$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa File: 98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa (raw, json) Hash identifier: 9zkoy8o5TN/2LWzAMhc1lLF3Wk07yHDfM89bwteo3qw= Subject key identifier: BD:A2:C8:9E:20:32:D2:57:A8:F7:6B:1A:FE:8D:44:1C:0B:3B:0D:6E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10379021A24DC64944333500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.70.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:90:21:a2:4d:c6:49:44:33:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=8624a65d-0792-49a2-867f-b511972ea9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:b7:95:47:9d:49:b6:0f:61:a5:ca:ad:38: b5:a8:26:96:6b:a6:2c:0d:42:ea:6b:25:a4:19:a1: 47:78:0d:28:06:b0:a3:b4:1c:5c:a0:1c:50:78:37: 05:34:6a:62:d2:4b:2d:34:5a:1d:78:52:8b:bc:fe: 48:30:94:b4:88:3b:30:96:bd:0c:2b:5b:7a:ae:f3: f2:81:27:71:81:69:1b:a4:79:0d:e4:40:d9:26:25: 7b:2d:4a:49:31:ad:81:b0:02:37:7f:19:fc:96:78: 6f:5d:ab:ae:4e:46:3b:4d:4e:e9:18:5e:e3:7f:42: 50:19:85:da:5e:63:cc:a4:98:5e:0d:6f:8f:4a:bf: b6:66:44:a5:f6:3a:f6:43:17:eb:f2:10:db:6b:21: 10:b8:5d:e7:e3:a5:63:00:7f:00:65:8f:03:40:b4: 6f:c8:4f:c3:26:ad:6f:e4:76:f2:cd:eb:10:6e:2c: d3:f4:b9:43:10:6b:be:71:b5:4d:3f:88:d5:62:54: ed:18:81:e5:59:8a:da:db:11:06:4e:d4:ae:3b:03: 05:33:f8:c8:2b:0e:9c:50:f6:d0:3c:56:6b:22:76: fe:8b:2f:ed:12:88:c0:b8:ab:96:98:b4:bf:73:fb: 0f:7d:58:86:48:2a:89:9f:d5:3f:5e:12:5e:d7:80: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A2:C8:9E:20:32:D2:57:A8:F7:6B:1A:FE:8D:44:1C:0B:3B:0D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98d31e67-c4e6-3b0e-a14a-aef5183fae3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b3:a3:28:3c:fa:d1:96:4c:f2:7f:d6:9a:65:c8:fe:25:1e: 3b:0e:ab:96:3c:a3:7f:ed:37:76:e5:3e:6a:3a:f5:8d:ad:3f: 49:d0:61:66:be:78:71:df:79:ce:30:d0:2f:38:55:48:d5:4f: d5:51:46:9d:8d:84:16:d7:4b:78:df:f9:f4:ea:ec:8a:39:07: 18:c5:96:b5:33:a5:eb:15:20:ce:f3:d6:b8:1c:d6:14:68:d7: f6:25:60:76:a6:a2:6c:c0:f3:0f:5c:9e:1a:8e:e1:06:6d:9e: 87:e0:3d:5d:3d:8a:56:fc:06:c1:43:68:bd:b6:36:40:c6:75: ed:cc:24:2f:50:2f:cf:21:7b:7a:8a:05:97:fa:0f:84:b0:1c: 01:91:94:05:9b:e7:b6:2f:ae:a3:db:f1:1a:4d:d3:53:51:1a: d0:5c:d8:ba:1b:7e:5b:a5:cf:cf:15:32:dc:d0:40:8c:8c:e0: c2:09:e3:4b:35:51:9f:12:be:18:2d:b0:54:e0:7f:49:da:53: b3:d7:af:7b:19:c5:6b:93:cb:e6:88:41:fe:53:aa:ea:9e:95: b1:e4:bf:fd:09:a9:35:85:b1:fa:10:0c:66:28:0d:f8:a5:bf: 96:9a:8e:87:14:27:1a:e7:bf:8d:0b:3d:a0:d8:50:90:b0:6b: 3e:b6:79:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5Ahok3GSUQzNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ODYyNGE2NWQtMDc5Mi00OWEyLTg2N2YtYjUxMTk3MmVhOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL23lUedSbYPYaXKrTi1qCaWa6YsDULqayWk GaFHeA0oBrCjtBxcoBxQeDcFNGpi0kstNFodeFKLvP5IMJS0iDswlr0MK1t6rvPy gSdxgWkbpHkN5EDZJiV7LUpJMa2BsAI3fxn8lnhvXauuTkY7TU7pGF7jf0JQGYXa XmPMpJheDW+PSr+2ZkSl9jr2Qxfr8hDbayEQuF3n46VjAH8AZY8DQLRvyE/DJq1v 5HbyzesQbizT9LlDEGu+cbVNP4jVYlTtGIHlWYra2xEGTtSuOwMFM/jIKw6cUPbQ PFZrInb+iy/tEojAuKuWmLS/c/sPfViGSCqJn9U/XhJe14BwbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2iyJ4gMtJXqPdrGv6NRBwLOw1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThkMzFlNjctYzRlNi0z YjBlLWExNGEtYWVmNTE4M2ZhZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCzoyg8+tGWTPJ/1pplyP4lHjsOq5Y8o3/tN3blPmo69Y2tP0nQYWa+ eHHfec4w0C84VUjVT9VRRp2NhBbXS3jf+fTq7Io5BxjFlrUzpesVIM7z1rgc1hRo 1/YlYHamomzA8w9cnhqO4QZtnofgPV09ilb8BsFDaL22NkDGde3MJC9QL88he3qK BZf6D4SwHAGRlAWb57YvrqPb8RpN01NRGtBc2Lobflulz88VMtzQQIyM4MIJ40s1 UZ8SvhgtsFTgf0naU7PXr3sZxWuTy+aIQf5TquqelbHkv/0JqTWFsfoQDGYoDfil v5aajocUJxrnv40LPaDYUJCwaz62eWo= -----END CERTIFICATE-----Generated at Tue Sep 22 13:00:33 2026 by rpki-client