$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa File: c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa (raw, json) Hash identifier: bZE7PJx7P4AJYHStnMeBvL6xpq4CrCJJrfW8OxWEQ8I= Subject key identifier: A7:79:6A:73:2D:6C:D8:B7:D1:7F:25:3F:53:C9:39:9A:08:82:36:93 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584EA78F6F7242CD83BC25CCC580 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30058 IP address blocks: 198.16.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:6f:72:42:cd:83:bc:25:cc:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3178f099-a30a-4b32-89b0-6e7d2de21f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:fe:51:c8:0b:56:99:77:92:8b:af:3f:77: cc:d4:09:21:40:3a:9d:b1:23:e6:8d:f4:84:b9:64: 5f:4f:48:17:73:98:e4:85:87:48:8b:4f:98:23:71: ec:e6:77:75:d3:7d:99:c2:04:24:b7:73:87:45:75: 62:ad:06:dd:09:27:7a:bc:33:e3:b1:0a:cb:af:30: a9:fe:4e:ec:f0:10:1d:07:1a:9b:73:70:25:96:69: c8:1f:4d:65:6a:1f:7e:a6:9d:5c:5f:fa:39:d2:ad: 24:c1:09:f5:c4:c6:db:8f:39:f6:e9:26:22:bd:ca: 0d:50:52:82:d0:72:5f:35:1c:eb:67:ee:2b:15:c8: 59:88:88:55:0e:95:fa:f5:68:a7:2a:ff:d3:4b:05: 5c:6e:9a:2b:31:cc:44:8b:8c:46:0a:5f:b6:66:53: b4:62:ad:f7:2f:49:af:5f:f3:a2:c0:8e:94:e2:ca: 4d:13:30:3e:44:c8:03:ff:ef:fc:15:40:f1:fa:b8: 03:de:d4:88:ab:6b:57:19:4a:8f:e7:cb:b7:8a:ec: 45:b2:5e:35:ca:7f:3c:40:26:25:3d:72:34:8b:96: d5:bd:28:78:26:f8:c2:28:ae:59:10:ca:66:fd:16: 7d:8f:0f:3a:6a:9f:20:d8:68:f7:73:4b:dd:49:4c: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:79:6A:73:2D:6C:D8:B7:D1:7F:25:3F:53:C9:39:9A:08:82:36:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:52:c8:d4:ba:fa:7a:e7:50:2b:14:67:c7:ab:15:d0:a8:32: 73:f5:47:f2:6f:92:53:2e:4b:51:d7:b0:b8:02:19:98:df:c6: 90:46:a0:60:5e:d8:61:2b:15:13:bb:7d:3e:98:35:b6:2c:cc: 15:fe:e1:1d:14:ab:e8:e8:67:d5:2b:fd:c8:8a:a6:eb:79:33: 81:3a:1f:eb:46:5b:6c:13:5d:0c:bb:3f:25:6d:ed:21:8b:59: aa:11:10:07:b4:cb:6d:19:41:5a:30:44:7a:60:a5:0c:72:96: 59:c4:cb:0f:cf:fe:4c:e0:b6:d1:e3:f0:9a:72:4e:a1:f5:3c: ba:01:39:72:77:be:89:e7:d1:68:f3:e8:bc:17:ef:b8:d5:3c: 30:2b:40:c8:63:40:d3:6a:38:cb:42:27:12:e3:e4:61:cd:42: 30:40:cb:24:47:fb:59:60:15:20:74:4e:22:bc:97:ba:d7:bf: 6b:a7:2b:04:75:e1:90:91:94:50:ec:0a:14:f5:ab:30:05:f2: e7:5d:3b:b9:3f:bd:3c:64:b7:c0:c6:d5:3b:1b:84:1d:33:99: 81:2b:a1:ab:0c:a4:c8:09:6a:d5:3e:e8:48:40:0c:5d:c8:5e: 0c:ed:66:7e:e1:72:8a:30:b5:c3:a7:78:de:d1:a9:21:29:98: 50:21:1b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj29yQs2DvCXMxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzE3OGYwOTktYTMwYS00YjMyLTg5YjAtNmU3ZDJkZTIxZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIr+UcgLVpl3kouvP3fM1AkhQDqdsSPmjfSE uWRfT0gXc5jkhYdIi0+YI3Hs5nd1032ZwgQkt3OHRXVirQbdCSd6vDPjsQrLrzCp /k7s8BAdBxqbc3AllmnIH01lah9+pp1cX/o50q0kwQn1xMbbjzn26SYivcoNUFKC 0HJfNRzrZ+4rFchZiIhVDpX69WinKv/TSwVcbporMcxEi4xGCl+2ZlO0Yq33L0mv X/OiwI6U4spNEzA+RMgD/+/8FUDx+rgD3tSIq2tXGUqP58u3iuxFsl41yn88QCYl PXI0i5bVvSh4JvjCKK5ZEMpm/RZ9jw86ap8g2Gj3c0vdSUwKLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd5anMtbNi30X8lP1PJOZoIgjaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzgwYjdjYzQtYTRjNi0z MjgyLTk4YjktY2I5MTRhMDM3NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFSyNS6+nrnUCsUZ8erFdCoMnP1R/JvklMuS1HXsLgCGZjfxpBGoGBe 2GErFRO7fT6YNbYszBX+4R0Uq+joZ9Ur/ciKput5M4E6H+tGW2wTXQy7PyVt7SGL WaoREAe0y20ZQVowRHpgpQxyllnEyw/P/kzgttHj8JpyTqH1PLoBOXJ3vonn0Wjz 6LwX77jVPDArQMhjQNNqOMtCJxLj5GHNQjBAyyRH+1lgFSB0TiK8l7rXv2unKwR1 4ZCRlFDsChT1qzAF8uddO7k/vTxkt8DG1TsbhB0zmYEroasMpMgJatU+6EhADF3I XgztZn7hcoowtcOneN7RqSEpmFAhG7E= -----END CERTIFICATE-----Generated at Fri Sep 4 23:26:33 2026 by rpki-client