$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa File: bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa (raw, json) Hash identifier: D15HkW7v5G9nFj1pgtxXEDludBIP9hzlECtVabZ5wEE= Subject key identifier: 5C:4B:E1:88:DD:83:15:CD:A8:E2:6D:F4:57:2D:F6:6C:E1:1B:03:51 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8E530152EB274FB8BC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.123.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8e:53:01:52:eb:27:4f:b8:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=87e21bfc-167d-4f1f-a039-6a2100f6eba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:fc:86:1a:ab:89:a5:af:cc:f5:8e:1d:ac: 17:7f:92:32:a2:0e:c2:3d:6b:1f:b4:04:05:b8:9b: 7b:0f:da:43:15:ad:b7:76:e1:c6:27:46:84:2d:f1: 02:c6:52:a2:96:d0:22:e4:ba:9c:52:f8:d7:b1:d5: b6:ea:21:87:96:ff:50:10:49:d1:69:8b:c9:96:81: b7:93:ab:e0:88:f9:63:67:d4:0b:5a:af:5a:be:7f: 99:5e:e9:c6:71:29:ad:51:51:4a:b2:69:8a:bf:50: 98:eb:2f:54:1c:85:c3:19:d4:26:20:a3:b8:34:3c: 47:8f:e7:d1:01:b3:33:b4:64:96:05:6a:d8:55:22: fb:56:8b:32:3a:fa:5b:29:a8:c9:e2:63:d3:ef:bb: af:52:27:c8:27:b0:2f:db:51:e0:31:f3:b4:15:a0: dc:17:78:4a:c3:cc:e9:f2:b2:c4:d6:45:e2:eb:a9: ea:28:50:54:4f:52:a2:19:50:50:26:a8:f9:56:f8: bb:ac:8d:fc:86:9b:a7:ee:b9:43:ce:cc:a5:7b:01: e7:5d:6d:0f:3a:04:b0:c2:de:47:3d:de:ef:a2:a8: bb:16:50:1f:13:3b:fe:9c:2f:b9:11:91:52:f3:7f: 31:a9:8d:52:b0:4d:a6:db:e3:d6:5c:bc:78:35:c1: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4B:E1:88:DD:83:15:CD:A8:E2:6D:F4:57:2D:F6:6C:E1:1B:03:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:df:fa:fa:28:09:70:a6:46:cd:bc:21:3c:b8:8a:20:56:a7: d3:fd:62:53:ea:6d:ca:ba:c3:a6:34:01:19:95:0b:01:d6:db: 53:d2:21:12:c1:6a:97:6b:d7:c1:b2:a0:c4:a2:b1:76:2d:58: e8:02:7d:f1:0b:70:79:1a:75:fd:a5:fb:5d:89:95:be:ed:69: 4c:e3:dd:dc:34:2f:c6:d2:1d:48:b0:8b:65:b4:3e:fb:cc:59: ad:5c:47:66:99:54:ae:d1:ba:a2:69:2b:65:82:68:47:40:88: 46:e0:90:43:9e:07:60:f6:d1:02:bc:2a:47:76:61:0c:fe:70: 37:6c:dc:f7:3e:bc:7f:49:b6:e0:f3:ca:9d:7e:66:a0:1b:af: b8:fe:51:a5:d2:f6:68:9f:c3:fd:9c:43:3f:4e:f4:4d:a2:52: cc:6f:31:2d:73:07:4b:14:2b:fb:57:0c:b9:b2:66:5f:17:6c: b0:37:46:9f:ca:18:a2:bf:52:a1:1d:06:2e:fb:2f:fa:44:23: 2a:82:d5:e9:d2:d9:a2:c5:a9:fc:26:7a:14:dc:a1:f4:09:f1: bd:3c:de:5f:a2:50:2d:0e:a3:8a:6e:9a:54:65:d4:a7:74:b0: 1d:d4:ec:a4:ad:27:27:9f:0f:80:57:da:8f:36:46:05:16:b9: c3:00:21:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY5TAVLrJ0+4vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODdlMjFiZmMtMTY3ZC00ZjFmLWEwMzktNmEyMTAwZjZlYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz38hhqriaWvzPWOHawXf5Iyog7CPWsftAQF uJt7D9pDFa23duHGJ0aELfECxlKiltAi5LqcUvjXsdW26iGHlv9QEEnRaYvJloG3 k6vgiPljZ9QLWq9avn+ZXunGcSmtUVFKsmmKv1CY6y9UHIXDGdQmIKO4NDxHj+fR AbMztGSWBWrYVSL7VosyOvpbKajJ4mPT77uvUifIJ7Av21HgMfO0FaDcF3hKw8zp 8rLE1kXi66nqKFBUT1KiGVBQJqj5Vvi7rI38hpun7rlDzsylewHnXW0POgSwwt5H Pd7voqi7FlAfEzv+nC+5EZFS838xqY1SsE2m2+PWXLx4NcFg6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxL4YjdgxXNqOJt9Fct9mzhGwNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmMyYTg4NjEtMzgyMi0z N2FmLTg5YjMtMWM5Y2ViZTBkYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/f+vooCXCmRs28ITy4iiBWp9P9YlPqbcq6w6Y0ARmVCwHW21PSIRLB apdr18GyoMSisXYtWOgCffELcHkadf2l+12Jlb7taUzj3dw0L8bSHUiwi2W0PvvM Wa1cR2aZVK7RuqJpK2WCaEdAiEbgkEOeB2D20QK8Kkd2YQz+cDds3Pc+vH9JtuDz yp1+ZqAbr7j+UaXS9mifw/2cQz9O9E2iUsxvMS1zB0sUK/tXDLmyZl8XbLA3Rp/K GKK/UqEdBi77L/pEIyqC1enS2aLFqfwmehTcofQJ8b083l+iUC0Oo4pumlRl1Kd0 sB3U7KStJyefD4BX2o82RgUWucMAIao= -----END CERTIFICATE-----Generated at Mon Sep 28 14:32:27 2026 by rpki-client