$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ab3b341-a8e8-313f-b996-5aaec49c2685.roa File: 0ab3b341-a8e8-313f-b996-5aaec49c2685.roa (raw, json) Hash identifier: TdrqNsgkozBtYvNhqpOAA/7/G7cZIdwCVAyKmgBON8E= Subject key identifier: 29:60:A7:9C:B9:96:1E:24:D3:58:99:72:44:8B:8F:4D:93:63:30:09 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF7F70F5514E0D1DBE700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ab3b341-a8e8-313f-b996-5aaec49c2685.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.70.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f7:f7:0f:55:14:e0:d1:db:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=9d46e67f-ffb0-46da-b735-b9a9405f8df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:75:17:fa:f7:12:10:fc:b3:b5:aa:f7:a3: b6:79:a8:a1:59:a2:92:00:32:19:36:b1:61:38:9d: 0b:75:59:35:cc:f2:d7:8d:42:50:4a:6b:ef:ea:7e: e2:d7:1a:0b:b4:41:d6:88:a3:36:a0:1a:a6:24:aa: 1c:25:8d:7c:5e:af:5f:2a:43:ea:db:83:e7:0e:f0: 69:b2:5e:33:94:67:7c:d0:e7:47:cf:bd:5c:50:20: 04:6d:a8:0c:7d:97:75:5b:3c:fd:3e:fd:8f:f6:97: c3:86:e8:d3:ff:65:e8:e6:1c:7e:1a:04:8d:f9:aa: bc:1c:20:39:a6:a1:74:b9:c8:13:22:81:9e:c0:52: 8c:36:2d:2d:f2:e6:c0:f3:06:8a:dd:cc:f5:12:f9: a3:7a:60:70:29:55:03:fa:b5:04:b1:22:fd:3d:60: 91:78:93:32:60:7d:9a:aa:7e:a1:b6:08:e6:a7:e1: d3:7c:88:a2:40:c9:63:1f:5a:85:3c:38:77:61:62: cc:a5:a4:62:82:f5:e4:e6:b0:2a:9b:5f:47:f0:57: 5f:75:25:74:ee:fc:5d:f3:b6:31:bb:5d:d7:b3:a9: ec:41:32:61:67:65:5a:ad:11:03:de:3d:26:cd:94: b9:17:f1:d9:fd:3c:39:d2:fd:77:7f:bf:46:66:75: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:60:A7:9C:B9:96:1E:24:D3:58:99:72:44:8B:8F:4D:93:63:30:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ab3b341-a8e8-313f-b996-5aaec49c2685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:34:80:66:9d:da:30:d7:6c:d9:19:98:30:49:a8:00:24:48: c4:3c:df:c0:6d:e1:6c:14:e8:2e:82:db:fe:d3:4b:fc:d7:4a: fb:09:83:d3:9d:eb:20:64:5e:44:d4:17:6e:a5:ba:de:05:a0: 10:57:36:a1:4f:92:a0:62:dc:a4:2e:e4:31:82:da:87:33:08: 67:fb:ac:26:cd:e5:83:c1:2e:75:5d:1b:bc:21:24:aa:6f:68: fa:18:c5:84:f3:83:10:77:49:05:e8:15:02:91:a9:e4:a1:9c: 55:f8:b7:72:89:e6:95:99:6f:6f:f3:25:b9:1c:25:4e:c0:05: dc:18:c6:ce:ed:9b:48:75:62:84:8b:92:38:da:65:0c:1a:54: 23:e7:c5:45:48:58:bf:bc:0a:b8:05:21:90:ae:5d:23:05:fa: 2f:52:02:68:21:81:97:ae:d3:c1:bd:d2:ae:26:3c:c6:95:03: 14:1e:ec:d6:ab:74:ae:c8:52:aa:0b:93:ee:b5:11:d8:89:4f: 6a:28:76:f6:24:b2:6b:7a:5d:e1:13:95:98:08:b5:b0:21:b4: 2a:a6:e7:00:3b:4d:cd:ed:24:68:0e:df:20:eb:05:94:61:da: e7:fd:df:a5:56:db:71:da:96:0c:a6:14:49:12:d5:a7:eb:c7: e6:81:71:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPf3D1UU4NHb5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OWQ0NmU2N2YtZmZiMC00NmRhLWI3MzUtYjlhOTQwNWY4ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjct1F/r3EhD8s7Wq96O2eaihWaKSADIZNrFh OJ0LdVk1zPLXjUJQSmvv6n7i1xoLtEHWiKM2oBqmJKocJY18Xq9fKkPq24PnDvBp sl4zlGd80OdHz71cUCAEbagMfZd1Wzz9Pv2P9pfDhujT/2Xo5hx+GgSN+aq8HCA5 pqF0ucgTIoGewFKMNi0t8ubA8waK3cz1EvmjemBwKVUD+rUEsSL9PWCReJMyYH2a qn6htgjmp+HTfIiiQMljH1qFPDh3YWLMpaRigvXk5rAqm19H8FdfdSV07vxd87Yx u13Xs6nsQTJhZ2VarRED3j0mzZS5F/HZ/Tw50v13f79GZnUWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClgp5y5lh4k01iZckSLj02TYzAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGFiM2IzNDEtYThlOC0z MTNmLWI5OTYtNWFhZWM0OWMyNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJc0gGad2jDXbNkZmDBJqAAkSMQ838Bt4WwU6C6C2/7TS/zXSvsJg9Od 6yBkXkTUF26lut4FoBBXNqFPkqBi3KQu5DGC2oczCGf7rCbN5YPBLnVdG7whJKpv aPoYxYTzgxB3SQXoFQKRqeShnFX4t3KJ5pWZb2/zJbkcJU7ABdwYxs7tm0h1YoSL kjjaZQwaVCPnxUVIWL+8CrgFIZCuXSMF+i9SAmghgZeu08G90q4mPMaVAxQe7Nar dK7IUqoLk+61EdiJT2oodvYksmt6XeETlZgItbAhtCqm5wA7Tc3tJGgO3yDrBZRh 2uf936VW23HalgymFEkS1afrx+aBcb4= -----END CERTIFICATE-----Generated at Fri Sep 25 05:15:43 2026 by rpki-client