$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa File: 0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa (raw, json) Hash identifier: atVcavvNSjLOiA2WFeVJ2/EhyXm71Q4/rI4DBGfC9AQ= Subject key identifier: 14:D6:A3:A3:99:9C:64:7E:BB:C7:CE:E6:E0:5D:A8:E4:48:26:89:F2 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584D11726888A3A3CBF219058F00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 30058 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:68:88:a3:a3:cb:f2:19:05:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=172e97a7-22a3-4bd9-bb92-275155a74d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a6:10:64:79:45:b0:7c:e6:81:45:e6:82:c4: 0b:6a:4d:27:33:07:99:3f:a6:ca:15:cf:53:12:3b: d8:fd:98:c1:0c:66:d5:34:e2:8e:bb:a2:c7:ae:7e: 4d:31:24:26:a1:74:1f:dd:19:92:63:f5:9f:4c:1f: 71:e2:ab:10:4e:1e:da:05:44:08:f8:4a:7f:24:79: 53:70:48:0c:2f:8d:ef:db:1d:f4:2f:9f:16:c4:d7: 53:e1:fd:06:ac:e2:43:13:59:4b:18:6d:56:a0:94: 0a:de:4e:7b:51:ea:67:3a:07:67:35:fd:2c:ae:26: c8:3c:f3:c3:d8:fe:a9:93:e7:78:a5:ec:e1:8f:22: aa:39:0d:30:44:a3:4d:7d:e0:f0:12:d6:76:a3:e0: 66:43:e7:8a:5f:88:f2:97:5a:e3:4a:d2:f1:29:ae: 8d:7d:ce:43:d3:47:ea:cd:18:ff:58:a9:78:14:9b: 5a:8d:53:1f:3c:e0:bb:60:4a:15:51:db:69:4f:57: 54:45:20:19:5c:05:58:17:26:4d:d4:77:51:f1:3f: 00:b4:0a:f9:a2:c5:ed:17:71:9c:31:3e:f7:31:b5: 9e:67:de:d1:48:31:67:db:61:41:97:a7:ef:49:85: 24:21:90:3d:a7:e9:0f:31:d3:fc:45:b9:45:82:16: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D6:A3:A3:99:9C:64:7E:BB:C7:CE:E6:E0:5D:A8:E4:48:26:89:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:b2:56:34:c0:17:91:14:31:76:ec:af:c3:fd:0c:01:e9:56: 3a:e8:62:59:47:2d:e5:6c:b1:28:67:86:23:8c:ac:6c:3c:33: 0f:ff:ff:38:3b:d9:c5:a2:93:21:ad:71:0f:b6:e5:e8:09:d7: b9:57:b1:4a:d3:ee:53:47:7d:30:fb:5b:67:72:88:71:d2:68: e4:2f:d4:3e:32:42:74:eb:80:d3:81:f2:9a:a8:ce:c4:b2:52: c4:e9:39:c2:7d:88:c4:79:1c:b4:d2:eb:b3:92:2e:78:86:2a: 96:c1:d2:6c:e7:cd:2e:12:fe:7d:19:4f:c8:8c:59:6a:71:da: cc:e7:2b:86:c3:f6:89:37:e3:9c:1d:b3:10:cb:c9:70:db:cc: 90:8d:2e:7b:97:37:5e:9b:5e:ff:c4:5d:f9:ac:ea:ae:7d:37: d6:9f:0c:37:f4:9f:95:62:16:8d:e0:e1:4f:b7:77:3d:fe:fd: bd:e2:12:3e:d6:c9:69:57:d3:08:e1:5b:c3:eb:12:ce:5e:96: b8:6f:6e:7f:a3:8a:eb:05:ac:f1:f3:d5:7f:52:22:b9:08:ab: 1b:d8:a6:1d:01:20:28:81:57:09:ea:4b:3c:24:e3:ba:70:5d: 45:17:d5:ee:e4:3e:08:06:5d:94:39:26:90:89:d4:b9:a4:f5: 65:17:8d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmiIo6PL8hkFjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MTcyZTk3YTctMjJhMy00YmQ5LWJiOTItMjc1MTU1YTc0ZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqYQZHlFsHzmgUXmgsQLak0nMweZP6bKFc9T EjvY/ZjBDGbVNOKOu6LHrn5NMSQmoXQf3RmSY/WfTB9x4qsQTh7aBUQI+Ep/JHlT cEgML43v2x30L58WxNdT4f0GrOJDE1lLGG1WoJQK3k57UepnOgdnNf0sribIPPPD 2P6pk+d4pezhjyKqOQ0wRKNNfeDwEtZ2o+BmQ+eKX4jyl1rjStLxKa6Nfc5D00fq zRj/WKl4FJtajVMfPOC7YEoVUdtpT1dURSAZXAVYFyZN1HdR8T8AtAr5osXtF3Gc MT73MbWeZ97RSDFn22FBl6fvSYUkIZA9p+kPMdP8RblFghY3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTWo6OZnGR+u8fO5uBdqORIJonyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGFmZjc4YWUtN2Y3OC0z YmY0LWIwNzktYmQxY2IzN2RhZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOyVjTAF5EUMXbsr8P9DAHpVjroYllHLeVssShnhiOMrGw8Mw///zg7 2cWikyGtcQ+25egJ17lXsUrT7lNHfTD7W2dyiHHSaOQv1D4yQnTrgNOB8pqozsSy UsTpOcJ9iMR5HLTS67OSLniGKpbB0mznzS4S/n0ZT8iMWWpx2sznK4bD9ok345wd sxDLyXDbzJCNLnuXN16bXv/EXfms6q59N9afDDf0n5ViFo3g4U+3dz3+/b3iEj7W yWlX0wjhW8PrEs5elrhvbn+jiusFrPHz1X9SIrkIqxvYph0BICiBVwnqSzwk47pw XUUX1e7kPggGXZQ5JpCJ1Lmk9WUXjfM= -----END CERTIFICATE-----Generated at Sat Mar 7 14:17:16 2026 by rpki-client