$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db3ec061-e746-387b-bbd3-7dd3322dd09a.roa File: db3ec061-e746-387b-bbd3-7dd3322dd09a.roa (raw, json) Hash identifier: AXgZb2hxx+2S9xa+aOtMF9VT+QnusWQdRDyCyH4zybw= Subject key identifier: 8A:BF:B5:02:77:03:56:CA:93:37:7D:51:9C:D4:C6:4F:07:90:3B:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9FBFF2E80E2C1B301E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db3ec061-e746-387b-bbd3-7dd3322dd09a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.205.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9f:bf:f2:e8:0e:2c:1b:30:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=74055ceb-1308-4f92-983f-0ce89d7fa566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ed:9c:28:1f:c7:91:0a:61:5c:94:28:b9:8b: 8a:b8:3e:57:91:5e:c7:63:52:ca:fa:9c:b2:8a:96: a2:28:31:e7:fb:34:0f:ad:d3:16:d2:df:f3:da:ba: 07:cb:c2:83:49:0b:52:bf:f6:55:4e:54:66:b6:ea: 22:a1:ac:eb:6b:0a:2a:c3:76:1f:e0:57:23:5c:4f: ba:db:9f:d8:97:08:81:31:6a:f6:7f:6a:ed:01:af: 61:fd:53:07:68:6b:e3:cf:ab:04:45:d3:be:ed:42: 2e:e8:1b:9a:7d:b0:a7:f6:2f:c2:ef:c4:6f:be:d4: 00:46:61:15:5f:59:13:0c:06:ff:9e:66:34:b4:84: c0:c3:e4:a1:7d:2f:32:3a:b8:fa:cd:0e:b1:84:21: 03:74:e7:e9:27:fe:fa:42:e1:54:46:f6:87:d0:2e: 53:b8:86:83:fe:74:97:12:ea:40:7c:06:83:d8:ca: 0a:42:ec:41:85:93:a5:20:04:43:62:ce:57:08:46: 82:fe:e9:37:be:fd:3e:b5:d1:b5:49:18:13:35:f6: f6:74:15:3a:07:6c:40:b4:76:35:f6:e9:d3:24:17: 21:97:93:45:d0:7d:fb:f9:88:0b:ad:b1:c6:0b:7f: 5e:18:50:04:8b:a9:64:18:16:dd:6b:cd:33:1f:3c: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BF:B5:02:77:03:56:CA:93:37:7D:51:9C:D4:C6:4F:07:90:3B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db3ec061-e746-387b-bbd3-7dd3322dd09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.205.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9c:60:8b:f1:02:40:13:c4:55:c2:f7:60:eb:79:48:2b:01: 39:0c:8f:8c:0a:d9:c1:63:64:4e:9c:47:59:95:76:02:82:af: 4e:00:5b:36:77:6d:f5:04:cc:e7:38:5a:2a:b5:e6:fd:3c:39: 98:e1:d1:3d:55:ab:8f:0c:74:46:e9:e5:92:41:da:4b:b8:cb: 2d:d8:9d:8b:e6:fa:ef:66:ae:ee:52:43:21:3e:15:1c:e1:ac: 72:92:06:64:3b:41:a5:3a:9f:7a:1c:91:31:9c:be:d5:98:bc: 8a:27:b1:9c:f5:c0:3c:b5:10:25:28:e3:5c:d2:32:7f:0a:48: c4:06:f9:6b:e4:84:f0:11:3d:00:d0:a8:23:e0:f3:d8:28:57: 90:c6:dc:33:ce:98:7c:1b:96:bc:37:80:38:e0:d7:22:ad:4c: d2:7a:a8:2f:87:8c:71:b9:80:1b:b3:80:ab:0c:c9:8f:74:aa: e6:39:9d:db:50:a2:73:38:52:92:5b:40:d5:97:c5:9d:2f:f9: 2f:bb:09:a1:30:83:42:35:18:4a:2c:91:04:e5:3a:dd:60:29: 6b:f3:19:e1:e6:bd:ec:f2:a2:20:dd:30:b8:64:3a:54:14:40: a1:25:a3:35:49:af:37:2f:47:31:16:02:bc:86:81:38:d8:bc: f7:80:7f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ+/8ugOLBswHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzQwNTVjZWItMTMwOC00ZjkyLTk4M2YtMGNlODlkN2ZhNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge2cKB/HkQphXJQouYuKuD5XkV7HY1LK+pyy ipaiKDHn+zQPrdMW0t/z2roHy8KDSQtSv/ZVTlRmtuoioazrawoqw3Yf4FcjXE+6 25/YlwiBMWr2f2rtAa9h/VMHaGvjz6sERdO+7UIu6BuafbCn9i/C78RvvtQARmEV X1kTDAb/nmY0tITAw+ShfS8yOrj6zQ6xhCEDdOfpJ/76QuFURvaH0C5TuIaD/nSX EupAfAaD2MoKQuxBhZOlIARDYs5XCEaC/uk3vv0+tdG1SRgTNfb2dBU6B2xAtHY1 9unTJBchl5NF0H37+YgLrbHGC39eGFAEi6lkGBbda80zHzwwGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq/tQJ3A1bKkzd9UZzUxk8HkDsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIzZWMwNjEtZTc0Ni0z ODdiLWJiZDMtN2RkMzMyMmRkMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI83QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABecYIvxAkATxFXC92DreUgrATkMj4wK2cFjZE6cR1mVdgKCr04AWzZ3 bfUEzOc4Wiq15v08OZjh0T1Vq48MdEbp5ZJB2ku4yy3YnYvm+u9mru5SQyE+FRzh rHKSBmQ7QaU6n3ockTGcvtWYvIonsZz1wDy1ECUo41zSMn8KSMQG+WvkhPARPQDQ qCPg89goV5DG3DPOmHwblrw3gDjg1yKtTNJ6qC+HjHG5gBuzgKsMyY90quY5ndtQ onM4UpJbQNWXxZ0v+S+7CaEwg0I1GEoskQTlOt1gKWvzGeHmvezyoiDdMLhkOlQU QKElozVJrzcvRzEWAryGgTjYvPeAf2c= -----END CERTIFICATE-----Generated at Wed Sep 30 21:29:25 2026 by rpki-client