$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa File: 23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa (raw, json) Hash identifier: va+GpCVU0pO2AyFSMfdPMI+pIfenilsTsXBx9SGk8vw= Subject key identifier: 96:FC:84:EB:B4:B9:83:B0:45:22:10:CF:94:C0:25:E3:AB:47:BB:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B67975ACEAA0CF1C6C59DD380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 34.132.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5a:ce:aa:0c:f1:c6:c5:9d:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=515c7f4a-59a3-4d0a-be96-62b19781f999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:78:6c:77:86:be:25:ce:2e:10:b0:f8:0a: 14:74:91:1d:3b:48:e8:56:b1:fa:a7:b8:59:18:bb: ec:9f:5a:19:c9:6d:82:ac:8e:bf:32:9a:76:58:92: a1:3e:05:f8:e9:4c:7c:e8:e8:f0:91:43:76:ab:74: 19:30:9f:01:75:c6:f1:5a:59:ed:5a:f7:64:ed:81: 48:da:a9:76:a5:f4:db:eb:c2:ed:c7:98:9b:92:31: 29:91:2b:46:e1:ee:5f:c1:a4:84:f1:b9:c6:b0:f6: a9:1c:d2:d5:3a:37:45:60:b7:ce:6c:3f:76:0c:c9: 08:fc:d4:6a:ee:9b:23:9d:eb:69:54:e5:f4:ed:17: 0a:fd:d2:91:25:b5:75:93:24:b1:a2:f3:e9:6c:3c: ae:79:63:32:ae:62:03:58:5a:b2:cf:82:7f:0b:42: 36:f8:f2:f2:e7:a5:69:56:a0:a7:5b:61:7b:b1:fb: 91:16:b5:09:cf:05:5b:e0:28:9c:99:0b:57:4f:84: e4:40:bc:9c:18:14:e9:d4:b4:d4:39:36:a4:bb:70: df:c3:70:75:02:a2:6b:ce:4f:a2:2e:d2:15:0f:e2: fb:52:d4:cb:af:78:b3:01:49:7a:8d:74:97:37:0f: 95:06:ab:a7:24:1e:ff:39:be:3c:29:65:42:9c:81: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FC:84:EB:B4:B9:83:B0:45:22:10:CF:94:C0:25:E3:AB:47:BB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:79:6a:89:5a:97:b5:59:af:86:e5:5c:49:53:c2:38:34:3c: b0:63:19:13:9d:7b:31:f6:4c:dc:9e:22:b0:6d:1a:c2:c2:b7: 8b:77:e8:26:78:1c:10:46:8c:fd:57:a0:3e:97:e7:31:da:3d: 6b:f8:af:20:32:b4:1e:90:46:aa:b8:8c:08:b2:55:7b:3f:05: 15:ec:16:a3:e4:5e:c9:96:d0:fa:ae:28:a9:d5:8b:23:7b:e2: de:ad:62:21:cc:fb:a6:2b:2e:9e:a9:b6:c2:bb:18:47:d3:dd: 04:5d:12:b6:0f:6c:fc:e3:d1:6e:ad:3d:ea:e4:33:79:16:21: a8:4c:94:3b:d0:5c:cf:c7:90:76:0e:2a:0e:df:e6:65:00:4a: 66:12:4a:9b:82:a8:bf:e6:65:9a:84:e2:93:33:85:9a:e0:d8: 0b:43:a4:00:fd:c4:68:04:2d:6d:48:69:a5:62:86:49:04:5f: d5:d5:ca:81:d6:49:b0:b6:2f:0d:7e:39:f8:8a:4b:57:72:6e: 0e:8c:f6:78:91:68:14:50:33:7e:a8:d4:29:af:cd:63:45:d5: 16:26:8e:a5:cf:45:38:3f:88:d2:67:0f:ca:e4:77:cf:87:8f: b8:78:83:04:d8:c4:cc:01:fe:c0:3f:b2:a3:8d:a8:74:5a:11: d1:12:75:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1rOqgzxxsWd04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTE1YzdmNGEtNTlhMy00ZDBhLWJlOTYtNjJiMTk3ODFmOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioR4bHeGviXOLhCw+AoUdJEdO0joVrH6p7hZ GLvsn1oZyW2CrI6/Mpp2WJKhPgX46Ux86OjwkUN2q3QZMJ8BdcbxWlntWvdk7YFI 2ql2pfTb68Ltx5ibkjEpkStG4e5fwaSE8bnGsPapHNLVOjdFYLfObD92DMkI/NRq 7psjnetpVOX07RcK/dKRJbV1kySxovPpbDyueWMyrmIDWFqyz4J/C0I2+PLy56Vp VqCnW2F7sfuRFrUJzwVb4CicmQtXT4TkQLycGBTp1LTUOTaku3Dfw3B1AqJrzk+i LtIVD+L7UtTLr3izAUl6jXSXNw+VBqunJB7/Ob48KWVCnIHu7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb8hOu0uYOwRSIQz5TAJeOrR7sXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM2NTNjMGYtMDNiMS0z N2EwLWI4OGItMDQ2YWRiMWYyZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd5aolal7VZr4blXElTwjg0PLBjGROdezH2TNyeIrBtGsLCt4t36CZ4 HBBGjP1XoD6X5zHaPWv4ryAytB6QRqq4jAiyVXs/BRXsFqPkXsmW0PquKKnViyN7 4t6tYiHM+6YrLp6ptsK7GEfT3QRdErYPbPzj0W6tPerkM3kWIahMlDvQXM/HkHYO Kg7f5mUASmYSSpuCqL/mZZqE4pMzhZrg2AtDpAD9xGgELW1IaaVihkkEX9XVyoHW SbC2Lw1+OfiKS1dybg6M9niRaBRQM36o1CmvzWNF1RYmjqXPRTg/iNJnD8rkd8+H j7h4gwTYxMwB/sA/sqONqHRaEdESdVE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:50 2025 by rpki-client