$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa File: cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa (raw, json) Hash identifier: GQA/4HLZ9AA50F1fbFBAf1ZnwnNRrLlYWTtprzV13mM= Subject key identifier: BF:69:73:2E:BA:AC:32:7A:02:C1:45:B1:A9:EC:34:9E:37:7E:48:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCA114A621AED66CADD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.222.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ca:11:4a:62:1a:ed:66:ca:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cc2ecf37-5ee5-43d9-968d-44041e521e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:62:00:21:aa:1c:e2:c9:50:25:18:3c:39:5e: f6:e6:f2:f9:ba:72:9b:bc:61:c4:3d:09:02:0f:fa: 8d:d6:71:2f:c4:3a:fd:38:30:ac:62:bd:41:cb:0d: 2d:2a:0d:43:76:db:1d:9f:e9:61:3e:af:c9:3a:0a: 65:d6:a8:33:7c:28:3d:1e:ba:60:c7:8c:74:33:5f: a7:d6:11:e7:a3:8a:d4:12:aa:2c:ae:46:80:6d:95: 85:b0:2e:57:c6:af:c1:2e:8d:33:55:26:65:5f:40: a5:45:ed:96:50:94:1d:fd:00:81:ca:9d:73:02:11: 52:71:95:41:5b:55:47:ea:a6:bf:71:b6:cd:ca:d5: 2e:49:1e:77:0a:c2:69:96:d2:55:68:9a:c2:96:4c: 01:23:1f:dc:c9:ef:9b:13:37:6d:27:b1:3c:41:44: 45:69:23:ea:7a:fa:bd:b9:fc:e3:41:81:b9:32:73: d5:8e:a9:34:5f:a7:fb:f5:eb:e8:da:3b:5f:48:30: d4:2d:ef:0d:80:24:4e:da:c8:00:8d:17:0e:f3:48: ec:61:db:2f:dd:52:32:f6:1d:a6:57:1c:29:5e:76: c7:ed:c5:d0:88:af:a9:6d:47:70:60:b7:e3:5e:b9: 38:b1:b0:b6:d1:33:44:58:81:e6:86:a8:e7:b4:21: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:69:73:2E:BA:AC:32:7A:02:C1:45:B1:A9:EC:34:9E:37:7E:48:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ec:34:98:28:43:18:48:c2:4a:3d:54:20:3d:32:2b:80:3f: b8:5e:22:9f:4e:1b:dc:54:8e:61:1d:dd:57:69:d7:6e:ff:0b: 50:b5:7e:d8:0b:92:ab:a1:09:d2:76:97:84:1d:23:79:4b:3d: 19:a1:c5:36:a0:3b:4a:3e:c2:a0:eb:33:5d:67:12:fc:8d:55: 8b:0c:ca:ba:90:92:f5:b9:9e:5d:6f:5e:f6:eb:fb:0f:1e:0a: e3:c4:56:94:3a:ea:6c:d2:de:74:e7:ac:38:04:bd:d5:64:c2: 0f:59:60:ad:da:30:13:b1:8f:e5:11:54:d3:09:39:00:18:f9: bc:6a:29:78:79:0a:a1:52:99:58:0d:20:95:11:91:42:fa:6d: de:4e:2d:b0:f0:76:b0:9a:c4:73:39:e1:a4:e3:68:1a:8c:f1: b2:12:1b:14:3c:d3:49:97:93:ca:3b:84:ab:16:06:71:f3:03: c5:4a:ae:6f:11:2b:3b:b9:fb:01:9b:2e:03:f2:97:26:34:b6: aa:bf:0d:43:6b:c9:49:4b:37:85:78:a0:92:7a:8c:44:c8:f8: 5b:e4:9d:41:39:3f:41:a8:11:8c:dc:1e:82:60:78:c6:77:69: 5f:4c:11:e6:d0:8f:1d:a5:2a:0c:c1:82:29:88:b2:10:98:a7: 23:11:48:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcoRSmIa7WbK3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2MyZWNmMzctNWVlNS00M2Q5LTk2OGQtNDQwNDFlNTIxZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2IAIaoc4slQJRg8OV725vL5unKbvGHEPQkC D/qN1nEvxDr9ODCsYr1Byw0tKg1Ddtsdn+lhPq/JOgpl1qgzfCg9Hrpgx4x0M1+n 1hHno4rUEqosrkaAbZWFsC5Xxq/BLo0zVSZlX0ClRe2WUJQd/QCByp1zAhFScZVB W1VH6qa/cbbNytUuSR53CsJpltJVaJrClkwBIx/cye+bEzdtJ7E8QURFaSPqevq9 ufzjQYG5MnPVjqk0X6f79evo2jtfSDDULe8NgCRO2sgAjRcO80jsYdsv3VIy9h2m VxwpXnbH7cXQiK+pbUdwYLfjXrk4sbC20TNEWIHmhqjntCFERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9pcy66rDJ6AsFFsansNJ43fkjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZkZjViNzEtZTgwMy0z Y2I4LWEzZDgtN2E4NDVmZWE0OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/sNJgoQxhIwko9VCA9MiuAP7heIp9OG9xUjmEd3Vdp127/C1C1ftgL kquhCdJ2l4QdI3lLPRmhxTagO0o+wqDrM11nEvyNVYsMyrqQkvW5nl1vXvbr+w8e CuPEVpQ66mzS3nTnrDgEvdVkwg9ZYK3aMBOxj+URVNMJOQAY+bxqKXh5CqFSmVgN IJURkUL6bd5OLbDwdrCaxHM54aTjaBqM8bISGxQ800mXk8o7hKsWBnHzA8VKrm8R Kzu5+wGbLgPylyY0tqq/DUNryUlLN4V4oJJ6jETI+FvknUE5P0GoEYzcHoJgeMZ3 aV9MEebQjx2lKgzBgimIshCYpyMRSIM= -----END CERTIFICATE-----Generated at Tue Sep 29 10:49:04 2026 by rpki-client