$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa File: 0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa (raw, json) Hash identifier: GRbn8Gh15ahnpf2hgysgsJ1QFm/cqeGAW5SyHIGhijM= Subject key identifier: F5:2D:CA:78:66:18:D8:30:14:C6:84:68:72:31:34:E0:4E:91:B6:29 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584DF2108AA780BDF2A4E8D97F40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 30058 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:8a:a7:80:bd:f2:a4:e8:d9:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=536c8b4f-01b9-4d59-8505-27abad5ad3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:b6:fb:9b:84:44:42:55:44:84:b8:4a:af: 4a:54:1c:11:67:c5:11:7d:5a:cd:81:f6:95:05:bd: 0c:da:36:b1:69:8b:61:29:ca:e4:71:71:1a:3a:8b: 06:fc:05:3b:32:7a:b5:d3:fc:9e:74:a1:2e:86:e3: 2d:2c:2b:9d:f5:68:44:2b:64:b7:f1:26:5f:58:98: 7a:ad:39:07:de:d7:16:3b:ec:16:df:63:f7:ca:81: 6f:a3:9a:5e:d1:2a:36:09:0e:3a:dd:8a:22:c5:0f: 0a:a8:9c:91:85:49:34:c1:79:b8:c3:5d:d0:0f:cc: 44:ce:76:8a:df:ef:4c:d8:4c:87:9b:7d:5b:97:0d: af:e8:cb:89:22:ee:db:f5:43:6e:83:9c:d9:6d:28: 00:7f:5f:dd:54:95:ab:20:8b:bc:34:1e:04:7f:2a: c0:ea:39:cf:c9:99:d4:23:2a:6d:18:ad:62:62:42: a4:d4:ae:d3:a9:25:c4:21:35:e4:43:1b:0b:a9:70: 08:e8:1d:60:ed:3a:7f:e8:4f:72:6c:e5:64:c0:42: c5:cc:3f:51:3d:06:00:5a:4b:b5:05:a0:a0:dc:6c: 7c:ff:06:62:13:9a:e9:a8:af:7d:72:76:64:26:39: e9:c9:19:6c:fd:c4:f7:ff:22:51:d8:db:0e:ba:77: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2D:CA:78:66:18:D8:30:14:C6:84:68:72:31:34:E0:4E:91:B6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5f:39:83:e1:c6:e8:04:57:ce:b2:13:fb:04:a5:04:9c:f6: b5:88:73:00:ef:0a:7d:58:30:33:f0:86:1a:b9:29:62:7c:39: 1a:9b:94:ae:8e:0c:aa:dc:7f:12:60:54:e0:bb:50:a9:2f:41: bb:b6:8a:19:4b:44:7a:f2:3c:b2:71:c9:59:36:a9:1e:3b:bc: 87:27:53:9c:82:2c:d3:d8:46:63:80:e5:d0:4d:e1:96:68:db: f5:96:19:74:5f:f8:0e:40:8e:52:5e:0f:fe:96:44:d5:15:7f: 04:7d:62:23:aa:c2:b3:01:b2:d4:30:40:6e:9e:c3:18:3b:54: a0:2c:b0:f8:ed:3f:f4:cb:0b:a9:11:b2:d4:f5:2f:5c:d0:60: 99:0b:fe:09:67:b9:e0:ba:b7:56:e4:6b:b8:b3:f0:99:c2:c2: c3:b7:aa:f0:89:70:45:19:1d:af:a6:f2:7f:d8:1b:cb:7d:37: 7a:36:ba:45:79:3e:43:9f:f2:cb:8c:a7:25:36:b3:27:b3:62: 90:43:52:bb:74:58:02:a4:a8:bc:c1:62:0d:40:ac:b1:1f:7f: 3f:92:04:a9:57:b9:cc:cd:1f:cc:8c:6c:5a:41:08:d7:43:f0: 69:cf:87:62:cf:0c:c9:11:ce:14:25:4b:9b:b6:27:ff:9b:06: 61:17:e4:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIqngL3ypOjZf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk NTM2YzhiNGYtMDFiOS00ZDU5LTg1MDUtMjdhYmFkNWFkM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApla2+5uEREJVRIS4Sq9KVBwRZ8URfVrNgfaV Bb0M2jaxaYthKcrkcXEaOosG/AU7Mnq10/yedKEuhuMtLCud9WhEK2S38SZfWJh6 rTkH3tcWO+wW32P3yoFvo5pe0So2CQ463YoixQ8KqJyRhUk0wXm4w13QD8xEznaK 3+9M2EyHm31blw2v6MuJIu7b9UNug5zZbSgAf1/dVJWrIIu8NB4EfyrA6jnPyZnU IyptGK1iYkKk1K7TqSXEITXkQxsLqXAI6B1g7Tp/6E9ybOVkwELFzD9RPQYAWku1 BaCg3Gx8/wZiE5rpqK99cnZkJjnpyRls/cT3/yJR2NsOunc8/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUtynhmGNgwFMaEaHIxNOBOkbYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGFmZjc4YWUtN2Y3OC0z YmY0LWIwNzktYmQxY2IzN2RhZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhfOYPhxugEV86yE/sEpQSc9rWIcwDvCn1YMDPwhhq5KWJ8ORqblK6O DKrcfxJgVOC7UKkvQbu2ihlLRHryPLJxyVk2qR47vIcnU5yCLNPYRmOA5dBN4ZZo 2/WWGXRf+A5AjlJeD/6WRNUVfwR9YiOqwrMBstQwQG6ewxg7VKAssPjtP/TLC6kR stT1L1zQYJkL/glnueC6t1bka7iz8JnCwsO3qvCJcEUZHa+m8n/YG8t9N3o2ukV5 PkOf8suMpyU2syezYpBDUrt0WAKkqLzBYg1ArLEffz+SBKlXuczNH8yMbFpBCNdD 8GnPh2LPDMkRzhQlS5u2J/+bBmEX5Ew= -----END CERTIFICATE-----Generated at Sat Jun 6 02:37:30 2026 by rpki-client