$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa File: d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa (raw, json) Hash identifier: 3zaxgOm0z2crzQcH5q2IJDUAHrpPwNUSbQnQnu6z1dU= Subject key identifier: 0C:6E:18:0F:79:10:73:DC:27:D4:E4:80:66:05:92:DC:57:F8:69:28 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC1C4C4E5AD9ACC3BFD60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 35.195.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c1:c4:c4:e5:ad:9a:cc:3b:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0f1dd246-cd73-4162-9191-7a7d3e87eaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:c7:0d:54:58:87:c8:76:d4:60:47:67:9b: 1e:f0:92:46:d0:63:bf:28:a6:83:ee:72:c5:9f:3e: 3f:5d:68:86:d0:99:f6:26:de:6b:c5:e7:ea:bd:5c: 09:15:d5:8f:2d:26:50:c1:4f:e6:a1:d8:7f:8b:81: be:a1:28:c1:ff:2a:43:1e:74:04:98:a8:e0:cb:f6: ed:4e:35:43:de:20:a3:f5:05:4a:a3:f7:dc:2d:ed: bd:ba:8a:44:62:08:43:13:ee:5d:c2:a9:83:d9:61: ca:c9:6a:a4:d5:96:51:00:c2:51:dd:d7:ff:f0:6b: c7:66:f9:91:94:61:24:bb:73:84:6f:ee:da:52:c5: b5:62:6c:97:51:d4:d5:ef:5f:be:f5:a7:55:45:19: 32:6d:3b:77:82:46:3d:f0:b6:88:db:0a:8c:87:8f: 37:ca:28:fd:41:28:b1:35:69:13:18:95:7d:d8:50: f9:54:41:6b:28:bf:bc:d2:c8:53:09:1f:b6:8d:43: 83:9a:d4:e3:79:0f:68:e7:59:ea:89:38:33:b8:ce: 48:29:b8:3b:65:47:1c:74:6d:42:97:a0:33:28:cf: 06:67:c6:88:3a:b5:47:cd:37:e9:55:c1:6a:84:1d: 79:1e:09:da:fa:fe:98:d7:79:f3:76:69:4e:a1:b2: 49:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6E:18:0F:79:10:73:DC:27:D4:E4:80:66:05:92:DC:57:F8:69:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7e:58:6a:c7:95:b5:53:f4:db:3f:7a:18:dd:c9:1e:f9:82: 16:ea:26:1e:42:27:68:a1:b0:2b:b9:5b:be:b3:86:46:1a:28: 8e:78:d9:51:1a:40:24:37:8d:4b:f8:c2:9a:55:c3:ef:d9:ac: e5:b2:a0:01:7c:e3:74:b4:39:87:b2:02:12:f9:ad:1a:97:c8: 7a:c1:2d:d2:62:b2:e1:ca:30:fd:01:95:d9:8f:d2:bb:d6:ea: 0a:b9:ee:a0:97:df:56:9d:67:88:63:93:cc:27:ec:4b:3f:20: ab:d3:05:b9:f5:a8:6c:23:10:1e:bf:e9:d3:b6:7f:83:91:a1: 27:47:5d:89:ed:57:ba:61:a5:10:ef:8b:46:73:c3:ce:85:cc: d2:65:d5:f9:7c:92:cc:a0:91:78:d0:24:db:26:6d:4a:7a:20: 46:6c:9c:38:34:ea:0b:d5:07:c8:f7:26:4a:e2:c7:7a:64:2f: 9f:f0:8d:1b:5f:5a:f3:5f:07:c3:1c:53:fe:47:7a:81:b8:22: e8:ea:3b:7b:3c:4f:af:b6:3f:dd:ff:b0:ae:a9:47:f5:db:be: 65:ea:49:c1:db:be:2b:1e:d0:94:88:02:a0:6b:b8:d5:b8:3e: 96:1d:8a:33:4d:2d:50:82:bb:30:ad:cd:ee:4e:e6:73:60:d3: 08:94:29:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcHExOWtmsw7/WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGYxZGQyNDYtY2Q3My00MTYyLTkxOTEtN2E3ZDNlODdlYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssXHDVRYh8h21GBHZ5se8JJG0GO/KKaD7nLF nz4/XWiG0Jn2Jt5rxefqvVwJFdWPLSZQwU/modh/i4G+oSjB/ypDHnQEmKjgy/bt TjVD3iCj9QVKo/fcLe29uopEYghDE+5dwqmD2WHKyWqk1ZZRAMJR3df/8GvHZvmR lGEku3OEb+7aUsW1YmyXUdTV71++9adVRRkybTt3gkY98LaI2wqMh483yij9QSix NWkTGJV92FD5VEFrKL+80shTCR+2jUODmtTjeQ9o51nqiTgzuM5IKbg7ZUccdG1C l6AzKM8GZ8aIOrVHzTfpVcFqhB15Hgna+v6Y13nzdmlOobJJowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxuGA95EHPcJ9TkgGYFktxX+GkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhhYTdkMzEtNWVkYS0z ZDA0LThhMTItMTZiZDFhMzZlYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd+WGrHlbVT9Ns/ehjdyR75ghbqJh5CJ2ihsCu5W76zhkYaKI542VEa QCQ3jUv4wppVw+/ZrOWyoAF843S0OYeyAhL5rRqXyHrBLdJisuHKMP0BldmP0rvW 6gq57qCX31adZ4hjk8wn7Es/IKvTBbn1qGwjEB6/6dO2f4ORoSdHXYntV7phpRDv i0Zzw86FzNJl1fl8ksygkXjQJNsmbUp6IEZsnDg06gvVB8j3Jkrix3pkL5/wjRtf WvNfB8McU/5HeoG4IujqO3s8T6+2P93/sK6pR/XbvmXqScHbvise0JSIAqBruNW4 PpYdijNNLVCCuzCtze5O5nNg0wiUKas= -----END CERTIFICATE-----Generated at Mon Sep 28 05:26:23 2026 by rpki-client