$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa File: 98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa (raw, json) Hash identifier: ju+rFeDaiwoL1HlL3s5C8kpYVqK2SLdQcEkZwMR4grE= Subject key identifier: B6:33:F1:C2:D4:0C:3A:88:FD:B2:B5:7C:96:E3:B8:11:8B:DD:DB:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB2410A9B80FE633487AE1380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 134.70.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:0a:9b:80:fe:63:34:87:ae:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=da11cecc-c755-4f16-993c-13fbe37cb37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:01:cd:0a:b3:d2:4c:dc:8a:21:f5:0a:79: 0a:52:b7:2b:6e:ac:e7:38:0f:08:37:10:d3:26:5d: de:1c:e3:23:90:e0:df:44:71:8e:9e:e5:b3:8d:3c: 44:2e:eb:d3:4f:ec:ad:bd:0a:d0:37:c4:91:75:b8: 34:8d:cd:30:54:68:2d:cf:4e:1b:65:20:1f:dd:48: 43:db:98:28:76:05:00:01:53:77:b3:7b:97:83:b6: c8:68:9c:ce:db:e2:40:45:8b:c9:1d:6c:9d:19:b8: dd:62:2b:45:e2:30:b1:2a:19:b8:7d:52:a6:37:c6: 67:c6:3a:be:53:db:79:9d:ea:92:0c:fd:bf:71:da: a3:42:dd:4e:30:b4:97:f2:b7:e7:d6:f2:9b:99:7b: 4f:ab:39:7b:c3:83:2f:84:01:77:9b:47:ec:0f:07: 78:a0:8e:3a:bd:f1:5b:73:66:7f:e7:f2:0b:6f:5b: 5f:12:39:8e:c1:5c:49:f6:b4:e4:5e:5d:af:cf:aa: fc:7c:78:e3:cb:17:7d:4d:8f:30:22:37:5d:1e:34: 2a:45:ed:5f:c9:42:dd:42:13:4f:47:b9:02:1a:8b: 84:f3:a8:6e:50:fd:d9:af:f1:7c:0e:93:35:a9:d7: ea:50:f6:66:15:56:95:9e:9e:87:b6:fe:51:0b:2b: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:33:F1:C2:D4:0C:3A:88:FD:B2:B5:7C:96:E3:B8:11:8B:DD:DB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8c:a1:bd:64:7b:62:46:4e:e4:3a:da:f9:f8:90:ee:84:28: 97:ed:18:ed:af:2b:1b:de:a1:da:eb:6b:1d:58:03:7f:bf:f7: ed:a1:a7:cf:fa:be:ac:fa:db:8f:a7:36:89:47:49:5a:e1:2b: 20:3f:c5:a7:e6:ff:ef:f1:d6:b6:f8:26:db:37:24:a8:c2:5d: aa:ed:7e:e3:7b:3f:b8:af:bb:f4:c9:83:3a:d1:1d:b1:89:9f: 03:4f:b4:44:36:4c:98:be:99:8b:91:0d:2c:71:7f:b3:2a:18: 8b:74:ce:17:b0:4a:a0:e9:ca:78:83:73:80:9a:3a:75:28:89: 4b:0d:02:46:31:45:27:9a:be:3d:3f:d7:15:b3:e6:c9:0c:74: 75:2a:b1:2c:da:7f:a8:a7:7a:ed:74:24:d5:e2:c7:65:1c:88: fc:13:5e:09:63:b5:d5:97:4c:eb:49:a7:cf:f3:e0:97:20:f1: d1:bb:06:f3:b2:9a:36:5a:c5:fd:f7:4a:6c:10:55:a8:0b:c2: df:b5:f6:f2:37:4b:9f:3b:72:fc:a5:8d:ff:6f:17:e4:72:c6: f9:36:51:19:4b:01:75:4b:75:11:d8:51:d1:44:49:8a:80:79: 8d:da:28:16:65:31:ed:22:c0:1f:5a:d8:49:95:d7:94:fb:64: de:ce:ce:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQQqbgP5jNIeuE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk ZGExMWNlY2MtYzc1NS00ZjE2LTk5M2MtMTNmYmUzN2NiMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE8BzQqz0kzciiH1CnkKUrcrbqznOA8INxDT Jl3eHOMjkODfRHGOnuWzjTxELuvTT+ytvQrQN8SRdbg0jc0wVGgtz04bZSAf3UhD 25godgUAAVN3s3uXg7bIaJzO2+JARYvJHWydGbjdYitF4jCxKhm4fVKmN8Znxjq+ U9t5neqSDP2/cdqjQt1OMLSX8rfn1vKbmXtPqzl7w4MvhAF3m0fsDwd4oI46vfFb c2Z/5/ILb1tfEjmOwVxJ9rTkXl2vz6r8fHjjyxd9TY8wIjddHjQqRe1fyULdQhNP R7kCGouE86huUP3Zr/F8DpM1qdfqUPZmFVaVnp6Htv5RCyukBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYz8cLUDDqI/bK1fJbjuBGL3dsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThkMzFlNjctYzRlNi0z YjBlLWExNGEtYWVmNTE4M2ZhZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGMob1ke2JGTuQ62vn4kO6EKJftGO2vKxveodrrax1YA3+/9+2hp8/6 vqz624+nNolHSVrhKyA/xafm/+/x1rb4Jts3JKjCXartfuN7P7ivu/TJgzrRHbGJ nwNPtEQ2TJi+mYuRDSxxf7MqGIt0zhewSqDpyniDc4CaOnUoiUsNAkYxRSeavj0/ 1xWz5skMdHUqsSzaf6ineu10JNXix2UciPwTXgljtdWXTOtJp8/z4Jcg8dG7BvOy mjZaxf33SmwQVagLwt+19vI3S587cvyljf9vF+Ryxvk2URlLAXVLdRHYUdFESYqA eY3aKBZlMe0iwB9a2EmV15T7ZN7Ozp8= -----END CERTIFICATE-----Generated at Sun Nov 15 14:12:06 2026 by rpki-client