+nSAwm5uyreHxta9xGeQvrZ9k/TEz2R5O0lY4P4FFl9ebE6m5SB OXsifaouSHl6OfN/EGHf81spLsJTxoGQVhczHDU0syU19955+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmaUyXnIc55BWeRaI7MN71xk2xHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQwZDllYWUtMzI3Zi0z YTEwLTg2NjctNmZlZjhmNTk1MmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnpPJm5xyxny67htHGZMwP9bK4YDI6DlMq1vFwhtI+FKDFDG2UScUYq bxLrZsKLfVoYcFl98FpFwYt8+DOe/0TOsYdT1/1bqBzadxOkGAJmg/5OY5WGKJke TUIwDRKwKbaTKooe+SLsgf1J/cqMjq/kMi+t3AvMxs3TyzNLRRsKbjbFbyPauu9H dDep4HRyqFZlN2abuzEl21tTeg+INZEQW0qJfgYQTCzlnn7qTBZXATKjV1veicTJ ituYyU4Wr7s0EX2T9BqtPsuY6geOkQKNgF1YApYuLIeAwcFQE8TWjuM/jaKndPQb QMeYsjt+a14efFRlb9VJhLvfD2uq/Sc= -----END CERTIFICATE-----Generated at Mon Sep 28 18:29:29 2026 by rpki-client