$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed7d6ef7-5bd2-3e08-af90-7a7fd7a0fa11.roa File: ed7d6ef7-5bd2-3e08-af90-7a7fd7a0fa11.roa (raw, json) Hash identifier: 49P0/OdhJ/hM/opU7GNST+1qbhheOYp7tyZGM3mkj1A= Subject key identifier: EA:5A:79:4A:B1:E1:6B:33:44:7D:EF:DF:EA:8D:38:68:A5:CB:66:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4988D26F478B5BF28317E780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed7d6ef7-5bd2-3e08-af90-7a7fd7a0fa11.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 35.215.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:d2:6f:47:8b:5b:f2:83:17:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=101d74ff-8833-4219-8f1b-2d3c76f52fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:27:ac:de:c1:a1:9a:6d:02:18:ce:d5:41: 2d:76:26:18:0e:57:de:1b:75:1e:ca:5e:6f:f5:b1: 67:7d:d1:81:3f:1a:f3:a9:ad:bb:0b:b1:91:34:96: f5:96:29:36:7d:25:73:b1:58:68:8c:a9:de:73:8f: 0a:c8:55:da:50:89:dd:e3:90:56:f5:e3:dd:53:52: 1e:7d:e2:99:55:4a:31:95:ed:c9:01:83:bf:c2:2c: 34:2a:01:20:2e:0e:2c:6c:46:db:95:d6:f3:01:cc: bd:a3:ab:e7:5f:64:47:c2:e0:5e:f4:07:bb:05:88: f1:7d:72:fb:81:08:99:de:10:0e:85:b6:e6:8c:f4: 17:b6:77:65:6a:ae:6a:4f:e4:07:36:85:9d:49:9a: fc:76:ef:56:79:8c:72:1d:03:33:10:4c:9e:e6:4e: 68:13:13:3a:7d:99:01:12:a3:3e:cf:66:23:8d:f8: 3d:f3:71:44:50:2e:85:dc:ad:1d:32:a8:5e:82:3f: cd:da:58:ad:b3:e5:25:d1:e8:94:91:b4:1c:c5:12: 8f:c5:59:d5:80:a3:dd:bd:c9:12:45:bd:d1:9e:20: 1c:c3:8a:e3:ea:4e:5c:76:5b:c5:6a:de:c4:ee:11: a5:86:1d:0e:1c:a8:d3:fd:fc:b1:5f:d7:46:f8:ba: 2a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5A:79:4A:B1:E1:6B:33:44:7D:EF:DF:EA:8D:38:68:A5:CB:66:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed7d6ef7-5bd2-3e08-af90-7a7fd7a0fa11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4a:87:1c:c4:f4:90:b3:30:94:53:95:3d:59:18:91:04:2e: 51:bb:24:29:98:1a:76:22:c3:b0:70:1b:66:5f:45:5f:71:0e: 94:f6:ce:6c:3a:d6:9b:4e:19:66:2c:b0:43:70:8a:83:bf:b2: af:05:58:47:d7:1c:9e:d9:14:ce:11:05:6f:35:41:1e:09:93: fe:2a:a6:44:90:85:38:6d:2a:88:9a:b4:20:7a:6f:21:d6:13: 8f:25:a9:5c:78:0c:6b:44:55:8b:d7:c7:08:48:5c:9a:24:5d: 66:fc:29:d6:6d:1e:6f:8f:33:9b:a6:cd:e0:f2:b6:56:76:34: 44:7d:ed:1b:3e:4d:6a:5c:cb:15:8f:9e:0b:c4:3d:9b:3f:16: d1:0b:a3:d6:77:43:62:42:29:73:6f:90:f3:b0:75:2f:cb:f4: 91:e7:90:f9:45:d6:4a:17:81:f6:be:d4:cd:a9:f9:45:f6:1b: c7:5f:f0:cf:dd:d1:b8:2c:b0:c0:8c:5f:9c:ce:ea:c6:57:4f: ae:29:06:f8:75:1f:b2:63:bd:58:f2:07:17:de:6e:e9:70:f9: 03:6e:b6:e0:e2:69:b6:cc:5c:32:18:a5:97:de:ce:47:78:ae: 38:da:a1:a2:01:b1:79:01:49:1e:80:5f:9d:4e:54:0f:0c:ac: c6:d8:fe:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiNJvR4tb8oMX54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTAxZDc0ZmYtODgzMy00MjE5LThmMWItMmQzYzc2ZjUyZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiucnrN7BoZptAhjO1UEtdiYYDlfeG3Ueyl5v 9bFnfdGBPxrzqa27C7GRNJb1lik2fSVzsVhojKnec48KyFXaUInd45BW9ePdU1Ie feKZVUoxle3JAYO/wiw0KgEgLg4sbEbbldbzAcy9o6vnX2RHwuBe9Ae7BYjxfXL7 gQiZ3hAOhbbmjPQXtndlaq5qT+QHNoWdSZr8du9WeYxyHQMzEEye5k5oExM6fZkB EqM+z2Yjjfg983FEUC6F3K0dMqhegj/N2lits+Ul0eiUkbQcxRKPxVnVgKPdvckS Rb3RniAcw4rj6k5cdlvFat7E7hGlhh0OHKjT/fyxX9dG+LoqvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpaeUqx4WszRH3v3+qNOGily2ZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWQ3ZDZlZjctNWJkMi0z ZTA4LWFmOTAtN2E3ZmQ3YTBmYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVKhxzE9JCzMJRTlT1ZGJEELlG7JCmYGnYiw7BwG2ZfRV9xDpT2zmw6 1ptOGWYssENwioO/sq8FWEfXHJ7ZFM4RBW81QR4Jk/4qpkSQhThtKoiatCB6byHW E48lqVx4DGtEVYvXxwhIXJokXWb8KdZtHm+PM5umzeDytlZ2NER97Rs+TWpcyxWP ngvEPZs/FtELo9Z3Q2JCKXNvkPOwdS/L9JHnkPlF1koXgfa+1M2p+UX2G8df8M/d 0bgssMCMX5zO6sZXT64pBvh1H7JjvVjyBxfebulw+QNutuDiabbMXDIYpZfezkd4 rjjaoaIBsXkBSR6AX51OVA8MrMbY/sU= -----END CERTIFICATE-----Generated at Sat Sep 26 15:58:41 2026 by rpki-client