$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa File: 1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa (raw, json) Hash identifier: hRbWfms/3T0nUnjpdXTrEIvTB77R2u7cvyLA/rPZzpg= Subject key identifier: 77:00:20:04:0E:15:EB:3A:38:CC:BC:5D:D8:E5:40:78:1E:14:45:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9E6E3737FEB013230480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 34.98.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9e:6e:37:37:fe:b0:13:23:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=aa9c7965-3afe-4224-a734-95672d1450cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:f8:d8:11:ec:29:8a:bb:c9:e1:04:4c:97: 0d:18:1f:ba:cf:fc:ad:39:f4:7a:a9:7c:92:c7:19: 96:fb:5e:0b:03:20:ba:f6:f4:3d:24:c9:22:ca:52: 42:fd:ce:94:27:1a:18:19:94:99:45:be:a5:93:80: 88:15:0d:20:73:5d:4c:08:39:b3:ba:98:71:04:5c: c0:c7:66:d7:70:a2:c6:df:20:3c:bf:2b:2d:d6:9c: 19:30:44:e3:1a:11:89:e6:3f:83:76:3e:55:47:e2: 37:59:cf:61:e0:3e:a4:f5:3c:a1:90:f6:0b:c9:e8: e5:85:c7:42:8d:99:fe:db:80:1b:2d:30:dd:d3:b7: da:1f:bb:12:70:4b:c7:64:38:c6:7b:90:76:77:8d: 56:c3:dd:52:03:78:50:96:f9:8c:55:b8:f2:59:2e: 11:c5:cb:12:ef:71:6b:01:2a:84:c0:67:8e:8b:04: ee:03:5c:6a:ba:51:15:8b:a5:a0:ec:13:c7:01:46: 51:37:c8:43:8e:4e:71:be:29:a0:69:47:ec:ee:64: 3d:10:9a:49:4f:71:f2:28:f6:32:ed:37:76:3d:fd: 90:d8:5a:9d:9b:c7:c7:6b:19:b1:e4:fc:8f:8b:d5: a2:75:3d:03:98:4a:93:00:9d:9d:46:a5:bd:c9:69: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:20:04:0E:15:EB:3A:38:CC:BC:5D:D8:E5:40:78:1E:14:45:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:60:ae:a9:74:3a:6d:eb:2e:96:ba:ce:af:ec:3b:11:48:36: 0b:93:5b:fa:de:11:6c:c7:c8:af:0a:c9:be:06:e5:0e:7e:dd: 87:62:ee:d3:70:83:73:e8:9e:bc:eb:9a:01:47:23:b9:08:54: 32:30:ac:33:b7:9a:e8:29:1b:2a:c9:0b:55:e3:8f:b0:6d:28: c9:0b:28:3e:8b:a3:cd:38:be:2a:2a:27:19:44:56:44:de:7b: 7c:6f:3d:2f:29:dc:e1:0f:5d:76:6e:c9:fa:3c:69:6d:52:ab: b8:87:c1:8b:af:0b:1f:63:2d:8a:0a:8e:8e:2d:bc:61:b1:7e: 47:8a:df:64:a7:8a:57:15:59:e1:96:1e:74:6e:2b:79:f8:da: 75:0f:50:0f:13:cf:7a:74:ba:1f:4d:96:8c:3a:b1:d6:99:d2: 43:ed:58:62:eb:4c:ce:fb:f2:e8:43:80:8e:46:5d:6e:7d:56: b3:b9:1e:67:ec:fb:8e:8d:c9:c6:87:9f:30:6f:d2:71:37:6b: 30:ed:5c:e2:46:8d:d8:2c:b5:ea:8b:53:ba:fc:f4:63:83:20: ec:c3:1a:46:c0:6d:30:1d:2b:c2:f5:b5:30:f4:19:0f:16:fc: 51:f2:f5:15:62:be:d1:b4:b8:95:51:09:46:ae:4b:57:b6:fd: 41:b5:ac:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ5uNzf+sBMjBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWE5Yzc5NjUtM2FmZS00MjI0LWE3MzQtOTU2NzJkMTQ1MGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj742BHsKYq7yeEETJcNGB+6z/ytOfR6qXyS xxmW+14LAyC69vQ9JMkiylJC/c6UJxoYGZSZRb6lk4CIFQ0gc11MCDmzuphxBFzA x2bXcKLG3yA8vyst1pwZMETjGhGJ5j+Ddj5VR+I3Wc9h4D6k9TyhkPYLyejlhcdC jZn+24AbLTDd07faH7sScEvHZDjGe5B2d41Ww91SA3hQlvmMVbjyWS4RxcsS73Fr ASqEwGeOiwTuA1xqulEVi6Wg7BPHAUZRN8hDjk5xvimgaUfs7mQ9EJpJT3HyKPYy 7Td2Pf2Q2Fqdm8fHaxmx5PyPi9WidT0DmEqTAJ2dRqW9yWmn8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcAIAQOFes6OMy8XdjlQHgeFEUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTA0MWNiZTQtNGYyNy0z M2E4LWIzZGItOTIxOGMzZjZmZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBImKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBgrql0Om3rLpa6zq/sOxFINguTW/reEWzHyK8Kyb4G5Q5+3Ydi7tNw g3PonrzrmgFHI7kIVDIwrDO3mugpGyrJC1Xjj7BtKMkLKD6Lo804vioqJxlEVkTe e3xvPS8p3OEPXXZuyfo8aW1Sq7iHwYuvCx9jLYoKjo4tvGGxfkeK32SnilcVWeGW HnRuK3n42nUPUA8Tz3p0uh9Nlow6sdaZ0kPtWGLrTM778uhDgI5GXW59VrO5Hmfs +46NycaHnzBv0nE3azDtXOJGjdgsteqLU7r89GODIOzDGkbAbTAdK8L1tTD0GQ8W /FHy9RVivtG0uJVRCUauS1e2/UG1rOw= -----END CERTIFICATE-----Generated at Tue Sep 29 13:51:13 2026 by rpki-client