$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa File: 84bd1f70-a34d-3c04-a045-12e9f7b06135.roa (raw, json) Hash identifier: vFJAADlwXVY54q2fEBfup/q0nYIWOQ3AuJeuymY6bYU= Subject key identifier: 4E:16:31:22:00:A0:48:33:8A:ED:AF:1E:C2:72:3F:51:A7:A1:4A:C9 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F4975D47EC23D9AD464F3EDC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1239 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:d4:7e:c2:3d:9a:d4:64:f3:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=29d39e3c-6b76-4006-8dcf-5d7ef5e6e487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:7b:27:9c:3a:12:da:e1:ab:53:3e:e7:75: 4f:d2:f3:a6:59:01:e5:53:bd:5b:02:83:53:90:42: ab:db:97:5c:a1:8a:4b:df:01:e4:4f:c3:81:1a:ca: 65:3a:a2:dc:99:dc:28:c4:ed:77:5d:57:81:ea:07: 4a:90:8e:fd:81:3e:eb:68:c2:3b:d4:a6:11:94:52: b5:59:06:d9:0a:32:a6:55:d0:99:d5:be:4c:0f:5d: 51:1b:e7:a0:33:20:f8:b5:49:55:f8:b4:33:87:0f: 23:75:00:d3:8a:e5:b4:d8:39:d5:24:9e:43:3c:d4: ff:9d:29:e7:46:49:db:a2:cd:be:01:c5:cb:40:b3: c1:e7:84:94:c2:a3:11:01:e3:4a:7b:96:24:b2:ec: bf:1d:b7:76:6e:81:d8:16:f7:98:a4:17:03:53:72: a2:39:c9:55:3a:40:ba:39:7e:b9:f4:c8:81:e0:87: d4:c6:3e:5f:cc:86:cc:a0:b9:cf:ad:70:66:36:f9: 28:a6:17:ee:37:a4:bf:fe:46:67:93:33:1c:a9:e2: c5:80:c8:ba:17:cd:5d:23:9d:f9:96:a9:6c:5d:90: b0:d0:f0:69:23:f0:53:51:c6:9a:ed:90:14:9d:b6: 1d:dc:1f:e2:a3:81:e7:f7:df:eb:f5:f2:ef:6f:b4: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:16:31:22:00:A0:48:33:8A:ED:AF:1E:C2:72:3F:51:A7:A1:4A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:cf:93:fd:65:94:6b:41:4f:b3:0c:50:bb:ed:25:a0:37:2f: f6:51:d1:c7:bc:ce:03:3b:3c:4f:66:fe:ce:1c:b9:e7:47:bf: 93:17:d5:b3:59:e5:37:21:be:bc:6d:3d:1f:5c:bf:59:7d:d7: 8c:5e:3b:e2:90:3a:70:df:3c:f3:dd:33:2c:e4:02:90:e5:e3: b3:fb:8f:fa:26:ce:a0:18:13:d5:b5:4f:70:b5:a2:6f:d1:b0: 22:2c:f7:6c:89:59:d1:c9:d2:58:92:40:12:f1:75:f0:ac:36: 6b:78:c7:fb:72:96:34:9b:5e:51:ee:d9:fa:aa:cb:4b:cb:24: 89:52:12:45:7c:11:e5:1a:75:f1:5d:20:ef:a7:a7:99:46:36: e2:13:20:83:0a:61:d0:c4:3f:3e:06:ca:13:27:54:dd:dc:a7: 6c:94:56:af:72:30:96:17:ca:d2:0e:91:2f:80:8e:32:3c:d4: e8:5c:d8:82:79:b7:44:40:dd:59:fe:49:dd:45:c7:56:5a:c2: 33:1c:37:f0:cc:6e:16:01:b9:31:55:7e:3a:3d:b8:70:e0:31: bf:cc:23:94:3b:11:ba:1b:8c:69:38:12:c0:f6:d7:61:f6:ef: ce:53:a3:23:43:95:f8:80:fd:1e:0a:a8:b8:d4:8c:04:ef:c7: ed:48:e4:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JddR+wj2a1GTz7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjlkMzllM2MtNmI3Ni00MDA2LThkY2YtNWQ3ZWY1ZTZlNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo57J5w6Etrhq1M+53VP0vOmWQHlU71bAoNT kEKr25dcoYpL3wHkT8OBGsplOqLcmdwoxO13XVeB6gdKkI79gT7raMI71KYRlFK1 WQbZCjKmVdCZ1b5MD11RG+egMyD4tUlV+LQzhw8jdQDTiuW02DnVJJ5DPNT/nSnn Rknbos2+AcXLQLPB54SUwqMRAeNKe5Yksuy/Hbd2boHYFveYpBcDU3KiOclVOkC6 OX659MiB4IfUxj5fzIbMoLnPrXBmNvkophfuN6S//kZnkzMcqeLFgMi6F81dI535 lqlsXZCw0PBpI/BTUcaa7ZAUnbYd3B/io4Hn99/r9fLvb7R99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4WMSIAoEgziu2vHsJyP1GnoUrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODRiZDFmNzAtYTM0ZC0z YzA0LWEwNDUtMTJlOWY3YjA2MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjPk/1llGtBT7MMULvtJaA3L/ZR0ce8zgM7PE9m/s4cuedHv5MX1bNZ 5TchvrxtPR9cv1l914xeO+KQOnDfPPPdMyzkApDl47P7j/omzqAYE9W1T3C1om/R sCIs92yJWdHJ0liSQBLxdfCsNmt4x/tyljSbXlHu2fqqy0vLJIlSEkV8EeUadfFd IO+np5lGNuITIIMKYdDEPz4GyhMnVN3cp2yUVq9yMJYXytIOkS+AjjI81Ohc2IJ5 t0RA3Vn+Sd1Fx1ZawjMcN/DMbhYBuTFVfjo9uHDgMb/MI5Q7EbobjGk4EsD212H2 785ToyNDlfiA/R4KqLjUjATvx+1I5Bw= -----END CERTIFICATE-----Generated at Tue Sep 29 11:53:43 2026 by rpki-client