$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa76b124-f789-3dc2-a61e-4f48dcce8274.roa File: aa76b124-f789-3dc2-a61e-4f48dcce8274.roa (raw, json) Hash identifier: +svQAMur0PJxeSn56f6QbBQK17QL7K3NP8TfVVSpChw= Subject key identifier: D8:E8:27:8D:4B:98:07:73:63:A9:9B:C0:90:8C:15:5E:BC:A9:98:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D967A18A13E1126EF4400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa76b124-f789-3dc2-a61e-4f48dcce8274.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.98.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:96:7a:18:a1:3e:11:26:ef:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=03d28311-cbe8-4ceb-a48c-2a6b5f1baf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:2b:97:c8:13:0a:ac:16:fc:ec:77:fb:92: 03:3c:d5:c4:42:cb:4c:83:a0:f9:ec:d7:50:75:9d: 51:cc:8d:bf:d6:f9:52:56:b9:17:08:51:3a:3a:3b: 14:21:99:fa:cc:c4:91:71:fd:24:a0:11:76:1b:f6: be:60:3f:71:04:82:f1:63:35:1f:90:0a:5f:4d:46: 27:bc:ca:b3:b2:e8:2a:2b:b8:a5:a0:e5:8f:2a:3f: 09:2c:22:ac:71:05:40:4b:35:57:fc:fe:db:c1:e3: de:b4:da:f2:f0:55:b0:0b:b3:a9:8e:8b:e8:62:15: ce:83:bf:07:ca:fe:a6:e3:61:39:cd:5e:9b:b3:fb: 2b:b5:fe:a3:75:70:7a:e7:9b:64:ad:26:41:b9:50: 99:c3:3f:8c:64:86:ca:fe:f8:80:09:f8:7c:44:16: c3:d7:48:8c:4b:d3:b3:1e:7e:2b:d3:9a:9f:08:64: 1b:21:ed:a9:9f:7a:f2:0c:c5:e3:09:96:6e:df:29: 5d:2b:2b:45:e3:e8:2a:9b:69:b8:27:50:68:27:0c: 90:48:ae:16:9c:8b:dc:b8:1d:c0:59:79:ab:97:ba: 8e:f7:88:e7:ec:1d:38:68:d0:00:83:61:be:be:8a: 75:49:e7:fb:7b:d5:cf:12:44:18:61:ca:30:e1:2b: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:27:8D:4B:98:07:73:63:A9:9B:C0:90:8C:15:5E:BC:A9:98:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa76b124-f789-3dc2-a61e-4f48dcce8274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b4:e0:20:b6:a7:77:69:fc:bf:da:e0:2d:e4:10:8e:3b:ba: 42:7a:50:1d:65:6a:fa:a1:b2:9e:bc:eb:15:92:1b:c8:d5:b5: a3:41:e2:66:2c:06:47:74:4a:76:b2:6f:d4:ef:22:88:4c:da: 12:58:89:39:c5:e8:35:66:19:b9:f5:4b:d3:a1:0e:ef:07:a6: f2:de:e4:2b:26:e5:46:e0:59:56:b4:ee:34:49:b3:2e:a1:2f: f3:71:1d:26:52:54:1c:31:64:ad:06:5a:f4:0d:45:3c:11:9d: 97:30:ff:35:c1:66:02:0f:a6:81:81:24:bd:5c:94:bc:c9:50: 84:38:60:a2:31:9e:b9:74:50:43:72:71:29:a8:0f:c5:af:68: a4:3f:3a:af:e8:4d:07:84:84:66:9f:41:45:f9:cd:c3:0a:c8: 39:2e:5c:da:1b:e8:9a:c8:88:b5:c9:34:37:42:8a:4e:d2:24: ba:81:54:c6:3b:c0:e2:07:75:b0:0b:2b:2a:99:d8:b9:48:8c: 86:f0:ad:1e:42:09:c7:60:00:be:bd:f4:75:6c:9e:c6:64:44: fb:57:62:a5:f7:63:e1:08:7f:77:82:a1:54:33:d6:53:3a:a2: 1f:42:e6:e0:6c:f8:04:52:df:0a:cb:f6:98:1f:58:1c:42:05: 65:18:ad:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZZ6GKE+ESbvRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDNkMjgzMTEtY2JlOC00Y2ViLWE0OGMtMmE2YjVmMWJhZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Irl8gTCqwW/Ox3+5IDPNXEQstMg6D57NdQ dZ1RzI2/1vlSVrkXCFE6OjsUIZn6zMSRcf0koBF2G/a+YD9xBILxYzUfkApfTUYn vMqzsugqK7iloOWPKj8JLCKscQVASzVX/P7bwePetNry8FWwC7OpjovoYhXOg78H yv6m42E5zV6bs/srtf6jdXB655tkrSZBuVCZwz+MZIbK/viACfh8RBbD10iMS9Oz Hn4r05qfCGQbIe2pn3ryDMXjCZZu3yldKytF4+gqm2m4J1BoJwyQSK4WnIvcuB3A WXmrl7qO94jn7B04aNAAg2G+vop1Sef7e9XPEkQYYcow4SvNyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjoJ41LmAdzY6mbwJCMFV68qZj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE3NmIxMjQtZjc4OS0z ZGMyLWE2MWUtNGY0OGRjY2U4Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCImKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO04CC2p3dp/L/a4C3kEI47ukJ6UB1lavqhsp686xWSG8jVtaNB4mYs Bkd0Snayb9TvIohM2hJYiTnF6DVmGbn1S9OhDu8HpvLe5Csm5UbgWVa07jRJsy6h L/NxHSZSVBwxZK0GWvQNRTwRnZcw/zXBZgIPpoGBJL1clLzJUIQ4YKIxnrl0UENy cSmoD8WvaKQ/Oq/oTQeEhGafQUX5zcMKyDkuXNob6JrIiLXJNDdCik7SJLqBVMY7 wOIHdbALKyqZ2LlIjIbwrR5CCcdgAL699HVsnsZkRPtXYqX3Y+EIf3eCoVQz1lM6 oh9C5uBs+ARS3wrL9pgfWBxCBWUYreI= -----END CERTIFICATE-----Generated at Tue Sep 29 05:21:23 2026 by rpki-client