$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa File: 43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa (raw, json) Hash identifier: JVhMGUfCo955BYQ1TWt0mtAfKN3AwTHVLwG1dAYWwDM= Subject key identifier: B0:EB:A9:A6:08:D5:B0:61:5E:A4:DB:28:D0:B5:9B:26:B7:1E:92:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8007D3A8EDE9BC4C6B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.239.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:80:07:d3:a8:ed:e9:bc:4c:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e997d94a-2406-4c1a-aaed-b1c1c6232c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:ca:ec:d9:7b:94:d9:91:82:c1:a2:f6:41: 78:37:56:2c:be:b6:34:09:c4:58:7a:fd:83:b6:f1: 45:d6:bd:0a:1c:b9:5d:43:c9:86:c4:91:3e:d9:cc: 40:85:f0:cb:32:e6:60:2c:45:07:3c:18:71:ca:27: 2d:3e:df:dd:16:de:15:e8:02:db:88:c9:b5:8d:ed: 7e:7f:cf:3f:70:5e:db:d9:27:6c:a2:dd:5d:e7:7c: 26:74:65:7e:68:97:8a:8c:06:48:66:1b:e4:1c:72: c5:06:d9:d4:84:37:d7:5e:51:ed:a3:21:12:90:f2: bd:9a:8b:e8:05:7b:f1:e2:19:1c:43:28:65:3e:ef: 66:2b:83:95:9b:0c:d5:8a:d7:b4:6d:20:f8:83:fd: 45:a5:3b:32:8b:7e:a9:b6:90:0f:8d:51:15:1b:2b: a3:5d:42:e5:a6:81:db:52:bf:d6:f4:e5:db:72:ef: 08:28:92:8d:7d:49:03:f9:10:93:2a:c0:1b:ad:ae: 30:1c:e7:43:62:e3:0d:e5:74:4e:9a:3d:8a:5c:88: 27:7f:82:af:4e:04:3e:31:99:f0:c1:a9:cd:de:10: b8:bd:91:c3:d4:c9:12:fa:87:d5:28:cc:0a:b8:19: 20:c2:04:11:c0:b8:d2:a2:36:e5:34:cc:c2:6e:dd: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EB:A9:A6:08:D5:B0:61:5E:A4:DB:28:D0:B5:9B:26:B7:1E:92:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:0b:5e:ff:38:b6:d2:6b:1b:98:3c:0a:b8:0c:ea:31:ff:11: 21:d8:08:71:91:2f:37:20:fc:f5:39:a5:ed:af:7a:b6:98:30: 8d:5d:68:0b:11:0d:d8:c5:89:c2:0f:c3:00:6b:72:0c:18:8b: 34:cb:5a:09:92:4a:fc:9b:c5:97:d3:3f:8b:aa:9b:fb:23:60: 50:27:a8:e1:e0:17:e1:42:75:4a:a4:db:24:99:5a:6a:30:ce: 01:64:fd:48:df:34:e2:e2:12:e6:16:8a:22:b1:c8:6e:e4:f5: ac:f6:6a:1d:e5:81:18:f2:8d:d9:d0:48:46:a8:e8:ca:30:9a: 46:76:d9:28:23:ce:6f:e8:b9:6e:7f:1a:56:e4:1d:3a:1f:dd: 02:27:b5:4e:3b:b7:bf:1e:38:4f:5e:c1:04:e2:e7:9d:89:2d: e1:46:a0:30:18:49:32:6c:1a:f5:d3:6e:a3:a9:6b:9f:ae:a3: f7:ec:b3:f0:c9:14:95:ab:8c:72:27:88:ba:6b:30:62:9f:78: 76:b1:27:67:b7:83:2f:b9:74:08:a7:fb:61:1e:44:d8:63:fc: 33:2c:4b:fb:9b:48:c1:7e:96:97:6b:f5:4a:5a:aa:b9:e6:25: 10:e4:02:6e:f7:76:4b:ca:3c:25:ec:7f:8f:8b:87:5a:95:03: 62:03:67:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYAH06jt6bxMa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTk5N2Q5NGEtMjQwNi00YzFhLWFhZWQtYjFjMWM2MjMyYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMLK7Nl7lNmRgsGi9kF4N1YsvrY0CcRYev2D tvFF1r0KHLldQ8mGxJE+2cxAhfDLMuZgLEUHPBhxyictPt/dFt4V6ALbiMm1je1+ f88/cF7b2Sdsot1d53wmdGV+aJeKjAZIZhvkHHLFBtnUhDfXXlHtoyESkPK9movo BXvx4hkcQyhlPu9mK4OVmwzVite0bSD4g/1FpTsyi36ptpAPjVEVGyujXULlpoHb Ur/W9OXbcu8IKJKNfUkD+RCTKsAbra4wHOdDYuMN5XROmj2KXIgnf4KvTgQ+MZnw wanN3hC4vZHD1MkS+ofVKMwKuBkgwgQRwLjSojblNMzCbt1/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDrqaYI1bBhXqTbKNC1mya3HpKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDNhNDllZTMtOGFhNC0z M2JjLThkNTItZDgwMWU1ZjBhMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4LXv84ttJrG5g8CrgM6jH/ESHYCHGRLzcg/PU5pe2veraYMI1daAsR DdjFicIPwwBrcgwYizTLWgmSSvybxZfTP4uqm/sjYFAnqOHgF+FCdUqk2ySZWmow zgFk/UjfNOLiEuYWiiKxyG7k9az2ah3lgRjyjdnQSEao6MowmkZ22Sgjzm/ouW5/ GlbkHTof3QIntU47t78eOE9ewQTi552JLeFGoDAYSTJsGvXTbqOpa5+uo/fss/DJ FJWrjHIniLprMGKfeHaxJ2e3gy+5dAin+2EeRNhj/DMsS/ubSMF+lpdr9Upaqrnm JRDkAm73dkvKPCXsf4+Lh1qVA2IDZ2U= -----END CERTIFICATE-----Generated at Thu Oct 8 20:50:19 2026 by rpki-client