$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d428fadb-5676-3713-baae-41f3b294a701.roa File: d428fadb-5676-3713-baae-41f3b294a701.roa (raw, json) Hash identifier: G3b7DiavdpiU0+bBkpY9k+EXi8bDkEM+hFoDqWbFWRw= Subject key identifier: AE:18:26:4F:36:38:86:14:EC:6C:1B:35:96:3C:6A:0C:EC:7D:A3:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4984CF2C19A89989BCE20C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d428fadb-5676-3713-baae-41f3b294a701.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.197.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:cf:2c:19:a8:99:89:bc:e2:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d18c2f88-02e5-48eb-ad1f-24a85cfbddd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:dd:d8:3a:d8:8d:6d:51:05:66:10:25:67: 62:83:bf:f5:57:b8:69:33:29:48:eb:c8:10:4a:85: 82:17:55:ec:cc:cd:9b:3e:d4:78:45:f7:22:e1:dc: a3:29:c7:21:33:21:c7:d8:04:64:5a:05:a5:b3:c9: 4d:55:e1:4b:8c:4e:de:58:15:81:78:1b:b9:7d:ad: ea:31:19:16:71:dc:5a:80:63:7f:38:65:7b:1d:1e: d3:81:60:a3:9f:bc:9e:e1:48:3d:15:ee:4e:64:5a: c8:e0:bb:2f:7c:98:bf:a7:d8:d5:0f:66:04:56:f9: 5c:65:8d:60:c9:6f:0d:43:a2:19:1a:06:01:7e:fd: 01:07:21:89:4d:9d:d2:a3:55:12:18:65:12:2f:c8: 4b:6e:e4:19:91:e1:2a:49:5e:81:7a:c1:1d:af:99: 25:c6:db:63:d3:86:80:32:7f:cd:a1:b1:74:74:49: b5:1b:71:8b:10:fe:cf:aa:00:a6:24:07:62:61:e3: 1c:b1:c8:4a:a5:85:d7:fa:89:b5:1b:f4:da:4b:4b: da:31:ed:53:fb:2a:b9:41:1c:d5:36:4b:f6:2a:dd: 5a:67:6a:5b:ad:07:63:5a:e3:82:2a:22:c4:bd:3a: b9:bc:f1:af:9f:51:2d:19:da:83:20:fb:b8:60:5b: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:18:26:4F:36:38:86:14:EC:6C:1B:35:96:3C:6A:0C:EC:7D:A3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d428fadb-5676-3713-baae-41f3b294a701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:72:cb:b5:7a:58:6d:09:05:0a:26:af:98:3b:86:85:cd:4a: 74:2d:cc:b4:91:80:1d:75:96:a6:ed:e7:26:12:a0:04:e3:62: 7a:aa:ea:8d:80:0a:27:77:76:a1:e8:de:b2:23:a4:9d:2e:b3: 8d:e5:67:8b:19:1f:31:7d:82:df:14:e1:1e:ff:33:9c:3f:53: 6f:52:a3:37:c0:0a:d6:10:ed:cb:7a:90:26:b5:53:de:64:68: 6a:63:5a:34:54:54:55:e8:a8:b7:ed:f8:b4:2e:e3:a2:b2:d0: 7a:43:3b:7b:e3:ac:ad:7b:5b:af:ff:92:1d:b5:f4:c9:6a:35: f8:25:d3:de:f9:84:bf:78:7a:b9:81:44:5b:16:e1:df:2f:5e: f7:d3:65:2a:84:a9:cd:f6:24:86:f8:78:d3:7f:08:fa:95:a7: 5d:41:0b:af:c1:88:ff:ec:b2:f9:17:17:63:ce:66:70:5d:68: 4c:fb:dd:4c:63:01:58:02:23:66:61:80:47:b4:38:6d:3c:87: 81:c7:cb:a1:f9:05:79:76:c9:78:43:75:57:46:c7:5f:69:1b: bf:4d:23:85:3a:02:47:2d:8b:cf:9f:f0:f3:54:bb:91:9d:38: 2d:8e:d3:42:4a:76:01:42:d6:41:2a:e9:12:ae:85:fb:6e:e9: 22:83:a4:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhM8sGaiZibziDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDE4YzJmODgtMDJlNS00OGViLWFkMWYtMjRhODVjZmJkZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkHd2DrYjW1RBWYQJWdig7/1V7hpMylI68gQ SoWCF1XszM2bPtR4Rfci4dyjKcchMyHH2ARkWgWls8lNVeFLjE7eWBWBeBu5fa3q MRkWcdxagGN/OGV7HR7TgWCjn7ye4Ug9Fe5OZFrI4LsvfJi/p9jVD2YEVvlcZY1g yW8NQ6IZGgYBfv0BByGJTZ3So1USGGUSL8hLbuQZkeEqSV6BesEdr5klxttj04aA Mn/NobF0dEm1G3GLEP7PqgCmJAdiYeMcschKpYXX+om1G/TaS0vaMe1T+yq5QRzV Nkv2Kt1aZ2pbrQdjWuOCKiLEvTq5vPGvn1EtGdqDIPu4YFs75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4YJk82OIYU7GwbNZY8agzsfaM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQyOGZhZGItNTY3Ni0z NzEzLWJhYWUtNDFmM2IyOTRhNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5yy7V6WG0JBQomr5g7hoXNSnQtzLSRgB11lqbt5yYSoATjYnqq6o2A Cid3dqHo3rIjpJ0us43lZ4sZHzF9gt8U4R7/M5w/U29SozfACtYQ7ct6kCa1U95k aGpjWjRUVFXoqLft+LQu46Ky0HpDO3vjrK17W6//kh219MlqNfgl0975hL94ermB RFsW4d8vXvfTZSqEqc32JIb4eNN/CPqVp11BC6/BiP/ssvkXF2POZnBdaEz73Uxj AVgCI2ZhgEe0OG08h4HHy6H5BXl2yXhDdVdGx19pG79NI4U6Akcti8+f8PNUu5Gd OC2O00JKdgFC1kEq6RKuhftu6SKDpHg= -----END CERTIFICATE-----Generated at Mon Sep 28 20:56:50 2026 by rpki-client