$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa File: d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa (raw, json) Hash identifier: 1uMmt4hCt0H8eAhBjE3lqHVwUwNp8RWlmOkAdsowQ30= Subject key identifier: 8D:02:56:E9:D0:E1:9B:A4:8C:C4:D1:26:33:85:09:EB:15:8E:8B:24 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD45B566DE90C38061640 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.98.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d4:5b:56:6d:e9:0c:38:06:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=843a5bf1-c7e1-45aa-b811-00cf71ccabe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:dd:4b:ce:46:7c:a4:24:e3:3c:0c:ea:ff: 46:ff:f9:8c:71:92:13:70:d3:d9:72:a8:bc:83:df: 50:ed:6b:85:46:6a:00:40:77:39:05:54:d4:e3:93: b0:e1:68:a2:6a:3c:b4:3e:c1:f2:e3:fc:35:37:99: 54:ad:a1:20:83:78:19:ce:60:31:68:77:92:b5:e3: 0e:c4:da:c5:15:2f:75:7c:58:d1:8d:4b:e4:47:65: 8b:36:60:03:6d:2f:b7:77:c9:34:32:9f:22:8d:3e: 84:b2:30:da:1a:36:9e:24:ca:0e:3a:a0:12:4a:af: 90:68:e4:fa:b4:05:11:b8:36:20:9f:a8:1c:61:f7: a5:c8:5d:4a:ee:e1:78:13:f1:a1:e8:07:3a:5c:6a: 5d:fd:92:d1:9d:cb:01:ae:c2:1f:b6:12:d4:20:7c: 4c:c1:95:84:81:99:02:41:55:08:c0:52:70:16:a9: 60:a9:b2:aa:89:b4:f1:96:17:6a:b4:c6:90:d4:d0: 01:94:43:13:f3:cb:a0:5a:22:ef:b3:ac:88:b2:6c: 93:4b:8c:75:c8:bd:b0:86:a7:4f:74:0c:87:bf:de: a1:5f:8a:53:39:33:6c:c5:12:ad:83:f2:05:10:77: 02:79:9e:d8:3a:52:55:27:6d:40:6f:92:85:ab:2b: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:02:56:E9:D0:E1:9B:A4:8C:C4:D1:26:33:85:09:EB:15:8E:8B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:32:9e:8d:0c:54:0e:7b:8e:47:08:b2:84:16:8c:d9:62:86: 2d:ec:4f:d3:fa:ce:a5:1f:2d:9f:cb:92:a9:99:2d:f3:b9:f8: 66:62:60:3c:b6:d7:f5:1f:2d:66:fd:f1:ce:38:04:4e:ec:13: 15:5e:07:c9:00:c9:34:fb:08:1d:27:b9:a0:8b:ec:6f:cc:07: 8d:e0:25:01:0d:8b:6a:f5:ab:79:14:4a:e2:5d:04:da:8f:e0: 01:a3:58:aa:04:de:2f:6c:a2:d9:05:1f:92:3a:6e:44:95:c4: b0:be:a6:41:8d:f7:5b:df:c5:c8:23:01:c1:87:c8:fc:95:bd: 4b:06:98:4b:21:31:51:4a:1d:e1:84:8d:bc:56:9b:05:f9:0c: 29:fe:b1:e7:ec:1e:9a:ff:b4:63:ac:57:31:52:ea:94:1b:ea: 07:ea:bf:e5:72:e6:f2:54:2b:10:9a:bc:5f:12:1a:2f:58:67: 3e:05:dd:4d:dc:e4:78:0a:7f:19:68:d7:57:fc:25:0c:91:99: 9b:72:01:94:ba:f5:0f:32:19:6f:5c:c1:99:03:e2:ed:3e:11: 00:49:e8:38:ae:d7:63:da:1f:b8:60:62:e2:dc:16:2e:eb:59: 6f:b9:b7:8b:d7:8e:20:0d:c1:68:46:c9:14:44:e9:e1:8e:2d: 58:a4:8e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdRbVm3pDDgGFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODQzYTViZjEtYzdlMS00NWFhLWI4MTEtMDBjZjcxY2NhYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiXdS85GfKQk4zwM6v9G//mMcZITcNPZcqi8 g99Q7WuFRmoAQHc5BVTU45Ow4Wiiajy0PsHy4/w1N5lUraEgg3gZzmAxaHeSteMO xNrFFS91fFjRjUvkR2WLNmADbS+3d8k0Mp8ijT6EsjDaGjaeJMoOOqASSq+QaOT6 tAURuDYgn6gcYfelyF1K7uF4E/Gh6Ac6XGpd/ZLRncsBrsIfthLUIHxMwZWEgZkC QVUIwFJwFqlgqbKqibTxlhdqtMaQ1NABlEMT88ugWiLvs6yIsmyTS4x1yL2whqdP dAyHv96hX4pTOTNsxRKtg/IFEHcCeZ7YOlJVJ21Ab5KFqyu2QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0CVunQ4ZukjMTRJjOFCesVjoskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDNmNGU5ZTMtNTU3ZS0z MzYzLTlhYjAtN2U3NjVhZTU2MDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEyno0MVA57jkcIsoQWjNlihi3sT9P6zqUfLZ/LkqmZLfO5+GZiYDy2 1/UfLWb98c44BE7sExVeB8kAyTT7CB0nuaCL7G/MB43gJQENi2r1q3kUSuJdBNqP 4AGjWKoE3i9sotkFH5I6bkSVxLC+pkGN91vfxcgjAcGHyPyVvUsGmEshMVFKHeGE jbxWmwX5DCn+sefsHpr/tGOsVzFS6pQb6gfqv+Vy5vJUKxCavF8SGi9YZz4F3U3c 5HgKfxlo11f8JQyRmZtyAZS69Q8yGW9cwZkD4u0+EQBJ6Diu12PaH7hgYuLcFi7r WW+5t4vXjiANwWhGyRRE6eGOLVikjjQ= -----END CERTIFICATE-----Generated at Tue Sep 29 02:37:44 2026 by rpki-client