$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa File: 861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa (raw, json) Hash identifier: +DSkPuaomp/BL6s2JvzMpzF/nUEDTFCr6Ytn+hCLmrU= Subject key identifier: 08:CD:37:C8:96:34:AA:5C:D0:CE:7C:F8:9A:1D:B6:1F:1F:76:2A:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC4A7A81B76E7162C9D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 34.98.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c4:a7:a8:1b:76:e7:16:2c:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a0efbe2c-ccca-437a-bd0c-bc5c06ef155f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:12:07:ae:f0:66:0b:48:f6:9f:2b:98:15: d7:3e:38:b6:9e:9b:ad:1e:fc:1a:cf:a2:8f:65:64: 21:82:0c:3e:ea:dd:24:14:a9:a6:9b:b3:ad:a4:e0: 9c:e8:1e:e9:3b:09:39:b3:8f:29:92:4d:cb:b6:0c: b1:9e:9b:d1:d9:10:d3:58:b7:2b:42:4f:a1:a6:84: e6:e1:e5:40:b0:11:9c:1e:38:a9:9c:89:3d:fb:81: 17:0a:da:df:9b:4e:47:cf:86:0e:fa:73:f0:45:0a: fd:00:e9:0f:1a:03:3e:e1:e4:82:df:5e:b2:88:a0: 48:c4:90:80:e7:b1:3c:dd:64:53:11:54:ab:6a:33: 9f:70:a0:d4:1c:90:4f:c4:9c:89:d3:2c:a1:52:f6: 71:d7:e3:62:41:a6:da:ae:be:30:1b:e2:08:aa:40: fe:fb:47:a1:30:29:8c:97:0f:73:15:e9:e7:89:1e: ed:1f:a8:ad:e0:f2:d0:af:a8:44:46:bb:76:d0:05: 37:55:99:c5:65:8c:e6:6b:86:a1:7f:dc:c6:9c:6c: a1:69:07:85:d7:62:bb:6d:47:a6:de:77:45:1c:71: 4d:b2:b3:0d:df:01:aa:7c:5f:76:84:b6:4a:c5:bb: fd:d2:66:d5:4d:2f:6c:58:2a:b6:6d:9e:33:ea:52: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CD:37:C8:96:34:AA:5C:D0:CE:7C:F8:9A:1D:B6:1F:1F:76:2A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:66:0a:29:50:80:cd:4a:70:4f:89:c1:a5:18:80:f2:a4:f4: 60:0f:1c:e6:dd:28:57:3d:2a:ca:a2:e6:d9:fd:72:b4:d0:23: 70:69:87:9e:c9:a8:e8:35:aa:18:df:10:99:b4:be:15:b3:8e: b6:09:d8:14:23:f0:12:74:f8:65:c9:b0:95:f8:a1:4a:31:a4: eb:fc:0b:1b:08:19:44:66:65:20:25:a2:76:c4:91:06:60:ce: e5:a2:a4:ec:8c:1f:36:a1:73:01:8b:09:dd:2a:58:57:4c:e0: cc:11:b7:2a:af:0b:8a:92:09:13:5a:ef:bd:51:f8:ea:8e:7f: 56:c5:c6:a0:5d:47:98:ed:1f:33:af:f8:b7:1d:6d:25:44:0d: c5:1d:b1:9d:fb:9a:97:57:5e:dc:29:2a:1a:14:30:39:8f:a5: c0:0a:49:70:53:7e:04:e8:56:91:0a:7b:2e:6d:ea:1a:cf:fb: 3b:53:e5:0b:62:6d:54:66:9e:74:f4:49:54:f6:5a:c8:cd:c4: cc:43:25:01:f7:66:27:df:4a:35:b5:26:e0:02:e9:f1:30:99: d1:48:90:da:ae:13:0f:c7:7f:79:0a:d5:f0:13:7e:a3:d7:a5: 70:ac:3b:82:77:31:bb:27:8b:60:89:db:d0:cb:e5:77:3a:d5: f6:3f:42:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcSnqBt25xYsnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTBlZmJlMmMtY2NjYS00MzdhLWJkMGMtYmM1YzA2ZWYxNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke0SB67wZgtI9p8rmBXXPji2nputHvwaz6KP ZWQhggw+6t0kFKmmm7OtpOCc6B7pOwk5s48pkk3LtgyxnpvR2RDTWLcrQk+hpoTm 4eVAsBGcHjipnIk9+4EXCtrfm05Hz4YO+nPwRQr9AOkPGgM+4eSC316yiKBIxJCA 57E83WRTEVSrajOfcKDUHJBPxJyJ0yyhUvZx1+NiQabarr4wG+IIqkD++0ehMCmM lw9zFenniR7tH6it4PLQr6hERrt20AU3VZnFZYzma4ahf9zGnGyhaQeF12K7bUem 3ndFHHFNsrMN3wGqfF92hLZKxbv90mbVTS9sWCq2bZ4z6lJoJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjNN8iWNKpc0M58+Jodth8fdiqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODYxZTgzNDAtZjVkMy0z MjkyLTlhOGUtNmFiOWM2MTc2YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBImKWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZmCilQgM1KcE+JwaUYgPKk9GAPHObdKFc9Ksqi5tn9crTQI3Bph57J qOg1qhjfEJm0vhWzjrYJ2BQj8BJ0+GXJsJX4oUoxpOv8CxsIGURmZSAlonbEkQZg zuWipOyMHzahcwGLCd0qWFdM4MwRtyqvC4qSCRNa771R+OqOf1bFxqBdR5jtHzOv +LcdbSVEDcUdsZ37mpdXXtwpKhoUMDmPpcAKSXBTfgToVpEKey5t6hrP+ztT5Qti bVRmnnT0SVT2WsjNxMxDJQH3ZiffSjW1JuAC6fEwmdFIkNquEw/Hf3kK1fATfqPX pXCsO4J3Mbsni2CJ29DL5Xc61fY/Qv0= -----END CERTIFICATE-----Generated at Sun Oct 11 18:42:04 2026 by rpki-client