$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa File: ded29543-1e94-313f-ac46-6c9ebfa2436a.roa (raw, json) Hash identifier: CY+K574IVoIcCJM8mNTqv0jdVqsZ7CLGrv5gNUN0+Pw= Subject key identifier: 48:32:43:4A:6D:4E:F7:4D:65:FF:25:1D:BB:0A:81:D4:F1:D0:AE:CB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC86C114402C2E0F51440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.230.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c8:6c:11:44:02:c2:e0:f5:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5079ca39-11e3-417a-b8d0-904d1ec64985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:39:3a:58:61:a4:81:84:e5:b2:b7:8c:16: 90:08:71:9f:8c:80:f2:59:45:e6:2c:7e:76:a7:4e: 3f:11:6f:a9:a1:c0:18:6e:23:6f:9d:27:d7:4b:99: bf:27:fd:c4:eb:99:44:65:7f:a1:f4:63:c7:af:a5: 23:16:48:54:b2:d6:71:fb:ba:bf:58:2b:56:ba:0e: 0a:49:36:cc:cd:c1:ca:77:96:b8:1f:6a:62:19:2f: 34:07:12:dc:dc:6b:eb:eb:7e:2d:6a:0e:4c:63:91: cb:7d:31:6f:b0:0f:ae:57:af:53:fc:ac:df:2e:58: 83:e3:eb:bb:61:dd:64:34:13:10:e4:c5:bf:85:d5: 6a:e8:01:5c:50:27:f7:90:8c:ec:c0:bb:70:39:40: de:d1:f3:29:68:9b:f9:50:57:f5:31:6f:d4:76:a4: c3:45:1d:9f:fc:8b:c8:85:c0:52:6e:fd:b2:82:81: 40:74:08:bc:3c:87:6f:7a:c9:23:76:5c:50:50:a0: 8d:ef:6b:f2:ee:6c:90:e4:16:5f:b0:9b:74:ef:b8: e8:b6:46:b4:c9:f3:0a:49:a7:d1:ca:24:bb:12:09: c4:14:f7:86:17:1c:09:52:f6:56:12:69:1e:e3:ce: 80:69:44:74:70:b5:c8:0c:57:06:fc:2d:69:77:02: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:32:43:4A:6D:4E:F7:4D:65:FF:25:1D:BB:0A:81:D4:F1:D0:AE:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ded29543-1e94-313f-ac46-6c9ebfa2436a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.230.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4b:bb:56:3e:1c:46:23:55:e2:77:89:3d:ed:02:0c:45:09: 28:65:74:7d:af:03:69:a3:c9:2e:95:a5:75:aa:2a:7d:40:3a: d8:15:64:61:b3:c5:8d:b7:fe:a3:e3:e6:49:bb:d2:1f:7f:4e: f7:34:97:ad:00:c7:6f:84:2c:ee:7d:fc:74:1a:09:6a:00:55: 58:07:9a:49:3c:8a:27:0c:d1:37:2c:46:12:a7:39:c6:a2:6a: 5f:fa:25:bc:c5:31:a8:16:db:2e:2c:8d:cb:ce:b5:a3:db:e9: 2a:78:17:18:85:de:c4:54:ad:b8:25:14:a6:a3:f0:4c:1b:f9: af:4f:5a:fe:70:e1:ff:15:a9:b8:80:e5:0a:d2:71:97:a9:93: 7d:bb:07:10:55:f1:97:c6:2f:0b:01:00:b6:79:57:ac:70:22: 83:68:55:18:40:b4:c2:bb:07:42:f5:c9:37:2c:71:e7:21:79: 47:9e:40:db:91:2b:9d:5a:db:8b:bd:2d:39:6e:89:85:7c:a5: 7c:3b:76:2a:45:95:ed:3f:eb:31:f4:12:a3:d9:66:88:36:8c: 96:43:cd:69:21:d9:4e:64:8e:ff:4c:f3:2d:26:a3:6a:65:3f: f6:a9:fa:af:0c:28:98:79:1a:7e:2c:8d:08:14:73:ce:ef:83: 43:a2:05:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPchsEUQCwuD1FEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTA3OWNhMzktMTFlMy00MTdhLWI4ZDAtOTA0ZDFlYzY0OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHQ5OlhhpIGE5bK3jBaQCHGfjIDyWUXmLH52 p04/EW+pocAYbiNvnSfXS5m/J/3E65lEZX+h9GPHr6UjFkhUstZx+7q/WCtWug4K STbMzcHKd5a4H2piGS80BxLc3Gvr634tag5MY5HLfTFvsA+uV69T/KzfLliD4+u7 Yd1kNBMQ5MW/hdVq6AFcUCf3kIzswLtwOUDe0fMpaJv5UFf1MW/UdqTDRR2f/IvI hcBSbv2ygoFAdAi8PIdveskjdlxQUKCN72vy7myQ5BZfsJt077jotka0yfMKSafR yiS7EgnEFPeGFxwJUvZWEmke486AaUR0cLXIDFcG/C1pdwIFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgyQ0ptTvdNZf8lHbsKgdTx0K7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGVkMjk1NDMtMWU5NC0z MTNmLWFjNDYtNmM5ZWJmYTI0MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI+bPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxLu1Y+HEYjVeJ3iT3tAgxFCShldH2vA2mjyS6VpXWqKn1AOtgVZGGz xY23/qPj5km70h9/Tvc0l60Ax2+ELO59/HQaCWoAVVgHmkk8iicM0TcsRhKnOcai al/6JbzFMagW2y4sjcvOtaPb6Sp4FxiF3sRUrbglFKaj8Ewb+a9PWv5w4f8VqbiA 5QrScZepk327BxBV8ZfGLwsBALZ5V6xwIoNoVRhAtMK7B0L1yTcscecheUeeQNuR K51a24u9LTluiYV8pXw7dipFle0/6zH0EqPZZog2jJZDzWkh2U5kjv9M8y0mo2pl P/ap+q8MKJh5Gn4sjQgUc87vg0OiBbc= -----END CERTIFICATE-----Generated at Mon Sep 28 21:40:26 2026 by rpki-client