$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa File: f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa (raw, json) Hash identifier: X5EArgXZqBhpiWxC+15gI41O15WDZQL+BycnEzmNbho= Subject key identifier: E5:4E:4E:6A:C4:F7:3A:1D:3B:01:82:99:44:75:B4:56:95:2E:AF:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DDD93A4D3AFB9C5C3DE20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.203.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:dd:93:a4:d3:af:b9:c5:c3:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1802f832-a733-4ecb-b5e2-548e5a63a04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:55:20:41:28:5b:6a:30:90:89:05:6e:dd: c9:a6:23:1c:c9:d3:6b:f3:87:f8:c8:be:91:f1:78: d8:cb:29:46:2c:f5:a2:c9:26:73:ce:65:67:e1:a4: 0b:6a:00:0c:3d:ad:ec:c1:69:21:da:d3:42:5b:6c: 97:7d:6d:f5:e8:a2:38:e2:ce:a7:b7:f8:ab:ab:cb: 37:70:27:0a:7d:ef:c0:aa:9b:fd:4e:ae:1f:e9:79: 36:12:b5:32:ca:d5:c0:c6:36:7b:59:82:2c:b9:6c: 1c:7f:a5:cc:c4:c7:74:72:7f:d4:4b:54:38:25:13: b9:82:01:ed:17:78:b4:c4:bb:e7:46:d6:92:1a:17: 57:f0:90:9a:81:df:91:db:38:14:a4:d7:84:ab:0b: 10:d7:95:3b:50:91:f6:4e:d0:7f:bd:2a:78:1d:a3: 74:e9:6e:a2:c0:a1:df:88:48:15:45:a7:a3:75:54: 94:04:a7:f5:94:a1:25:6a:3d:f6:81:73:bb:2a:7c: e6:5e:65:5e:53:78:eb:df:e0:66:92:17:71:f7:ef: 68:90:dd:09:9f:79:9a:e1:ef:5d:a9:65:2d:21:6a: 2d:ff:64:1c:84:8b:74:f6:c6:3c:77:7b:f7:69:f8: af:4d:95:07:2c:32:b1:a5:d1:fc:b8:b2:f6:b4:b3: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4E:4E:6A:C4:F7:3A:1D:3B:01:82:99:44:75:B4:56:95:2E:AF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3b:93:7e:33:a7:fe:b7:f1:9a:9c:c4:7d:5a:0d:89:2a:b2: 0e:cf:45:8c:ec:26:47:6c:7e:24:ea:84:47:3c:30:67:f6:24: 9c:54:d0:0b:cd:bf:13:07:ac:22:14:dd:0b:03:23:90:33:a9: 43:89:9b:9a:7a:bf:4b:78:f8:9a:15:79:cb:81:91:53:c6:42: e3:97:bb:85:cb:00:0f:bf:d1:88:0b:20:e7:82:bc:ff:f1:ab: bb:16:bb:c7:6c:cf:17:f8:9c:08:42:48:f6:f7:da:0d:e8:ce: eb:97:40:4d:d9:15:ed:6c:9a:15:37:d8:ae:2f:5e:6a:81:65: bf:ee:71:c9:cf:ef:56:8c:93:90:80:d3:c5:c8:26:01:d1:c9: 45:7a:56:2a:4c:7b:0c:27:71:53:2d:ef:de:0e:50:dc:7a:1c: 73:26:e6:59:fb:7f:57:c3:02:94:95:92:91:64:0b:07:e0:ef: 21:55:61:84:35:95:bc:16:d6:c8:72:3c:50:87:43:a1:9f:19: c6:e1:02:c6:73:8b:71:8d:74:7b:6f:d6:a2:09:87:f3:c9:5c: 23:75:30:24:c2:b1:60:d3:f0:cd:dc:c4:66:40:a8:db:62:0c: 1e:2c:91:e8:3b:68:49:ed:65:a4:30:c4:92:3c:65:b1:90:5b: d6:f5:5f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd2TpNOvucXD3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTgwMmY4MzItYTczMy00ZWNiLWI1ZTItNTQ4ZTVhNjNhMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmztVIEEoW2owkIkFbt3JpiMcydNr84f4yL6R 8XjYyylGLPWiySZzzmVn4aQLagAMPa3swWkh2tNCW2yXfW316KI44s6nt/irq8s3 cCcKfe/Aqpv9Tq4f6Xk2ErUyytXAxjZ7WYIsuWwcf6XMxMd0cn/US1Q4JRO5ggHt F3i0xLvnRtaSGhdX8JCagd+R2zgUpNeEqwsQ15U7UJH2TtB/vSp4HaN06W6iwKHf iEgVRaejdVSUBKf1lKElaj32gXO7KnzmXmVeU3jr3+Bmkhdx9+9okN0Jn3ma4e9d qWUtIWot/2QchIt09sY8d3v3afivTZUHLDKxpdH8uLL2tLOsMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVOTmrE9zodOwGCmUR1tFaVLq+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjE1MWYyY2MtODgxMS0z ZmExLWE0OTYtYzVkYzE5OTk1YWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ7k34zp/638ZqcxH1aDYkqsg7PRYzsJkdsfiTqhEc8MGf2JJxU0AvN vxMHrCIU3QsDI5AzqUOJm5p6v0t4+JoVecuBkVPGQuOXu4XLAA+/0YgLIOeCvP/x q7sWu8dszxf4nAhCSPb32g3ozuuXQE3ZFe1smhU32K4vXmqBZb/uccnP71aMk5CA 08XIJgHRyUV6VipMewwncVMt794OUNx6HHMm5ln7f1fDApSVkpFkCwfg7yFVYYQ1 lbwW1shyPFCHQ6GfGcbhAsZzi3GNdHtv1qIJh/PJXCN1MCTCsWDT8M3cxGZAqNti DB4skeg7aEntZaQwxJI8ZbGQW9b1X4c= -----END CERTIFICATE-----Generated at Mon Sep 28 22:49:49 2026 by rpki-client