$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa File: 23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa (raw, json) Hash identifier: 4YXov7Wl8liuktm0gtotbV6DH0uU2axWDC1AgvoPyE4= Subject key identifier: 1C:17:DF:19:46:74:D2:A0:53:45:1B:93:70:5F:B6:9B:EF:44:3C:28 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D86B61E8A9875A1888B40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.132.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:86:b6:1e:8a:98:75:a1:88:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=136361d3-3feb-4f6c-bce7-eff7f52ea315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1d:d4:37:a5:66:61:6d:fc:18:90:88:ec:63: 8a:0b:dc:7f:fb:7f:82:a3:c6:cb:8b:9a:33:6c:c4: 0f:ee:14:f2:b3:03:4a:c3:19:70:1f:a5:ba:f4:5d: a5:60:28:29:d2:fc:e8:21:c2:93:d8:86:99:c8:59: a8:de:00:82:86:0f:9e:01:de:55:70:84:04:36:41: 99:7a:10:66:13:95:90:f4:1d:e1:50:c9:76:a9:ac: ac:e0:f4:8e:38:c0:de:d7:db:a3:2a:d3:38:6c:94: a0:45:e8:93:cd:11:50:be:04:9c:b9:04:54:52:ff: 1e:98:6d:1a:55:1a:75:e8:b4:86:d1:f5:17:08:3f: 27:e2:3a:ec:13:5b:6f:a8:33:4e:d2:e1:0a:6a:fe: 24:16:29:8e:21:98:20:cd:44:c4:89:9a:0d:fa:35: 92:b4:ed:7e:9f:70:f3:6f:63:a6:58:48:29:a7:18: 6a:78:8b:e6:82:7b:a9:cb:63:65:8a:8c:ae:98:55: ad:e4:61:40:c2:64:a6:a4:1d:5a:99:3f:56:e8:f1: 02:6a:ce:81:40:6d:85:b5:c4:91:8c:f9:63:77:2d: 50:ee:c0:d2:a3:a3:f5:66:dd:6d:8d:e9:ed:7a:a9: 9d:f8:80:8c:ef:a0:b9:e6:14:c8:7d:7d:39:da:e5: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:DF:19:46:74:D2:A0:53:45:1B:93:70:5F:B6:9B:EF:44:3C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4b:d2:ae:8c:2f:bb:4d:23:47:b5:62:96:94:f3:e8:0a:5e: 61:92:87:56:80:73:c3:81:8d:56:84:84:c7:5a:b0:8e:d4:83: 55:8b:fd:70:26:56:ac:54:45:a3:89:a4:3e:c0:3f:24:02:23: 43:78:e1:21:ec:71:ee:40:c9:7e:04:6b:3a:f9:9b:41:0e:d0: 09:cd:69:8b:86:af:16:ac:ba:09:bb:31:95:a1:d1:c8:4f:34: a5:0f:ff:26:cf:32:06:78:d9:2e:3d:40:1b:8b:bd:03:76:77: 50:4d:99:78:37:81:41:c4:75:72:0f:70:21:58:da:7f:4c:51: e2:40:45:b4:9e:55:0a:7c:f7:52:82:e4:9e:c7:d6:fc:56:7f: d5:cd:76:93:fb:c6:06:7d:a6:f6:7b:b8:cb:74:fc:55:ba:43: cf:07:3a:14:fd:88:76:81:cf:48:1a:9a:55:07:24:97:6e:ed: 3b:5d:94:3f:49:f0:7d:de:ee:0e:dc:7e:d0:a9:2f:6e:d7:d2: 64:c7:f6:d6:aa:21:6e:82:b4:14:aa:b5:3c:8c:b9:99:d0:29: 8d:43:ea:c6:1e:5a:17:bf:79:27:65:e7:72:79:87:6b:49:39: c2:aa:eb:96:ca:28:9d:f3:f2:74:56:5c:b7:3c:ab:d4:f3:2f: bf:82:da:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYa2HoqYdaGIi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTM2MzYxZDMtM2ZlYi00ZjZjLWJjZTctZWZmN2Y1MmVhMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh3UN6VmYW38GJCI7GOKC9x/+3+Co8bLi5oz bMQP7hTyswNKwxlwH6W69F2lYCgp0vzoIcKT2IaZyFmo3gCChg+eAd5VcIQENkGZ ehBmE5WQ9B3hUMl2qays4PSOOMDe19ujKtM4bJSgReiTzRFQvgScuQRUUv8emG0a VRp16LSG0fUXCD8n4jrsE1tvqDNO0uEKav4kFimOIZggzUTEiZoN+jWStO1+n3Dz b2OmWEgppxhqeIvmgnupy2NlioyumFWt5GFAwmSmpB1amT9W6PECas6BQG2FtcSR jPljdy1Q7sDSo6P1Zt1tjenteqmd+ICM76C55hTIfX052uU3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwX3xlGdNKgU0Ubk3BftpvvRDwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM2NTNjMGYtMDNiMS0z N2EwLWI4OGItMDQ2YWRiMWYyZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdL0q6ML7tNI0e1YpaU8+gKXmGSh1aAc8OBjVaEhMdasI7Ug1WL/XAm VqxURaOJpD7APyQCI0N44SHsce5AyX4Eazr5m0EO0AnNaYuGrxasugm7MZWh0chP NKUP/ybPMgZ42S49QBuLvQN2d1BNmXg3gUHEdXIPcCFY2n9MUeJARbSeVQp891KC 5J7H1vxWf9XNdpP7xgZ9pvZ7uMt0/FW6Q88HOhT9iHaBz0gamlUHJJdu7TtdlD9J 8H3e7g7cftCpL27X0mTH9taqIW6CtBSqtTyMuZnQKY1D6sYeWhe/eSdl53J5h2tJ OcKq65bKKJ3z8nRWXLc8q9TzL7+C2so= -----END CERTIFICATE-----Generated at Sat Oct 3 10:52:30 2026 by rpki-client