$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa File: caa9c6f8-021f-3be2-bae4-31f4834a4921.roa (raw, json) Hash identifier: aw63hrFf2MZ/upbZNu16iMxaSxuuzNbk1mpH0FuH1Og= Subject key identifier: 34:6A:BA:0C:1A:51:9A:A6:E4:2A:71:CD:3D:F7:1F:9A:DA:21:9A:BF Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584D0BDD083E89C6B165AAD52C00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 1239 IP address blocks: 198.16.70.0/23 maxlen: 23 198.16.72.0/23 maxlen: 23 198.16.76.0/23 maxlen: 23 198.16.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:08:3e:89:c6:b1:65:aa:d5:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=1f944af9-23e6-4d2b-adf0-c485565c3808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:d5:37:c2:c5:ba:b5:05:42:62:a3:59:e6: 39:5f:53:4c:2f:9e:17:96:6b:7b:19:b7:eb:b5:0c: c3:01:92:cd:de:65:a8:e3:b9:d3:8b:97:2f:bc:08: b1:80:84:f6:4b:6c:0f:65:d1:58:1e:ac:e8:a7:3c: fb:32:d4:45:52:23:62:fc:7d:40:eb:b6:51:33:69: 0d:40:e3:87:cc:66:c6:a0:ac:b6:b1:84:b9:00:7d: c8:3e:a0:ef:85:ae:bb:0e:03:fa:7b:57:3b:5a:4b: a2:6a:9a:56:94:1f:f3:f5:93:21:ac:fe:7e:cc:78: 79:9e:d3:01:da:13:d9:28:bc:76:3b:c2:1e:e8:77: ae:68:b5:40:c4:19:43:fb:f8:d5:85:fe:05:2f:49: 0b:42:1c:f8:63:8c:1f:b5:64:1b:0e:68:6c:00:ca: 10:25:71:51:30:61:91:c0:86:bb:b1:6d:53:53:9f: 94:f6:05:cc:20:a5:58:c1:56:8a:d6:13:cc:7d:a0: 58:bd:e6:ec:33:e3:58:b6:1d:a3:63:28:5b:35:7e: 07:fc:93:bd:47:5c:f9:0d:c9:0f:7a:54:bf:31:e3: de:37:4c:0b:35:17:1c:b3:dd:b4:10:3c:be:65:87: af:7f:6f:f3:e0:be:06:63:00:cb:d8:6a:72:7d:77: 72:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6A:BA:0C:1A:51:9A:A6:E4:2A:71:CD:3D:F7:1F:9A:DA:21:9A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.70.0-198.16.73.255 198.16.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:71:5e:cc:ca:76:55:b1:b0:c0:9c:fd:e3:18:7b:0e:d1:a5: f8:04:ea:7a:14:15:1d:72:b8:d2:26:84:6f:8d:4a:88:b4:5e: 4f:c3:bb:be:44:2e:b8:60:23:c9:46:30:f8:83:ea:59:d9:30: bb:c2:03:68:84:77:6e:3d:ac:47:91:46:9e:5a:d0:de:08:89: ef:2d:15:21:49:be:0a:b3:bd:f9:0f:7d:3a:8b:41:36:ad:8c: f3:2c:7b:98:66:f7:22:f5:22:14:eb:58:6f:60:94:aa:ac:30: 93:24:af:9e:d7:d3:8e:a7:c5:40:19:ff:09:99:9c:6e:2a:7d: 35:4c:1e:34:8f:20:e5:6e:e1:dd:f3:ce:ac:e7:49:24:2f:87: 8b:20:da:f0:a5:8e:2b:23:3e:04:bb:71:43:13:08:d1:90:91: c5:40:ae:8d:c3:2d:a1:a4:dc:c4:71:47:7c:c1:a6:f8:c6:6d: b0:65:76:37:36:38:cb:64:34:72:61:24:a9:4b:2e:c7:f8:ae: c0:8c:3a:33:a1:14:de:cb:bd:53:07:17:d1:f3:49:e3:ef:61: 94:99:3b:20:ab:f6:da:59:7a:0d:22:4e:4d:fc:12:bf:21:b1: 7c:12:24:fa:92:b6:f1:c6:3d:db:84:28:25:c1:0a:ec:dc:e4: aa:c7:73:52 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE0L3Qg+icaxZarVLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MWY5NDRhZjktMjNlNi00ZDJiLWFkZjAtYzQ4NTU2NWMzODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWLVN8LFurUFQmKjWeY5X1NML54Xlmt7Gbfr tQzDAZLN3mWo47nTi5cvvAixgIT2S2wPZdFYHqzopzz7MtRFUiNi/H1A67ZRM2kN QOOHzGbGoKy2sYS5AH3IPqDvha67DgP6e1c7WkuiappWlB/z9ZMhrP5+zHh5ntMB 2hPZKLx2O8Ie6HeuaLVAxBlD+/jVhf4FL0kLQhz4Y4wftWQbDmhsAMoQJXFRMGGR wIa7sW1TU5+U9gXMIKVYwVaK1hPMfaBYvebsM+NYth2jYyhbNX4H/JO9R1z5DckP elS/MePeN0wLNRccs920EDy+ZYevf2/z4L4GYwDL2GpyfXdyGwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFDRqugwaUZqm5CpxzT33H5raIZq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvY2FhOWM2ZjgtMDIxZi0z YmUyLWJhZTQtMzFmNDgzNGE0OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHGEEYD BAHGEEgDBALGEEwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAsHFezMp2VbGwwJz94xh7DtGl+ATqehQVHXK4 0iaEb41KiLReT8O7vkQuuGAjyUYw+IPqWdkwu8IDaIR3bj2sR5FGnlrQ3giJ7y0V IUm+CrO9+Q99OotBNq2M8yx7mGb3IvUiFOtYb2CUqqwwkySvntfTjqfFQBn/CZmc bip9NUweNI8g5W7h3fPOrOdJJC+HiyDa8KWOKyM+BLtxQxMI0ZCRxUCujcMtoaTc xHFHfMGm+MZtsGV2NzY4y2Q0cmEkqUsux/iuwIw6M6EU3su9UwcX0fNJ4+9hlJk7 IKv22ll6DSJOTfwSvyGxfBIk+pK28cY924QoJcEK7NzkqsdzUg== -----END CERTIFICATE-----Generated at Tue Mar 24 14:27:46 2026 by rpki-client