$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa File: 1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa (raw, json) Hash identifier: AJ7jz5F4f1fVJhcNdr3RqE+Dm00zkdO4viies4tIdIw= Subject key identifier: D9:B5:92:EF:7C:32:71:7A:E0:31:F6:E3:0D:C7:76:10:03:55:D9:6C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A5FC5E8F8E0B56E6D0752C700 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 1239 IP address blocks: 198.16.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e8:f8:e0:b5:6e:6d:07:52:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=ac630df3-e7fa-406f-ab00-c8202246fc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:73:8f:44:31:19:78:c1:39:8c:d1:da:d3: 61:3c:9e:8f:1e:2b:3f:db:35:c9:1f:1b:5a:06:ed: 71:44:6a:84:0d:b6:77:d8:f1:57:53:d8:57:3a:9a: 16:fc:fc:29:7a:5d:7e:62:bb:69:28:14:30:b5:79: bb:2f:17:38:0c:f2:ac:78:80:d1:55:67:ae:ba:6b: d3:8a:51:44:1a:d4:83:de:43:f3:e3:af:04:e3:a0: 8f:81:f4:7d:3f:5e:c7:69:cb:e3:90:75:c2:d5:bc: 97:5b:e7:1b:2e:50:41:a8:bc:13:fa:7e:b4:df:55: 5a:62:89:b8:49:b6:70:ce:bd:4f:cf:f2:90:22:b9: 01:d6:0e:41:03:cd:d2:23:ae:00:2d:5c:75:5e:f3: f6:5d:89:07:38:1d:2d:26:93:1c:85:de:b3:74:fc: 61:7b:23:2f:df:52:ee:b5:c5:78:dd:ce:45:9b:6f: 89:d7:58:6a:ad:a2:6b:30:3f:b0:92:57:d1:de:ad: dc:7d:84:d1:8a:fe:b8:d4:28:a0:30:53:e0:b7:7d: a8:e1:94:6f:34:4d:9a:30:d5:19:77:1c:ed:28:2f: 65:42:a5:72:d0:ad:63:db:7d:54:03:92:5e:32:49: 9b:25:7a:c3:b5:8e:1c:7e:30:5d:35:b9:17:35:01: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:92:EF:7C:32:71:7A:E0:31:F6:E3:0D:C7:76:10:03:55:D9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b3:66:93:cd:73:f4:bf:4d:91:36:13:f5:5c:90:83:a5:45: b5:89:e9:75:91:fc:ae:5d:e9:df:0a:09:72:4b:6a:8c:5f:f6: 00:fd:db:00:6c:36:6d:46:ce:33:1c:bf:ff:e0:ca:f8:dc:6d: d9:ed:23:7a:48:c9:e4:88:ff:95:79:96:e7:cb:e1:35:4d:36: 07:bc:12:5b:cf:1e:25:63:96:40:0e:90:c7:c9:00:89:b7:25: 32:94:11:d6:2e:68:bc:88:0e:c2:c8:36:e1:09:98:d1:8e:74: 85:ad:61:5a:b9:82:2c:67:a7:45:5c:8f:34:db:b1:b6:a7:34: 3c:f3:76:64:d7:b2:23:af:c1:65:c0:2b:a1:40:d8:a3:1d:78: 66:77:03:c6:83:c4:da:a5:50:92:82:23:fc:64:57:61:e9:49: b9:62:df:44:7e:2d:11:2a:47:db:c8:78:1e:9c:3e:8a:02:1f: 98:e4:ff:1c:80:31:e1:fd:94:ec:82:6a:16:0f:71:eb:77:29: 44:c5:60:8c:8a:e7:b6:15:6e:fc:7e:2f:cb:51:fd:6c:15:84: 55:7f:9e:d9:98:93:98:b8:6f:67:b1:05:fe:f4:07:38:a9:ed: b2:ab:0d:76:75:48:57:f8:69:06:d4:e5:e8:53:d6:f9:77:76: 49:1f:fa:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxej44LVubQdSxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YWM2MzBkZjMtZTdmYS00MDZmLWFiMDAtYzgyMDIyNDZmYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxlzj0QxGXjBOYzR2tNhPJ6PHis/2zXJHxta Bu1xRGqEDbZ32PFXU9hXOpoW/Pwpel1+YrtpKBQwtXm7Lxc4DPKseIDRVWeuumvT ilFEGtSD3kPz468E46CPgfR9P17HacvjkHXC1byXW+cbLlBBqLwT+n6031VaYom4 SbZwzr1Pz/KQIrkB1g5BA83SI64ALVx1XvP2XYkHOB0tJpMchd6zdPxheyMv31Lu tcV43c5Fm2+J11hqraJrMD+wklfR3q3cfYTRiv641CigMFPgt32o4ZRvNE2aMNUZ dxztKC9lQqVy0K1j231UA5JeMkmbJXrDtY4cfjBdNbkXNQElXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm1ku98MnF64DH24w3HdhADVdlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWY5Yjc4YWEtYjg2Ni0z NTE3LTg4MmEtN2MwYzdhYzBiNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOzZpPNc/S/TZE2E/VckIOlRbWJ6XWR/K5d6d8KCXJLaoxf9gD92wBs Nm1GzjMcv//gyvjcbdntI3pIyeSI/5V5lufL4TVNNge8ElvPHiVjlkAOkMfJAIm3 JTKUEdYuaLyIDsLINuEJmNGOdIWtYVq5gixnp0VcjzTbsbanNDzzdmTXsiOvwWXA K6FA2KMdeGZ3A8aDxNqlUJKCI/xkV2HpSbli30R+LREqR9vIeB6cPooCH5jk/xyA MeH9lOyCahYPcet3KUTFYIyK57YVbvx+L8tR/WwVhFV/ntmYk5i4b2exBf70Bzip 7bKrDXZ1SFf4aQbU5ehT1vl3dkkf+oM= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:40 2025 by rpki-client