$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa File: 23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa (raw, json) Hash identifier: tGPZIrKHcIYUp2c/oLQuAoGjR9xTcczxtOekH3roAhE= Subject key identifier: F0:B1:39:8F:A1:1C:D9:D0:FE:DD:22:95:07:6E:FF:49:08:41:2E:A4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA3FD5E3CA4C02C7396900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.132.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3f:d5:e3:ca:4c:02:c7:39:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=bcec1a33-c1e2-4d8c-99bf-dc1380ab1dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:99:97:d2:1f:0e:5a:ca:28:af:d5:8c:88: ae:c9:7f:d5:48:f5:e5:0c:d0:89:d2:62:33:e0:fc: 03:23:09:c8:03:71:31:bc:ff:95:9a:72:56:51:36: 85:91:e7:0f:ff:7c:e7:9e:bb:8c:eb:17:99:80:39: 07:41:b8:75:98:a4:51:d8:6a:01:b5:28:f8:87:f1: e1:ac:fe:7f:ca:52:b7:e7:6d:f1:b8:a4:b9:e6:fd: 3d:3e:94:73:57:df:8e:a4:c7:b2:47:9f:65:50:50: 51:fa:11:fd:4f:ee:68:5b:bb:e7:63:29:91:d8:4e: cf:5a:30:41:b5:1e:04:7a:7f:0d:2d:9b:4c:14:4a: af:f7:1e:23:b0:6a:a9:7d:3e:7b:ed:65:16:79:ca: 13:9d:2d:b0:e5:90:47:d1:ad:38:c6:3e:29:f8:2e: a0:6b:03:33:c1:79:cf:dc:90:ca:37:ca:c7:ca:53: a6:9a:e6:f7:f1:ea:d1:7d:40:dd:9f:25:e7:67:07: 20:3d:54:86:da:7c:0c:3b:b4:b4:96:1e:2e:33:4d: d5:e1:75:11:e8:53:15:90:20:5c:c0:3a:6e:46:57: 7e:79:4c:6e:ee:e8:64:27:83:ea:b6:4c:fb:71:2b: dc:07:7c:4d:17:17:7e:0c:b7:1f:84:1f:97:76:b5: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B1:39:8F:A1:1C:D9:D0:FE:DD:22:95:07:6E:FF:49:08:41:2E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:23:76:e6:12:e4:12:d6:c2:84:68:65:9d:ee:dc:d9:21:61: e3:36:1d:cd:cc:43:53:ee:14:42:82:1d:e9:5c:26:c3:2c:8d: 8b:3f:39:ab:c2:95:5b:0d:e3:95:a6:f8:7e:72:65:ec:46:66: a7:c0:cd:93:f9:55:2a:7c:d5:31:56:6d:84:bb:5d:9a:86:1e: 4c:7f:be:20:04:11:5b:f0:28:f9:67:2a:16:b4:76:d4:88:b4: 8d:16:88:3b:d4:60:09:b1:73:45:6a:d9:59:ab:90:36:05:3e: 49:d6:a9:e5:5f:0e:3f:c6:7c:99:d6:78:ae:de:18:68:3c:73: 90:7b:f8:d2:7c:29:e4:7f:6f:77:d6:27:51:1e:42:ed:e8:11: df:9b:83:54:ef:f5:4d:9b:e4:9c:29:d7:a9:8c:97:6a:41:58: 85:9d:2f:c7:40:92:8d:15:28:55:2c:11:5c:1b:e6:30:bb:30: 93:8b:89:98:56:a7:eb:cc:24:a3:00:ba:dd:3c:f1:f3:99:19: ab:43:c3:48:4e:cf:43:29:73:e5:a2:51:bd:77:d7:3c:12:c4: de:59:9e:0c:91:4d:fc:cf:ac:78:7f:9f:e2:49:d7:fa:4c:0f: 41:0e:ec:e5:4e:6f:f1:4c:3c:79:7f:4e:a5:12:23:0f:45:f1: 15:e4:e8:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqj/V48pMAsc5aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmNlYzFhMzMtYzFlMi00ZDhjLTk5YmYtZGMxMzgwYWIxZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy6Zl9IfDlrKKK/VjIiuyX/VSPXlDNCJ0mIz 4PwDIwnIA3ExvP+VmnJWUTaFkecP/3znnruM6xeZgDkHQbh1mKRR2GoBtSj4h/Hh rP5/ylK3523xuKS55v09PpRzV9+OpMeyR59lUFBR+hH9T+5oW7vnYymR2E7PWjBB tR4Een8NLZtMFEqv9x4jsGqpfT577WUWecoTnS2w5ZBH0a04xj4p+C6gawMzwXnP 3JDKN8rHylOmmub38erRfUDdnyXnZwcgPVSG2nwMO7S0lh4uM03V4XUR6FMVkCBc wDpuRld+eUxu7uhkJ4Pqtkz7cSvcB3xNFxd+DLcfhB+XdrXKNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCxOY+hHNnQ/t0ilQdu/0kIQS6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM2NTNjMGYtMDNiMS0z N2EwLWI4OGItMDQ2YWRiMWYyZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMjduYS5BLWwoRoZZ3u3NkhYeM2Hc3MQ1PuFEKCHelcJsMsjYs/OavC lVsN45Wm+H5yZexGZqfAzZP5VSp81TFWbYS7XZqGHkx/viAEEVvwKPlnKha0dtSI tI0WiDvUYAmxc0Vq2VmrkDYFPknWqeVfDj/GfJnWeK7eGGg8c5B7+NJ8KeR/b3fW J1EeQu3oEd+bg1Tv9U2b5Jwp16mMl2pBWIWdL8dAko0VKFUsEVwb5jC7MJOLiZhW p+vMJKMAut088fOZGatDw0hOz0Mpc+WiUb131zwSxN5ZngyRTfzPrHh/n+JJ1/pM D0EO7OVOb/FMPHl/TqUSIw9F8RXk6No= -----END CERTIFICATE-----Generated at Thu Mar 19 01:54:21 2026 by rpki-client