$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f36399b4-707e-3503-a48d-cf36c1b09eb2.roa File: f36399b4-707e-3503-a48d-cf36c1b09eb2.roa (raw, json) Hash identifier: liJcXiMbiB/uR8LiRTGl6W2Xv3vUkdUaN8+x1ML7ZMo= Subject key identifier: 3F:4C:D6:77:EA:44:9D:89:6B:EB:BD:FB:BC:58:E3:C5:3B:06:B2:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC0399BDA46FAB9992480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f36399b4-707e-3503-a48d-cf36c1b09eb2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.240.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c0:39:9b:da:46:fa:b9:99:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7635bd5e-e827-48c2-96e4-a0f18a21d508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:bf:84:58:79:f6:72:89:83:7f:38:d6:6e: 91:3a:96:8b:c2:1c:65:e9:20:7d:57:95:75:3d:76: c8:fd:ee:13:38:d4:eb:bb:26:96:23:99:58:c4:c3: f0:b8:d3:9f:f4:a6:48:85:86:fc:34:3a:20:92:8a: c2:90:7a:35:0f:c7:5f:9f:a7:98:6c:56:20:1c:a5: 28:15:3f:9e:9d:d8:8d:17:94:45:e7:84:ac:50:22: 2a:ed:0c:7f:8b:2c:8a:ee:7f:24:0c:b5:ae:57:89: ee:cc:2c:d9:71:13:8d:18:79:d0:9e:7c:4e:c2:65: c3:10:68:f9:d5:40:ca:92:1e:9c:56:3d:60:a9:c9: 15:c6:31:af:6c:06:cd:80:40:3b:09:a9:39:6b:0b: d6:74:c2:0e:37:a3:ac:ad:d0:90:cd:13:02:4a:10: 95:3f:ee:92:a0:ad:6a:96:a5:26:5e:f2:7c:53:d1: 2f:3b:76:c4:2d:84:47:e0:6d:27:0b:24:95:38:a7: cd:93:33:c5:66:a0:8f:0a:9e:94:43:8f:9c:1e:72: 99:ca:ae:d7:54:b4:ce:4e:dc:71:f9:70:e3:ca:c9: 8b:9e:37:bf:1f:6c:80:ea:1d:fc:f5:85:77:d0:aa: 8b:94:e6:23:4f:a1:c4:f1:fd:12:87:a7:a1:7b:40: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4C:D6:77:EA:44:9D:89:6B:EB:BD:FB:BC:58:E3:C5:3B:06:B2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f36399b4-707e-3503-a48d-cf36c1b09eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f9:a8:82:1e:8b:00:1c:13:22:5b:4c:ea:a6:86:5f:d8:fd: a2:3f:c1:b9:48:02:d7:f0:88:16:ff:25:bb:7a:19:7d:11:0c: 31:8d:72:66:bd:8a:d4:ab:65:8c:d1:c0:a2:68:13:8a:38:4e: 97:ce:9b:6f:d6:a9:c6:95:3b:bf:b0:b1:0c:7a:26:8e:65:45: 0e:53:3f:77:48:d2:db:06:91:ec:49:93:81:04:34:61:6d:18: e7:f6:1d:3b:87:45:3b:d9:52:35:c1:96:22:8d:3f:88:14:46: f6:8f:1b:9d:4c:c9:af:cf:0e:85:27:f8:bd:84:ab:40:5b:dc: 5c:4a:65:7a:a5:f1:90:a5:48:f3:d4:5b:0f:af:00:3f:e8:01: 79:8a:8c:bc:48:7a:f3:ae:d7:86:4c:64:63:85:4f:b4:d2:9f: d9:4b:c9:bc:e7:4a:af:f8:69:17:67:93:fb:20:f1:bb:29:39: 35:fc:71:58:cc:21:4c:2b:dd:b1:2a:05:7f:cf:a4:62:79:5c: c3:cd:1b:2f:77:37:7d:15:4b:29:08:51:9f:20:03:66:79:c0: 05:90:e0:b2:27:74:16:18:a4:2c:1b:7e:7d:d3:0a:1d:d4:d2: 19:00:6b:ec:ec:ca:db:0a:d9:c6:9d:23:47:68:8a:8d:cf:9c: 22:67:62:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcA5m9pG+rmZJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzYzNWJkNWUtZTgyNy00OGMyLTk2ZTQtYTBmMThhMjFkNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcS/hFh59nKJg3841m6ROpaLwhxl6SB9V5V1 PXbI/e4TONTruyaWI5lYxMPwuNOf9KZIhYb8NDogkorCkHo1D8dfn6eYbFYgHKUo FT+endiNF5RF54SsUCIq7Qx/iyyK7n8kDLWuV4nuzCzZcRONGHnQnnxOwmXDEGj5 1UDKkh6cVj1gqckVxjGvbAbNgEA7Cak5awvWdMION6OsrdCQzRMCShCVP+6SoK1q lqUmXvJ8U9EvO3bELYRH4G0nCySVOKfNkzPFZqCPCp6UQ4+cHnKZyq7XVLTOTtxx +XDjysmLnje/H2yA6h389YV30KqLlOYjT6HE8f0Sh6ehe0A/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9M1nfqRJ2Ja+u9+7xY48U7BrI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjM2Mzk5YjQtNzA3ZS0z NTAzLWE0OGQtY2YzNmMxYjA5ZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD35qIIeiwAcEyJbTOqmhl/Y/aI/wblIAtfwiBb/Jbt6GX0RDDGNcma9 itSrZYzRwKJoE4o4TpfOm2/WqcaVO7+wsQx6Jo5lRQ5TP3dI0tsGkexJk4EENGFt GOf2HTuHRTvZUjXBliKNP4gURvaPG51Mya/PDoUn+L2Eq0Bb3FxKZXql8ZClSPPU Ww+vAD/oAXmKjLxIevOu14ZMZGOFT7TSn9lLybznSq/4aRdnk/sg8bspOTX8cVjM IUwr3bEqBX/PpGJ5XMPNGy93N30VSykIUZ8gA2Z5wAWQ4LIndBYYpCwbfn3TCh3U 0hkAa+zsytsK2cadI0doio3PnCJnYhI= -----END CERTIFICATE-----Generated at Mon Sep 28 19:36:04 2026 by rpki-client