$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d91bb1d1-0d37-38f9-95de-be48a336ad23.roa File: d91bb1d1-0d37-38f9-95de-be48a336ad23.roa (raw, json) Hash identifier: uFOMaQMrkkKIRQNmmXztazm3AYdJqM335DogNbDl/+4= Subject key identifier: 56:E1:48:9F:68:76:FD:C2:4E:F1:6B:FB:5E:72:4C:93:A0:23:7C:BA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498BEFB451DD3B49076407C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d91bb1d1-0d37-38f9-95de-be48a336ad23.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 35.214.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:ef:b4:51:dd:3b:49:07:64:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=91398205-55a9-4a4e-9b22-4ead071b353a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:3b:19:70:6f:3b:09:fe:11:9c:42:37:04: 65:2b:57:cc:3b:76:85:b8:01:04:5e:4a:63:40:de: ce:00:75:93:c7:d6:d9:2b:e7:b4:b3:dd:91:16:26: 8f:a9:20:ca:e8:8e:df:f6:5b:47:fc:cc:fe:90:10: c9:2f:76:f8:d4:47:ba:8a:7f:f6:0d:d0:49:47:df: 1d:17:d5:b8:91:ce:68:28:cb:e1:74:f1:bc:e6:ce: 50:7d:47:25:01:a2:8c:92:96:3a:eb:04:a6:81:e3: 1d:68:fc:00:99:c3:09:54:05:0c:1b:a6:fd:5a:47: 44:c2:d9:c7:96:30:24:0e:01:f1:54:33:d8:64:6c: d2:bd:c1:09:8b:52:28:33:6e:4a:e4:1b:75:70:d1: 6d:67:2a:cd:e9:d6:8a:bb:23:47:c5:29:7d:10:54: 6c:48:37:2b:6b:de:41:1f:a9:36:c4:0f:4e:18:cb: 88:36:8b:1e:ab:45:7d:cc:7c:45:18:44:66:7c:10: 39:07:a9:f5:74:5e:70:34:41:42:54:89:da:91:17: dc:46:ed:d0:b1:18:86:6b:cb:79:15:86:3d:fc:a1: f8:8c:e9:49:5e:d0:a2:26:1c:46:69:e8:7a:24:74: 9a:16:21:b7:cb:ee:41:5f:35:66:fe:d6:d7:be:34: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E1:48:9F:68:76:FD:C2:4E:F1:6B:FB:5E:72:4C:93:A0:23:7C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d91bb1d1-0d37-38f9-95de-be48a336ad23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.214.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5a:f1:e9:11:34:d4:60:14:a3:e3:26:f5:00:bf:e7:d0:b3: f3:b4:a8:a2:8f:3f:01:49:c2:a5:80:37:4b:a2:f5:90:fa:02: 6c:6b:a0:87:7f:39:29:75:d2:53:96:08:ab:07:94:03:f3:b1: ad:d1:9e:39:e8:7e:fb:91:d4:92:a4:67:b3:ac:44:f5:7c:e9: 68:26:3d:0f:ff:49:e3:5b:8e:86:f2:0b:d9:9d:61:43:c1:56: 2f:69:55:da:0f:9d:4c:df:9d:64:99:f7:fd:de:ba:07:36:ca: 9c:12:3b:79:c1:9e:b0:3a:4b:81:b4:3a:69:b4:66:fd:8f:25: 01:bc:e5:59:b4:27:e7:f5:30:95:1a:2f:6d:e7:d0:54:dd:0a: 1c:a7:7f:3a:34:eb:a4:45:e0:1c:76:52:cc:af:07:77:4d:1b: ef:db:b8:89:59:28:ea:13:c8:2c:19:e9:63:f0:f4:96:65:38: f6:18:f0:ad:89:c9:cf:b8:06:7c:20:59:46:58:5c:c7:8c:50: f6:fe:17:25:12:97:42:7f:14:f7:3f:ed:7d:a8:dc:d4:47:67: f9:1d:7c:96:33:bb:0f:ae:6f:be:16:e1:8e:9f:0c:46:d1:4f: 78:e5:3f:d8:35:c2:59:12:6f:be:f3:7e:d8:a7:02:f5:02:be: 19:5f:89:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji++0Ud07SQdkB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTEzOTgyMDUtNTVhOS00YTRlLTliMjItNGVhZDA3MWIzNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyU7GXBvOwn+EZxCNwRlK1fMO3aFuAEEXkpj QN7OAHWTx9bZK+e0s92RFiaPqSDK6I7f9ltH/Mz+kBDJL3b41Ee6in/2DdBJR98d F9W4kc5oKMvhdPG85s5QfUclAaKMkpY66wSmgeMdaPwAmcMJVAUMG6b9WkdEwtnH ljAkDgHxVDPYZGzSvcEJi1IoM25K5Bt1cNFtZyrN6daKuyNHxSl9EFRsSDcra95B H6k2xA9OGMuINoseq0V9zHxFGERmfBA5B6n1dF5wNEFCVInakRfcRu3QsRiGa8t5 FYY9/KH4jOlJXtCiJhxGaeh6JHSaFiG3y+5BXzVm/tbXvjQUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbhSJ9odv3CTvFr+15yTJOgI3y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDkxYmIxZDEtMGQzNy0z OGY5LTk1ZGUtYmU0OGEzMzZhZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVa8ekRNNRgFKPjJvUAv+fQs/O0qKKPPwFJwqWAN0ui9ZD6AmxroId/ OSl10lOWCKsHlAPzsa3RnjnofvuR1JKkZ7OsRPV86WgmPQ//SeNbjobyC9mdYUPB Vi9pVdoPnUzfnWSZ9/3eugc2ypwSO3nBnrA6S4G0Omm0Zv2PJQG85Vm0J+f1MJUa L23n0FTdChynfzo066RF4Bx2UsyvB3dNG+/buIlZKOoTyCwZ6WPw9JZlOPYY8K2J yc+4BnwgWUZYXMeMUPb+FyUSl0J/FPc/7X2o3NRHZ/kdfJYzuw+ub74W4Y6fDEbR T3jlP9g1wlkSb77zftinAvUCvhlfiWA= -----END CERTIFICATE-----Generated at Sun Sep 27 01:13:03 2026 by rpki-client