$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac1901bd-e617-33c0-a9ef-70926ac08be1.roa File: ac1901bd-e617-33c0-a9ef-70926ac08be1.roa (raw, json) Hash identifier: rWrhzzbIOP6x++5jEJT9/KulBZ5Sbqz0oAPG8SHZA1s= Subject key identifier: A8:B4:85:AB:09:5E:53:67:27:66:E0:10:9E:89:31:3E:EB:BC:DE:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F23C24A30C99BFC711DFF0430 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac1901bd-e617-33c0-a9ef-70926ac08be1.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 396982 IP address blocks: 34.128.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:4a:30:c9:9b:fc:71:1d:ff:04:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=0f19714f-3ddf-48f2-8323-b35b44109e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:9f:f7:d9:c1:aa:5e:2e:9b:8c:a0:46:c5: 68:3d:0d:c5:78:60:cf:35:22:92:65:06:55:04:c8: d8:2d:34:55:fa:58:ff:4e:6e:90:dc:12:6b:b3:8f: c4:f4:21:a3:35:fe:d6:d4:b5:c0:b1:5c:92:c5:8f: 91:eb:0c:cf:d7:e2:a7:11:b8:e4:39:45:2e:05:fd: 51:6f:70:52:e0:64:74:f5:81:c6:0b:2f:08:45:fc: 20:3b:95:31:2d:19:f9:d5:3a:b8:ea:f6:bb:8e:f5: 6f:a3:8c:15:72:10:91:d3:db:79:a8:b7:83:e7:b2: ed:06:4e:bd:b2:6c:99:f2:4c:c7:0b:7d:24:48:c6: e0:b3:43:72:b5:bb:31:3b:3f:b4:ad:86:7e:41:61: b5:a6:98:b3:b5:e5:53:b1:ed:91:e7:48:0d:c5:f0: ab:cf:18:cf:a4:1d:ad:0d:42:49:27:77:49:22:57: a9:36:95:ac:62:49:15:f9:ba:2b:f0:bf:6f:b7:b8: 2c:76:0d:59:0d:8b:cc:7c:d1:44:8f:61:b3:b3:dc: b2:05:b6:34:0a:87:70:bb:18:6a:5d:10:d6:b9:c9: 9e:3a:84:34:f0:21:5b:aa:81:93:f5:ab:78:1e:30: 2e:b7:c3:95:cb:7b:28:db:71:77:fd:e3:a1:13:e9: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B4:85:AB:09:5E:53:67:27:66:E0:10:9E:89:31:3E:EB:BC:DE:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac1901bd-e617-33c0-a9ef-70926ac08be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f2:cd:30:58:fc:5d:36:fc:96:6a:ab:58:79:53:93:f9:a9: 2a:e2:5b:5a:e6:2b:9c:d9:2f:c8:10:c6:ba:fe:eb:2e:b3:93: 4b:19:11:85:10:ce:db:2d:72:84:07:20:4a:72:9b:c1:b9:ab: e5:83:9f:41:c4:f6:25:c9:1b:91:a8:0b:6d:58:a5:5e:16:9e: 1e:b8:06:e2:c9:07:0e:b6:9e:ba:a3:0a:27:93:7c:10:21:62: c4:a2:56:d6:7a:9f:03:29:df:67:81:bf:3b:a8:61:4f:16:b9: 78:8a:9d:22:20:b3:ee:61:35:5a:5b:d4:15:2d:3e:da:c1:79: b6:9f:e3:1b:29:5e:0b:b6:c2:ac:74:ed:ac:38:10:58:4c:18: 70:14:fe:30:f5:da:c3:6d:d8:f0:97:e9:a0:8c:ff:98:69:24: 62:13:01:d5:08:d0:72:4f:d3:9f:84:5d:6e:4b:ba:0a:ff:ea: e8:d4:43:fa:39:d9:b6:ea:d5:6f:e9:c9:a1:d4:3c:e8:ce:7c: 00:88:db:d9:42:6d:51:b0:14:be:b6:2f:75:7b:f3:f2:c5:05: 1f:34:c4:2f:55:61:f4:1a:af:13:de:60:4c:7c:b4:43:ac:af: 97:5f:d9:db:73:fa:db:90:8e:c7:09:b3:e4:ef:ce:32:b8:f3: 26:63:29:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwkowyZv8cR3/BDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MGYxOTcxNGYtM2RkZi00OGYyLTgzMjMtYjM1YjQ0MTA5ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7qf99nBql4um4ygRsVoPQ3FeGDPNSKSZQZV BMjYLTRV+lj/Tm6Q3BJrs4/E9CGjNf7W1LXAsVySxY+R6wzP1+KnEbjkOUUuBf1R b3BS4GR09YHGCy8IRfwgO5UxLRn51Tq46va7jvVvo4wVchCR09t5qLeD57LtBk69 smyZ8kzHC30kSMbgs0NytbsxOz+0rYZ+QWG1ppizteVTse2R50gNxfCrzxjPpB2t DUJJJ3dJIlepNpWsYkkV+bor8L9vt7gsdg1ZDYvMfNFEj2Gzs9yyBbY0Codwuxhq XRDWucmeOoQ08CFbqoGT9at4HjAut8OVy3so23F3/eOhE+mw7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi0hasJXlNnJ2bgEJ6JMT7rvN5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWMxOTAxYmQtZTYxNy0z M2MwLWE5ZWYtNzA5MjZhYzA4YmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIoACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbyzTBY/F02/JZqq1h5U5P5qSriW1rmK5zZL8gQxrr+6y6zk0sZEYUQ ztstcoQHIEpym8G5q+WDn0HE9iXJG5GoC21YpV4Wnh64BuLJBw62nrqjCieTfBAh YsSiVtZ6nwMp32eBvzuoYU8WuXiKnSIgs+5hNVpb1BUtPtrBebaf4xspXgu2wqx0 7aw4EFhMGHAU/jD12sNt2PCX6aCM/5hpJGITAdUI0HJP05+EXW5Lugr/6ujUQ/o5 2bbq1W/pyaHUPOjOfACI29lCbVGwFL62L3V78/LFBR80xC9VYfQarxPeYEx8tEOs r5df2dtz+tuQjscJs+TvzjK48yZjKQc= -----END CERTIFICATE-----Generated at Mon Sep 28 14:24:53 2026 by rpki-client