$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa File: 84bd1f70-a34d-3c04-a045-12e9f7b06135.roa (raw, json) Hash identifier: lcTRtmZidP8jyJ+7fw9PhCuRBrAxtwHrxGKMuOs3ou4= Subject key identifier: B5:C3:00:1B:40:A2:C3:F6:5E:40:F0:BD:C7:E2:E3:F4:E8:2F:A1:DD Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5141BF7375BE45F88F60FF80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 1239 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bf:73:75:be:45:f8:8f:60:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=9ce6e0b4-6421-4c82-86e7-f5da8a92b84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:14:4e:a4:f9:cf:3f:4a:62:96:6b:78:61: f3:87:5f:ad:2b:1c:f3:52:b5:3b:1b:13:2c:99:3a: 3e:da:b0:c2:01:13:f9:2d:5b:52:4e:1a:91:ca:a7: a7:5f:a4:f0:2f:68:9f:26:53:fb:0c:fe:62:e0:d8: 7b:21:7c:41:1c:99:d5:7a:75:66:bd:8a:59:0d:29: 2e:d3:ba:99:fd:ec:f6:ee:3e:70:13:0b:d6:0c:7e: f5:5c:c7:91:5e:f5:51:16:38:c5:62:0f:b5:11:83: 63:31:e7:08:c3:2f:2a:38:28:dc:59:85:45:93:32: cf:a6:14:56:13:41:2c:10:6d:05:56:d8:ef:08:74: 40:98:35:26:da:f3:3a:06:25:a9:19:08:a8:d6:ae: 13:be:27:ff:c3:65:b0:e6:a6:ca:bf:4b:e5:42:a5: 1f:b7:82:7c:5a:e9:46:f7:51:47:cc:ac:2d:0b:8f: da:b6:56:08:8e:fe:cd:eb:8a:33:74:78:38:81:0c: 39:21:8e:b4:21:0c:85:27:9c:53:be:66:3e:ab:e0: 38:97:b5:a1:0d:bd:80:55:e0:03:71:b3:a7:b8:0f: c6:80:51:bf:14:67:e8:fa:95:a5:0e:6f:90:a1:1b: 39:89:e0:86:b9:93:64:43:a9:bd:a3:7d:98:77:d6: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C3:00:1B:40:A2:C3:F6:5E:40:F0:BD:C7:E2:E3:F4:E8:2F:A1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:74:73:9d:39:f8:10:c3:41:ba:c9:ff:08:59:92:15:4d:79: 2d:fc:fb:52:15:17:d2:38:bf:67:4b:8d:cf:ea:b2:b3:38:5c: a6:8d:ef:81:a6:3a:91:cc:53:95:74:98:3f:1b:25:f7:e5:15: 87:47:96:fe:fe:47:f2:5d:17:d5:d4:b4:99:ab:6a:cd:6c:28: 17:cf:29:d7:a0:4a:3d:1a:61:c9:75:8b:9a:29:ec:e2:c7:5f: 8e:9c:5c:c4:4b:fe:3c:48:79:aa:7b:96:b2:6d:74:65:34:e6: 4c:45:d8:c6:5b:c0:bd:2a:41:46:be:56:c4:a2:a4:e8:72:ef: 80:f3:15:4b:67:26:a6:78:85:c2:ad:ab:91:e0:84:14:23:27: 96:61:89:6f:c2:20:a1:7b:25:5b:e3:05:48:c0:b0:fd:b9:58: 1d:b2:75:a6:cf:c2:05:36:d7:75:46:a9:47:e5:98:d3:00:e2: f8:44:06:bb:90:5e:23:b8:0a:d5:ab:73:21:e4:20:11:7d:0c: 5c:0a:d1:21:1d:89:28:05:3a:2f:8d:ae:b9:ea:99:b4:e8:c6: cb:e5:4f:88:94:3a:1d:a6:6e:d0:46:11:33:82:c5:7f:a1:4d: 6e:80:e5:03:6b:50:6e:33:f5:31:9e:6b:a3:13:91:f1:1e:c4: d6:4c:69:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQb9zdb5F+I9g/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk OWNlNmUwYjQtNjQyMS00YzgyLTg2ZTctZjVkYThhOTJiODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/QUTqT5zz9KYpZreGHzh1+tKxzzUrU7GxMs mTo+2rDCARP5LVtSThqRyqenX6TwL2ifJlP7DP5i4Nh7IXxBHJnVenVmvYpZDSku 07qZ/ez27j5wEwvWDH71XMeRXvVRFjjFYg+1EYNjMecIwy8qOCjcWYVFkzLPphRW E0EsEG0FVtjvCHRAmDUm2vM6BiWpGQio1q4Tvif/w2Ww5qbKv0vlQqUft4J8WulG 91FHzKwtC4/atlYIjv7N64ozdHg4gQw5IY60IQyFJ5xTvmY+q+A4l7WhDb2AVeAD cbOnuA/GgFG/FGfo+pWlDm+QoRs5ieCGuZNkQ6m9o32Yd9ZjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXDABtAosP2XkDwvcfi4/ToL6HdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODRiZDFmNzAtYTM0ZC0z YzA0LWEwNDUtMTJlOWY3YjA2MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANl0c505+BDDQbrJ/whZkhVNeS38+1IVF9I4v2dLjc/qsrM4XKaN74Gm OpHMU5V0mD8bJfflFYdHlv7+R/JdF9XUtJmras1sKBfPKdegSj0aYcl1i5op7OLH X46cXMRL/jxIeap7lrJtdGU05kxF2MZbwL0qQUa+VsSipOhy74DzFUtnJqZ4hcKt q5HghBQjJ5ZhiW/CIKF7JVvjBUjAsP25WB2ydabPwgU213VGqUflmNMA4vhEBruQ XiO4CtWrcyHkIBF9DFwK0SEdiSgFOi+NrrnqmbToxsvlT4iUOh2mbtBGETOCxX+h TW6A5QNrUG4z9TGea6MTkfEexNZMaXk= -----END CERTIFICATE-----Generated at Fri Oct 24 08:38:44 2025 by rpki-client