$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0d5592cf-7815-34cb-b577-fcf91a0491e9.roa File: 0d5592cf-7815-34cb-b577-fcf91a0491e9.roa (raw, json) Hash identifier: fQ8wnLw0Ng9HY5h5SPVH2pcqIdwB2G+YBNnKhxLMAz4= Subject key identifier: 48:C6:FD:03:DB:38:DE:16:80:59:65:E6:7F:84:E5:F8:EF:59:01:3C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B125A7F5F12B8AC7AF3045900 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0d5592cf-7815-34cb-b577-fcf91a0491e9.roa Signing time: Wed 03 Sep 2025 12:14:35 +0000 ROA not before: Wed 03 Sep 2025 12:14:35 +0000 ROA not after: Tue 02 Dec 2025 13:14:35 +0000 asID: 30058 IP address blocks: 198.16.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:5a:7f:5f:12:b8:ac:7a:f3:04:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 3 12:14:35 2025 GMT Not After : Dec 2 13:14:35 2025 GMT Subject: CN=4db015d8-b3ba-4c60-80b8-bc5d9fa81e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:32:cf:4e:5c:5e:fb:c5:62:55:9e:b4:85:e3: 87:69:12:ee:5e:b4:c0:3b:10:fc:4f:91:00:ef:56: 40:5e:08:9b:72:71:d1:ca:e5:34:98:be:d2:bb:19: 39:a2:ae:90:dc:07:52:0e:8b:4f:d2:53:c9:65:9b: 38:75:3e:3b:a6:a2:02:11:ad:cb:96:c2:95:15:14: ee:30:66:8f:f5:2c:07:be:f0:9b:6c:f6:26:23:fd: 43:63:2e:7b:01:07:aa:66:fc:5f:25:bd:54:e4:2e: fd:a9:20:73:92:56:48:67:82:36:5d:82:fa:20:aa: b4:c4:ab:e9:46:76:45:47:8b:5a:71:49:56:3d:4a: 24:cd:27:c9:97:7f:c3:cf:96:d2:92:e4:f0:a5:1c: 12:c0:f4:38:6f:c7:8d:e1:b0:37:77:21:49:cd:22: e7:12:4b:7b:cc:41:6f:d8:0a:3b:66:0b:40:ea:8c: 42:0f:46:25:14:63:6c:b5:b6:f8:9a:59:4b:32:6a: 72:b5:80:52:3e:9f:51:3c:09:1b:d6:b0:32:fa:aa: 96:52:0d:89:54:26:60:58:52:4b:05:94:95:27:6b: ae:81:0a:9c:05:86:77:7c:c8:fd:ae:05:39:38:c2: fe:1c:b2:84:9e:d9:dc:0e:72:06:0f:53:1d:2c:fa: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C6:FD:03:DB:38:DE:16:80:59:65:E6:7F:84:E5:F8:EF:59:01:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0d5592cf-7815-34cb-b577-fcf91a0491e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4a:f1:a4:0d:6c:38:cd:23:b2:7a:10:76:1f:9f:d1:2d:46: a1:5d:7a:bc:34:8e:2c:ec:10:de:e2:c8:a2:69:57:9c:8e:39: 5d:66:77:52:6c:09:a1:d3:89:d4:d8:25:c8:57:13:0f:5f:ae: 66:9a:b9:25:87:48:dc:68:9e:e2:02:59:4d:cb:d3:61:95:0e: a4:ca:16:4a:ba:c5:06:ce:95:dc:9a:d0:aa:31:52:90:d3:9d: 7e:15:54:2c:81:e7:84:62:23:0a:ac:c7:65:78:f3:34:79:7f: be:72:80:81:11:0d:dc:d9:0f:1d:a0:11:30:e5:c2:f2:de:e9: f3:51:d7:30:f8:6e:3d:db:ff:2d:13:2d:fc:7f:20:d5:d6:ec: 94:01:a6:f7:26:78:61:2f:fa:7e:88:a2:06:26:2f:4e:ca:86: 74:2f:22:b4:88:1e:9d:33:94:15:6b:d4:e7:ef:b1:77:bd:aa: 4a:8f:7e:73:77:49:ee:45:4b:44:c6:be:ff:99:6a:4e:39:78: ca:ca:87:32:68:81:3f:05:96:30:9d:15:c5:77:66:f5:e0:69: 04:95:40:d5:ff:a6:87:f0:e8:81:d9:46:f5:13:db:9a:be:53: 93:54:c4:b1:23:33:ed:3e:7f:41:8c:ac:0e:1a:49:9b:03:9c: 82:13:94:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsSWn9fErisevMEWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkwMzEyMTQzNVoXDTI1MTIwMjEzMTQzNVowLzEtMCsGA1UEAxMk NGRiMDE1ZDgtYjNiYS00YzYwLTgwYjgtYmM1ZDlmYTgxZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zLPTlxe+8ViVZ60heOHaRLuXrTAOxD8T5EA 71ZAXgibcnHRyuU0mL7Suxk5oq6Q3AdSDotP0lPJZZs4dT47pqICEa3LlsKVFRTu MGaP9SwHvvCbbPYmI/1DYy57AQeqZvxfJb1U5C79qSBzklZIZ4I2XYL6IKq0xKvp RnZFR4tacUlWPUokzSfJl3/Dz5bSkuTwpRwSwPQ4b8eN4bA3dyFJzSLnEkt7zEFv 2Ao7ZgtA6oxCD0YlFGNstbb4mllLMmpytYBSPp9RPAkb1rAy+qqWUg2JVCZgWFJL BZSVJ2uugQqcBYZ3fMj9rgU5OML+HLKEntncDnIGD1MdLPrKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjG/QPbON4WgFll5n+E5fjvWQE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGQ1NTkyY2YtNzgxNS0z NGNiLWI1NzctZmNmOTFhMDQ5MWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFK8aQNbDjNI7J6EHYfn9EtRqFderw0jizsEN7iyKJpV5yOOV1md1Js CaHTidTYJchXEw9frmaauSWHSNxonuICWU3L02GVDqTKFkq6xQbOldya0KoxUpDT nX4VVCyB54RiIwqsx2V48zR5f75ygIERDdzZDx2gETDlwvLe6fNR1zD4bj3b/y0T Lfx/INXW7JQBpvcmeGEv+n6IogYmL07KhnQvIrSIHp0zlBVr1OfvsXe9qkqPfnN3 Se5FS0TGvv+Zak45eMrKhzJogT8FljCdFcV3ZvXgaQSVQNX/pofw6IHZRvUT25q+ U5NUxLEjM+0+f0GMrA4aSZsDnIITlBg= -----END CERTIFICATE-----Generated at Sun Sep 7 03:53:07 2025 by rpki-client