$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da4b5e64-9143-3e8c-8158-6e5be858f5e4.roa File: da4b5e64-9143-3e8c-8158-6e5be858f5e4.roa (raw, json) Hash identifier: rg9W0vbcz3WHNWzFd+/SfCshFyJbIqw7Gc8OGBNexQQ= Subject key identifier: EE:EA:AC:8D:7C:7C:30:C6:D5:12:B0:DA:DB:99:04:24:F2:F7:EE:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8908CF4E61FDA819A4C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da4b5e64-9143-3e8c-8158-6e5be858f5e4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 34.98.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:89:08:cf:4e:61:fd:a8:19:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=93b280ab-a80f-4eca-a6e2-007d9419b185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b7:57:e5:f7:1c:51:be:aa:65:bd:e7:c6:bf: 69:0e:95:fa:52:09:46:1f:ef:74:e9:f4:06:91:33: 78:52:a2:cb:2c:19:da:ef:8e:39:8e:0c:71:2c:89: 17:9f:5a:e0:c0:51:b9:40:05:35:0b:4c:1e:e5:ad: 85:25:c7:33:16:87:e7:12:cb:6f:92:1f:bf:1f:3e: 7a:81:56:3a:ab:b3:cc:2c:33:ec:39:7d:de:8e:0f: 5e:f3:1a:4d:e9:ab:a7:0c:59:5f:40:50:20:43:55: fe:42:4e:fd:08:65:78:f1:7e:ea:e8:42:14:23:cf: 29:29:7a:49:f4:e5:5c:99:66:e9:1c:f8:20:58:d6: cb:e2:69:df:b6:54:7b:44:65:f2:38:ec:c2:e1:3a: 53:a7:a3:df:e1:4b:17:74:6f:e9:c6:5a:38:b3:7a: 15:a7:29:e3:43:3e:b2:75:b7:f7:de:7f:5d:16:f7: be:41:3e:7a:22:cb:98:99:7c:67:bd:a3:de:3c:40: 71:c1:68:2d:8d:8b:8e:3d:24:18:da:1f:52:37:ed: 4f:d0:7c:79:04:b5:7d:94:75:9d:07:1a:4a:79:00: 07:2d:96:a5:aa:3a:1d:6f:f0:ac:fb:16:27:36:fb: c3:f1:f6:f4:94:ab:ef:d8:23:8a:b7:0d:58:25:ed: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EA:AC:8D:7C:7C:30:C6:D5:12:B0:DA:DB:99:04:24:F2:F7:EE:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da4b5e64-9143-3e8c-8158-6e5be858f5e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:31:85:b9:43:28:a4:25:be:9a:19:e1:a8:63:d4:72:94:6a: 20:f6:8f:98:04:bd:c6:57:17:e5:4b:6b:8b:2d:81:8f:19:88: d0:4a:9e:d3:0c:b7:a6:4b:81:a4:95:d2:74:71:bf:7a:9c:bf: bf:cf:ce:e9:a6:b0:a4:a1:7a:83:cf:fc:ed:83:8d:76:76:04: 35:5e:48:85:2e:7b:66:9a:39:7d:b9:2f:77:c0:02:97:4d:f3: 34:76:f7:fb:af:53:e0:ca:fb:a8:7d:09:4b:7e:bd:65:6d:4a: 91:59:33:c4:6e:45:87:37:dc:84:30:a7:79:86:0b:89:e4:a0: e1:52:50:ac:d1:de:26:df:62:67:76:66:bd:61:9c:cd:68:a2: a0:ba:5b:97:fc:e0:30:e1:b5:11:50:0e:a3:9c:77:b3:21:b6: 4e:83:10:64:24:a4:09:b0:05:94:ed:e3:21:d1:07:bc:db:7f: 47:a4:b5:88:c2:08:49:a0:36:b4:29:4b:b6:72:97:68:b8:a9: af:6a:f4:86:fc:ec:15:af:f1:c8:a9:3a:4c:b5:94:88:fe:b4: 96:e2:9a:f4:0e:a6:cc:4b:e4:14:5b:58:4b:6b:86:d8:97:13: 13:7d:a7:94:95:b0:85:a3:0c:cf:23:95:47:83:81:c9:be:e3: 83:cb:a5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYkIz05h/agZpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTNiMjgwYWItYTgwZi00ZWNhLWE2ZTItMDA3ZDk0MTliMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLdX5fccUb6qZb3nxr9pDpX6UglGH+906fQG kTN4UqLLLBna7445jgxxLIkXn1rgwFG5QAU1C0we5a2FJcczFofnEstvkh+/Hz56 gVY6q7PMLDPsOX3ejg9e8xpN6aunDFlfQFAgQ1X+Qk79CGV48X7q6EIUI88pKXpJ 9OVcmWbpHPggWNbL4mnftlR7RGXyOOzC4TpTp6Pf4UsXdG/pxlo4s3oVpynjQz6y dbf33n9dFve+QT56IsuYmXxnvaPePEBxwWgtjYuOPSQY2h9SN+1P0Hx5BLV9lHWd BxpKeQAHLZalqjodb/Cs+xYnNvvD8fb0lKvv2COKtw1YJe3OiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7qrI18fDDG1RKw2tuZBCTy9+5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGE0YjVlNjQtOTE0My0z ZThjLTgxNTgtNmU1YmU4NThmNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCImKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwxhblDKKQlvpoZ4ahj1HKUaiD2j5gEvcZXF+VLa4stgY8ZiNBKntMM t6ZLgaSV0nRxv3qcv7/PzummsKSheoPP/O2DjXZ2BDVeSIUue2aaOX25L3fAApdN 8zR29/uvU+DK+6h9CUt+vWVtSpFZM8RuRYc33IQwp3mGC4nkoOFSUKzR3ibfYmd2 Zr1hnM1ooqC6W5f84DDhtRFQDqOcd7Mhtk6DEGQkpAmwBZTt4yHRB7zbf0ektYjC CEmgNrQpS7Zyl2i4qa9q9Ib87BWv8cipOky1lIj+tJbimvQOpsxL5BRbWEtrhtiX ExN9p5SVsIWjDM8jlUeDgcm+44PLpVc= -----END CERTIFICATE-----Generated at Tue Sep 29 02:47:39 2026 by rpki-client