$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa File: 84bd1f70-a34d-3c04-a045-12e9f7b06135.roa (raw, json) Hash identifier: jEtmhQbDFAJGqoRbtdc+3D4KiQPPQu85EN8ARoiXsfQ= Subject key identifier: 85:F9:99:80:44:18:E4:2A:B4:F4:F9:5F:76:83:3D:A4:7F:A4:49:78 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584D11726863BEAD190272009F60 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 1239 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:68:63:be:ad:19:02:72:00:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=2b7bdc29-d101-4734-98b5-c6d9da189100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:0e:13:27:72:a1:40:d5:c9:93:52:c3:05: b0:ef:e2:db:73:78:57:d0:54:88:d6:45:cc:42:dc: 0f:c0:e3:9f:9e:ad:a0:53:51:a5:92:e1:83:1e:46: 88:d1:99:04:48:8d:01:ff:57:44:a2:13:87:8d:91: 08:ab:21:13:50:90:6e:2c:8d:33:07:2f:83:66:76: 51:ca:18:90:f6:f1:e1:9e:94:5f:58:0b:22:ab:1c: 13:e7:17:ba:b5:de:45:c8:59:fd:90:e4:9a:8d:ac: bc:33:f5:98:c5:f0:a7:3b:a6:5c:ee:9c:78:c6:cb: bc:c0:e7:5d:61:d7:1b:bd:06:2f:86:2f:1b:cd:49: 87:67:19:b6:e7:72:d3:08:bb:9b:66:02:ba:59:d3: 8f:b1:84:70:96:3f:2c:ba:fb:55:10:1e:7a:58:ff: ca:30:c7:4a:7c:44:70:c8:57:f8:38:ab:2b:68:f2: 7e:a0:23:d5:fc:48:d7:2b:e2:79:bb:88:a1:a6:ff: 8b:0a:b8:98:e1:c8:59:0c:fc:be:ed:b9:46:eb:6c: 4b:95:bc:d9:8c:4a:e4:d9:47:aa:e1:d7:8d:87:9f: 47:a7:9c:e0:03:de:73:c0:e5:cb:2b:3c:0f:3a:c0: 05:8c:13:5b:5d:03:35:13:5b:7e:c4:86:a6:8e:e4: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F9:99:80:44:18:E4:2A:B4:F4:F9:5F:76:83:3D:A4:7F:A4:49:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:89:ed:b8:b1:78:18:6b:a3:db:50:21:a8:08:98:f6:39:00: 5d:cc:3e:a0:94:c0:30:0c:ff:09:3a:14:06:17:94:e6:9b:42: f6:4f:63:90:d9:e1:41:1f:66:26:18:65:3a:88:1d:ea:71:34: 12:a2:ab:70:27:0e:9b:cb:02:83:7b:35:5b:2a:ff:92:dc:57: 76:cc:11:28:d7:ac:7f:96:ce:d6:28:c5:66:93:91:f6:5f:e7: d8:9d:69:5e:92:6f:90:40:95:ad:a9:88:0a:23:85:8f:c5:f6: b5:8b:80:a7:e7:7e:f2:90:dc:a8:ff:19:79:9b:ed:54:76:e4: d8:4c:33:ec:5b:58:ce:c0:aa:6f:bb:13:f5:2c:7d:07:5f:a0: 1e:b8:24:0d:66:6f:31:a5:fb:5e:ec:37:65:dc:43:9e:ce:ab: 8c:24:16:6a:35:73:39:80:7b:bc:47:3f:12:c0:26:19:60:4d: 3a:d6:e0:d0:e2:12:23:d9:bc:3b:3f:fc:cc:4d:67:42:fa:b3: 1e:a8:51:81:31:a7:d2:55:ae:89:40:2e:f8:6e:79:f4:90:d7: 76:17:4e:b3:32:88:af:1d:0a:c2:b6:14:11:e6:ee:14:0e:10: d7:33:39:7f:5f:39:23:8f:30:61:28:cc:cd:9d:ca:0a:dd:13: 55:8e:5a:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcmhjvq0ZAnIAn2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MmI3YmRjMjktZDEwMS00NzM0LTk4YjUtYzZkOWRhMTg5MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy0OEydyoUDVyZNSwwWw7+Lbc3hX0FSI1kXM QtwPwOOfnq2gU1GlkuGDHkaI0ZkESI0B/1dEohOHjZEIqyETUJBuLI0zBy+DZnZR yhiQ9vHhnpRfWAsiqxwT5xe6td5FyFn9kOSajay8M/WYxfCnO6Zc7px4xsu8wOdd YdcbvQYvhi8bzUmHZxm253LTCLubZgK6WdOPsYRwlj8suvtVEB56WP/KMMdKfERw yFf4OKsraPJ+oCPV/EjXK+J5u4ihpv+LCriY4chZDPy+7blG62xLlbzZjErk2Ueq 4deNh59Hp5zgA95zwOXLKzwPOsAFjBNbXQM1E1t+xIamjuSOnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX5mYBEGOQqtPT5X3aDPaR/pEl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODRiZDFmNzAtYTM0ZC0z YzA0LWEwNDUtMTJlOWY3YjA2MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqJ7bixeBhro9tQIagImPY5AF3MPqCUwDAM/wk6FAYXlOabQvZPY5DZ 4UEfZiYYZTqIHepxNBKiq3AnDpvLAoN7NVsq/5LcV3bMESjXrH+WztYoxWaTkfZf 59idaV6Sb5BAla2piAojhY/F9rWLgKfnfvKQ3Kj/GXmb7VR25NhMM+xbWM7Aqm+7 E/UsfQdfoB64JA1mbzGl+17sN2XcQ57Oq4wkFmo1czmAe7xHPxLAJhlgTTrW4NDi EiPZvDs//MxNZ0L6sx6oUYExp9JVrolALvhuefSQ13YXTrMyiK8dCsK2FBHm7hQO ENczOX9fOSOPMGEozM2dygrdE1WOWmw= -----END CERTIFICATE-----Generated at Tue Mar 24 14:27:47 2026 by rpki-client