$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa File: fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa (raw, json) Hash identifier: tilNmhK1MrjLvrLnfmPmLOHq+Rw3rzSeuZOqeKs4Rtw= Subject key identifier: AE:7A:00:01:B6:89:97:C7:DC:13:D4:A2:02:E2:14:59:9B:29:91:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAC48A124780DB3A48EC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.98.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ac:48:a1:24:78:0d:b3:a4:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=91d5ac96-741b-4ed1-b421-82ce60a6c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:3b:ac:08:5a:80:64:5f:78:62:ff:3e:e8: ec:cc:f4:d0:a1:ce:35:d9:af:c8:6d:2d:a6:ff:06: f3:37:11:fa:ee:01:50:49:08:50:c6:ed:8a:d6:7c: 8c:08:32:09:84:3b:a0:62:57:c2:72:63:05:24:f8: 08:b4:38:70:ad:25:28:98:e5:06:6e:48:5a:a5:43: 55:73:49:48:70:fa:93:22:1c:c2:6f:50:84:68:0d: 6f:6c:16:cf:81:b2:5a:1a:fd:9b:1f:88:e7:1e:e7: 5e:3a:ae:c8:fd:64:ef:68:2c:0d:82:23:58:20:c5: fa:fb:55:87:11:98:05:8f:25:b4:dc:5a:56:aa:4e: 92:a6:91:70:41:84:24:a0:d7:2e:10:3e:2c:27:ea: da:07:1e:96:aa:c7:ab:24:78:6e:95:43:74:df:77: 2c:a1:27:18:e6:09:d1:43:e0:e6:f5:0b:99:43:8b: 3a:06:f9:6d:a1:27:df:41:22:74:d5:94:e6:d6:e2: 0f:56:34:8c:0d:dd:b8:d1:06:1c:02:b9:eb:f4:d1: ff:8e:08:f6:e4:38:51:f0:75:c9:2c:7c:80:9c:66: 60:4f:19:9e:0a:b5:a5:52:a2:5f:ab:cb:70:cd:1a: ba:88:e8:1a:87:ae:dd:66:e1:1c:ff:96:b5:21:d1: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7A:00:01:B6:89:97:C7:DC:13:D4:A2:02:E2:14:59:9B:29:91:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:38:ab:af:1d:17:91:72:ea:a3:fe:8e:1c:9f:49:21:8c:43: 03:12:21:b5:94:9a:d2:bb:ab:1a:7f:bb:fa:a8:d9:17:a2:c7: ab:5c:7b:9d:15:29:df:d4:bb:10:77:ee:4f:bd:12:c4:52:05: 13:21:ef:ef:65:d4:61:37:52:82:b4:fc:3a:12:23:a4:1e:20: 3d:3a:ea:f6:56:ac:90:05:fd:7e:1e:cd:5d:b0:bd:ad:74:30: 2d:36:e8:0b:6a:44:4b:4c:73:ab:01:e6:c6:0c:f0:e9:7a:8f: 47:1b:8f:7d:09:7e:07:64:45:63:e2:a0:b3:7d:a1:9f:0b:ce: d6:5b:92:49:ab:c9:dd:35:55:b0:90:c8:65:67:2e:62:d1:57: 39:4a:d2:82:ef:40:b0:74:cc:37:c3:7b:fb:a1:a8:d3:c0:41: f8:b9:ba:5c:06:b6:a7:83:c2:03:e7:ef:e3:9e:e8:48:cf:14: 3f:5e:f1:71:28:07:17:ce:f8:59:ec:a2:12:a1:16:2b:c9:c7: d1:e1:28:77:f8:61:4c:5d:2b:11:bc:6a:90:1a:73:af:01:24: 95:27:14:09:1a:c2:ad:ab:76:2b:9a:73:e0:76:8e:eb:7b:44: dc:9f:01:5a:ca:3d:c9:a4:da:a0:f5:a6:fc:de:a0:bd:87:2b: 3a:03:98:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaxIoSR4DbOkjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTFkNWFjOTYtNzQxYi00ZWQxLWI0MjEtODJjZTYwYTZjNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Q7rAhagGRfeGL/PujszPTQoc412a/IbS2m /wbzNxH67gFQSQhQxu2K1nyMCDIJhDugYlfCcmMFJPgItDhwrSUomOUGbkhapUNV c0lIcPqTIhzCb1CEaA1vbBbPgbJaGv2bH4jnHudeOq7I/WTvaCwNgiNYIMX6+1WH EZgFjyW03FpWqk6SppFwQYQkoNcuED4sJ+raBx6WqserJHhulUN033csoScY5gnR Q+Dm9QuZQ4s6BvltoSffQSJ01ZTm1uIPVjSMDd240QYcArnr9NH/jgj25DhR8HXJ LHyAnGZgTxmeCrWlUqJfq8twzRq6iOgah67dZuEc/5a1IdEndQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK56AAG2iZfH3BPUogLiFFmbKZHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE0OTU3ZjAtYWRhMi0z ZTY1LTk0YTAtYmQ4ZDFiODRiYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ04q68dF5Fy6qP+jhyfSSGMQwMSIbWUmtK7qxp/u/qo2Reix6tce50V Kd/UuxB37k+9EsRSBRMh7+9l1GE3UoK0/DoSI6QeID066vZWrJAF/X4ezV2wva10 MC026AtqREtMc6sB5sYM8Ol6j0cbj30JfgdkRWPioLN9oZ8LztZbkkmryd01VbCQ yGVnLmLRVzlK0oLvQLB0zDfDe/uhqNPAQfi5ulwGtqeDwgPn7+Oe6EjPFD9e8XEo BxfO+FnsohKhFivJx9HhKHf4YUxdKxG8apAac68BJJUnFAkawq2rdiuac+B2jut7 RNyfAVrKPcmk2qD1pvzeoL2HKzoDmBY= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:15 2026 by rpki-client