$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa File: 34f0b53b-80a9-3773-99d3-108f002e41f0.roa (raw, json) Hash identifier: 7/ZfQiMjKNsf9M3yFoRssopHkTdPSunU9A6clL1fkoM= Subject key identifier: 1B:B6:B3:54:07:D2:F1:B0:F2:94:08:5F:20:BE:83:4F:86:5A:A3:D6 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584D00B24EE4955163904A89E280 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 1239 IP address blocks: 198.16.100.0/23 maxlen: 23 198.16.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:4e:e4:95:51:63:90:4a:89:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=91b8e1a8-c04e-4756-a0af-a0031b3f1fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:c0:3a:1a:03:14:33:29:c2:ef:cc:3c:41: dd:47:54:56:7e:c5:50:fa:c8:cb:6c:b9:9c:77:d4: d4:87:33:11:53:7c:06:e4:bf:e3:b7:12:5c:e9:d5: 74:8e:82:94:d2:e2:e1:d5:2a:85:b7:be:0b:54:9b: a5:d7:f9:c6:f9:1b:db:8d:c4:80:88:26:84:56:e6: b8:7f:66:ff:3d:d0:66:73:00:f7:2f:dd:16:3c:5e: 4a:bd:d8:e1:fa:f4:1b:f4:f9:65:d5:1d:51:48:cd: 52:90:5f:9c:96:ba:dc:cd:f9:66:f3:2c:ac:12:34: 25:c1:da:1e:c1:69:22:41:13:b5:bd:62:8a:48:29: ad:7d:a1:0e:6b:04:6a:b0:9e:ae:76:cf:52:68:8c: c2:ae:99:0a:70:6f:68:c4:9a:22:21:5f:c7:e8:9b: f9:7f:30:0a:a7:97:22:20:29:2e:ac:d6:ac:0e:0c: 53:2d:08:76:49:e6:8d:3c:8f:de:3e:75:9b:1c:2f: c7:d0:d7:77:72:55:92:98:ab:72:43:6a:38:5c:28: 25:e9:f1:31:72:99:54:0f:12:cf:9d:47:5d:93:a9: 18:a4:ce:ca:db:8f:06:5d:0c:7d:cb:51:18:27:30: 00:bf:b5:93:0b:bf:cf:85:89:7e:23:71:89:95:3a: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B6:B3:54:07:D2:F1:B0:F2:94:08:5F:20:BE:83:4F:86:5A:A3:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.100.0/23 198.16.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0d:a5:64:d9:c7:62:98:93:d2:2d:21:22:13:91:b6:db:84: 06:25:de:fa:8f:9a:0c:17:2e:34:2e:79:37:77:d6:be:98:83: 92:32:66:fd:87:31:e6:f0:b4:d5:81:ae:f9:ef:42:ee:f1:2f: c9:85:e4:df:93:bd:e6:9a:3d:af:87:69:06:23:39:3f:01:b4: 09:b5:42:dd:38:be:b1:df:c3:ea:93:b3:11:95:17:c9:2e:e4: a3:6c:7e:2b:40:3f:ab:d8:7f:f6:9b:f4:57:1f:c3:43:10:30: 81:44:4a:86:ad:d5:99:b2:6a:fb:22:15:36:8c:cc:f2:4f:7a: 29:f3:dc:fb:98:46:9b:9d:66:5d:82:a3:9a:dd:96:5d:f1:24: 9b:83:6d:66:58:cf:30:99:e7:72:eb:b5:75:2e:29:04:ce:9e: 85:2e:77:9d:d9:a2:ef:b3:f0:1c:9b:40:00:9f:a1:6a:23:17: da:b2:a4:69:8c:f1:6e:87:0f:75:2d:0c:b2:70:5f:23:07:ff: b4:35:8a:e5:03:8d:ae:4d:c3:fb:8c:d4:d8:af:f4:c5:f7:90: a5:b8:e0:13:c8:14:f0:c8:86:c5:68:50:da:e9:61:01:34:5b: 82:de:81:0e:ac:83:ad:fd:2c:68:9f:63:4d:c1:56:b0:01:80: 5a:82:f1:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0Ask7klVFjkEqJ4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk OTFiOGUxYTgtYzA0ZS00NzU2LWEwYWYtYTAwMzFiM2YxZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCLAOhoDFDMpwu/MPEHdR1RWfsVQ+sjLbLmc d9TUhzMRU3wG5L/jtxJc6dV0joKU0uLh1SqFt74LVJul1/nG+RvbjcSAiCaEVua4 f2b/PdBmcwD3L90WPF5Kvdjh+vQb9Pll1R1RSM1SkF+clrrczflm8yysEjQlwdoe wWkiQRO1vWKKSCmtfaEOawRqsJ6uds9SaIzCrpkKcG9oxJoiIV/H6Jv5fzAKp5ci ICkurNasDgxTLQh2SeaNPI/ePnWbHC/H0Nd3clWSmKtyQ2o4XCgl6fExcplUDxLP nUddk6kYpM7K248GXQx9y1EYJzAAv7WTC7/PhYl+I3GJlTpFvQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBu2s1QH0vGw8pQIXyC+g0+GWqPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzRmMGI1M2ItODBhOS0z NzczLTk5ZDMtMTA4ZjAwMmU0MWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxhBkAwQB xhBqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHwNpWTZx2KYk9ItISITkbbbhAYl3vqPmgwXLjQueTd31r6Y g5IyZv2HMebwtNWBrvnvQu7xL8mF5N+TveaaPa+HaQYjOT8BtAm1Qt04vrHfw+qT sxGVF8ku5KNsfitAP6vYf/ab9Fcfw0MQMIFESoat1ZmyavsiFTaMzPJPeinz3PuY RpudZl2Co5rdll3xJJuDbWZYzzCZ53LrtXUuKQTOnoUud53Zou+z8BybQACfoWoj F9qypGmM8W6HD3UtDLJwXyMH/7Q1iuUDja5Nw/uM1Niv9MX3kKW44BPIFPDIhsVo UNrpYQE0W4LegQ6sg639LGifY03BVrABgFqC8Sw= -----END CERTIFICATE-----Generated at Sun Mar 1 14:52:08 2026 by rpki-client