$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0d5592cf-7815-34cb-b577-fcf91a0491e9.roa File: 0d5592cf-7815-34cb-b577-fcf91a0491e9.roa (raw, json) Hash identifier: GGSNwMnZA0AbKOmg1c8rYVv43JGEeh+cSVvZAvWxcQA= Subject key identifier: 3A:D7:27:62:3F:E7:25:6E:F8:5B:B2:D4:61:19:45:7D:E3:78:1D:2F Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584E921FAE5EA7D0B882996AEC80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0d5592cf-7815-34cb-b577-fcf91a0491e9.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 30058 IP address blocks: 198.16.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ae:5e:a7:d0:b8:82:99:6a:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=ef4d76b5-c9d9-4cb8-9076-9e76e2653aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:c5:8e:31:47:7b:d8:16:c9:1d:5d:ea:33: 81:79:fa:6e:ad:35:4d:e4:3e:ea:a6:41:86:fa:63: c0:b9:78:6f:47:10:1c:16:22:bb:ab:8f:bc:6b:2e: ef:31:4d:4c:e3:f0:9f:90:4e:93:b7:89:a6:09:b2: de:ce:e2:e1:02:3a:b1:1b:47:ad:dc:7f:c3:e0:26: c5:b4:34:d4:f0:f5:18:3e:91:f1:7a:d7:26:cf:c5: af:d1:84:5e:e9:92:bd:3f:52:2b:ad:0f:6b:2d:62: 89:a9:d3:bf:d9:33:04:3b:15:03:2a:6b:8c:83:4a: 77:1c:c3:17:8a:b5:16:8d:f8:78:5b:de:5b:6b:f5: 46:e4:09:38:ca:04:c7:32:1c:ce:30:9d:9f:d6:82: 72:03:2f:9d:f6:a9:27:33:99:ef:83:e5:eb:d5:9d: cc:ea:e1:e5:0d:44:da:e8:af:41:01:1f:f1:cf:6f: 31:77:aa:62:fc:99:70:0c:9e:52:7c:e5:7c:3c:29: 08:49:31:29:99:e5:a5:e5:5b:76:a3:01:7a:75:7d: 90:a9:52:0c:b9:d5:8d:9c:df:38:bf:b0:69:6b:6a: 69:6a:2b:3b:89:5d:41:63:f3:b8:8b:01:42:6b:4d: 63:63:b3:73:9b:98:76:ca:4e:04:d8:dd:ed:f9:0b: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:27:62:3F:E7:25:6E:F8:5B:B2:D4:61:19:45:7D:E3:78:1D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0d5592cf-7815-34cb-b577-fcf91a0491e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:19:98:fc:f8:ee:69:32:6c:02:24:d7:5d:d7:0a:1a:63:2d: 18:df:44:57:d1:d3:aa:e0:33:58:a6:ba:28:89:36:c9:7b:bc: 02:be:b3:c3:9b:1d:c9:02:c9:bf:da:45:61:a4:d6:9d:10:f3: f6:f4:17:6b:e3:5b:15:79:5c:c9:42:8f:36:9d:45:01:4b:d0: 80:33:9b:f0:47:93:a6:f8:13:2e:08:8e:6c:5b:e5:76:24:ef: 2e:6a:94:99:7e:a6:a3:82:a5:9b:eb:c4:8e:67:07:1c:91:bf: 1e:64:ca:c4:cd:be:12:41:bf:7a:ec:5f:80:ca:2a:ca:37:f5: b5:07:24:64:ed:27:5a:5f:bd:65:19:f3:70:2f:68:a5:bf:9f: a7:47:77:50:89:7c:fd:98:54:50:43:38:a5:76:8a:39:21:02: cd:5c:05:89:05:99:70:e9:b9:a0:e6:48:99:c3:21:5b:95:f0: 72:32:7d:a6:ad:35:a6:0f:40:06:e5:6a:cf:5c:3b:8f:8f:0c: 94:9c:f2:b3:f0:da:13:9a:de:84:9d:67:df:16:9c:6d:62:4d: 76:04:ad:55:67:53:26:b3:e7:20:86:30:5b:11:19:54:ae:56: c0:cf:46:4a:9f:44:28:3f:6a:fb:13:2d:7d:b9:8f:c3:3a:a9: 22:df:a6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH65ep9C4gplq7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZWY0ZDc2YjUtYzlkOS00Y2I4LTkwNzYtOWU3NmUyNjUzYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8fFjjFHe9gWyR1d6jOBefpurTVN5D7qpkGG +mPAuXhvRxAcFiK7q4+8ay7vMU1M4/CfkE6Tt4mmCbLezuLhAjqxG0et3H/D4CbF tDTU8PUYPpHxetcmz8Wv0YRe6ZK9P1IrrQ9rLWKJqdO/2TMEOxUDKmuMg0p3HMMX irUWjfh4W95ba/VG5Ak4ygTHMhzOMJ2f1oJyAy+d9qknM5nvg+Xr1Z3M6uHlDUTa 6K9BAR/xz28xd6pi/JlwDJ5SfOV8PCkISTEpmeWl5Vt2owF6dX2QqVIMudWNnN84 v7Bpa2ppais7iV1BY/O4iwFCa01jY7Nzm5h2yk4E2N3t+QtzrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrXJ2I/5yVu+Fuy1GEZRX3jeB0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGQ1NTkyY2YtNzgxNS0z NGNiLWI1NzctZmNmOTFhMDQ5MWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANsZmPz47mkybAIk113XChpjLRjfRFfR06rgM1imuiiJNsl7vAK+s8Ob HckCyb/aRWGk1p0Q8/b0F2vjWxV5XMlCjzadRQFL0IAzm/BHk6b4Ey4Ijmxb5XYk 7y5qlJl+pqOCpZvrxI5nBxyRvx5kysTNvhJBv3rsX4DKKso39bUHJGTtJ1pfvWUZ 83AvaKW/n6dHd1CJfP2YVFBDOKV2ijkhAs1cBYkFmXDpuaDmSJnDIVuV8HIyfaat NaYPQAblas9cO4+PDJSc8rPw2hOa3oSdZ98WnG1iTXYErVVnUyaz5yCGMFsRGVSu VsDPRkqfRCg/avsTLX25j8M6qSLfpvU= -----END CERTIFICATE-----Generated at Tue Jul 21 13:56:32 2026 by rpki-client