$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa File: 5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa (raw, json) Hash identifier: QszohOIcAJr5ZIZRnASgq/2T4bV2BE3MzbSfyaRTLfU= Subject key identifier: 4D:40:5A:AF:28:7B:B0:8C:37:18:F5:9D:23:F2:EB:36:07:2E:CA:49 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497381D8A32803485BA1FEDC Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11344 IP address blocks: 34.152.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:81:d8:a3:28:03:48:5b:a1:fe:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2bd32165-6f3b-4369-a1da-0727600d3b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:82:dc:fe:ba:56:cc:53:6a:77:38:15:5e: 2e:3d:7a:2e:75:93:4b:89:db:b1:7d:c3:e1:32:26: 8d:51:2d:10:9c:0c:f6:cf:78:fd:21:ee:a8:0d:aa: f6:65:56:5f:dd:fb:a6:72:36:3e:4f:67:6a:4a:dd: 99:74:c0:de:d5:b1:8e:2e:37:da:fd:8a:fe:07:83: da:41:ff:f3:df:c9:b5:1d:08:12:9c:86:cf:43:31: 4e:00:9c:e1:c0:89:16:2d:27:00:be:a8:99:98:17: 73:a9:74:07:63:3b:da:84:95:f2:69:fd:30:f8:07: 3d:41:c1:1c:d7:b9:be:bb:74:d2:01:9c:c7:64:66: 19:30:2a:a5:ad:f3:87:6a:90:71:96:14:28:06:f1: 44:ca:52:a6:4a:af:86:54:94:52:69:c1:8c:4f:b7: ef:a8:33:ae:2f:19:eb:bc:ec:04:2e:19:6f:d6:4f: 5d:42:23:98:9d:ec:9e:b0:9e:a3:13:58:f9:4a:b5: c5:85:23:e8:f9:6a:ec:f5:26:51:d2:76:88:30:9c: 55:dc:bc:fa:1e:5d:63:91:d4:58:4e:9b:38:f0:ec: af:e3:c5:08:4f:d3:a2:cb:de:b6:33:d1:b5:d4:5d: 3e:79:16:d4:33:67:9c:d6:a2:66:d4:c9:21:f7:90: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:40:5A:AF:28:7B:B0:8C:37:18:F5:9D:23:F2:EB:36:07:2E:CA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5236cabc-9cca-3e64-9cc7-1ea6cdcdcdce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:53:1d:ae:8e:c7:0c:f3:8e:ba:26:04:11:6f:b3:1f:e2:d8: 70:16:72:a3:5b:c5:c3:bf:49:61:50:ca:6f:78:ae:22:9c:72: 3d:c8:77:e4:67:58:67:f1:18:81:61:a2:a7:da:bd:41:76:f0: 08:3f:09:42:f9:f5:4e:14:94:e4:6e:f0:59:59:82:31:46:5d: f4:ea:85:da:74:0c:82:c9:d0:60:3b:1a:9f:a2:83:5c:7a:07: 08:f0:70:f2:92:a7:ec:20:db:dd:08:7d:96:92:87:17:34:47: a4:8b:e8:37:6c:36:5c:61:7f:e1:9e:6c:c5:fa:92:d0:5d:dd: f3:1d:77:f1:7e:01:29:f3:20:18:a5:50:5b:da:9f:a2:68:40: 63:f5:14:68:89:99:79:90:89:d7:95:d7:3b:95:aa:bf:ef:2e: 6a:39:a9:7a:ff:a9:0c:2c:92:d2:e3:ab:b0:f6:47:8c:12:cb: 97:9b:13:99:ca:ca:ce:e6:2b:0d:cd:96:ac:0f:59:e3:ca:08: 0f:c8:8d:a6:44:90:f1:93:0c:b4:7b:17:c0:cc:55:94:65:9b: e3:d6:6e:89:f7:9d:5b:da:43:cd:03:35:ea:2f:07:40:ca:5c: d1:85:87:a8:07:37:65:d3:44:96:54:41:d5:3a:52:91:93:c7: 81:63:5b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4HYoygDSFuh/twwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmJkMzIxNjUtNmYzYi00MzY5LWExZGEtMDcyNzYwMGQzYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1+C3P66VsxTanc4FV4uPXoudZNLiduxfcPh MiaNUS0QnAz2z3j9Ie6oDar2ZVZf3fumcjY+T2dqSt2ZdMDe1bGOLjfa/Yr+B4Pa Qf/z38m1HQgSnIbPQzFOAJzhwIkWLScAvqiZmBdzqXQHYzvahJXyaf0w+Ac9QcEc 17m+u3TSAZzHZGYZMCqlrfOHapBxlhQoBvFEylKmSq+GVJRSacGMT7fvqDOuLxnr vOwELhlv1k9dQiOYneyesJ6jE1j5SrXFhSPo+Wrs9SZR0naIMJxV3Lz6Hl1jkdRY Tps48Oyv48UIT9Oiy962M9G11F0+eRbUM2ec1qJm1Mkh95AmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1AWq8oe7CMNxj1nSPy6zYHLspJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTIzNmNhYmMtOWNjYS0z ZTY0LTljYzctMWVhNmNkY2RjZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIphYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZTHa6OxwzzjromBBFvsx/i2HAWcqNbxcO/SWFQym94riKccj3Id+Rn WGfxGIFhoqfavUF28Ag/CUL59U4UlORu8FlZgjFGXfTqhdp0DILJ0GA7Gp+ig1x6 BwjwcPKSp+wg290IfZaShxc0R6SL6DdsNlxhf+GebMX6ktBd3fMdd/F+ASnzIBil UFvan6JoQGP1FGiJmXmQideV1zuVqr/vLmo5qXr/qQwsktLjq7D2R4wSy5ebE5nK ys7mKw3NlqwPWePKCA/IjaZEkPGTDLR7F8DMVZRlm+PWbon3nVvaQ80DNeovB0DK XNGFh6gHN2XTRJZUQdU6UpGTx4FjW5Q= -----END CERTIFICATE-----Generated at Sat Sep 26 01:55:57 2026 by rpki-client