$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa File: f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa (raw, json) Hash identifier: 1SlE5UfGyjbsX/saHL7r8VV9FhcSMX1OYTlSYUeeDY8= Subject key identifier: 77:21:B8:F8:C8:8D:46:E6:9C:08:5B:C0:77:E0:7F:0B:3F:0C:1F:82 Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F4328584D3DFF97A155F14065725D52C0 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 8987 IP address blocks: 192.16.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:97:a1:55:f1:40:65:72:5d:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=35664e43-ec2c-4f31-812e-a8af6b93b28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:36:f6:0f:63:c5:da:29:2c:74:62:87:2a: a9:4c:17:86:e9:0e:6c:f8:59:8d:c0:0d:de:72:8e: 77:a3:b9:a0:56:c1:2c:52:de:f4:c8:81:17:93:e1: 72:01:32:f5:e4:5b:4d:66:49:dc:e2:11:91:1c:83: 09:4b:4f:af:e9:d0:3c:58:6e:93:57:55:4b:f4:a7: 14:4b:55:0f:cd:f2:02:5e:bc:c1:ec:9b:85:55:70: 4b:0f:77:8c:cf:1e:56:d1:e9:5e:5d:45:13:de:20: 71:85:ef:ea:8b:83:af:57:35:ab:f1:4f:9e:f3:01: fc:5f:c6:2a:06:77:b7:cd:a6:05:35:f2:55:7f:85: 81:d4:f6:d0:33:40:bc:3c:61:49:c1:ec:53:d7:6f: 5a:22:3a:5f:a7:71:da:3b:ac:77:cd:3d:2a:a7:e9: 34:cd:92:b8:7e:86:97:25:b0:c8:fd:fe:6b:3e:be: e0:3f:f7:c7:9e:aa:0d:0b:a3:67:d8:b3:44:08:78: 0e:71:ad:54:27:67:be:da:ef:d7:6a:ca:dc:f7:4d: 72:ba:6f:bf:7b:a9:9d:cf:33:8e:bc:96:4a:00:d8: 06:ad:39:d4:ba:65:44:7f:67:ab:3c:36:20:76:01: bd:ea:16:a5:41:74:cc:b7:e8:3c:57:81:45:0a:8a: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:21:B8:F8:C8:8D:46:E6:9C:08:5B:C0:77:E0:7F:0B:3F:0C:1F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv4: 192.16.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ac:d2:83:22:96:f9:c4:d9:34:ef:85:dc:15:1d:6e:59:ba: 3f:6e:a2:33:60:46:b5:cf:38:a5:a6:07:87:08:44:9d:85:3e: e9:d4:9c:79:0e:03:7c:6b:d1:58:87:3b:8d:7e:1f:33:72:71: ea:f1:15:cb:68:74:0c:19:90:3d:d7:4e:cd:ec:10:d4:ae:2b: af:4c:75:2e:58:a8:7f:18:58:d4:bb:73:bf:b1:97:de:5e:4a: 35:2c:f1:e8:00:eb:2e:5a:56:82:47:53:c5:8a:ad:f3:6d:a3: 5c:90:5a:e6:6f:e9:65:4b:d6:6c:36:f1:55:df:da:ed:bb:9d: 7a:2f:78:16:67:52:9d:1d:3f:29:cd:01:7e:72:e3:bd:99:04: 4c:41:69:80:34:1a:76:09:b7:29:c9:7b:3b:1b:54:41:30:b0: 65:1a:ca:d4:80:48:c6:8c:d0:75:8f:84:aa:bd:09:4d:28:dd: 5f:d1:22:3f:56:f5:e6:43:20:20:a8:dd:06:35:92:59:dc:51: f8:6e:6b:e9:11:3f:37:a6:55:0a:b9:86:d3:b2:e7:e2:4d:71: aa:42:cc:3c:41:3c:81:17:75:ec:ba:c6:c2:53:39:b4:28:4e: e1:3c:8b:37:4b:83:88:a0:e2:ae:ad:26:65:75:98:bc:bd:a5: 2f:0d:e5:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5ehVfFAZXJdUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzU2NjRlNDMtZWMyYy00ZjMxLTgxMmUtYThhZjZiOTNiMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6029g9jxdopLHRihyqpTBeG6Q5s+FmNwA3e co53o7mgVsEsUt70yIEXk+FyATL15FtNZknc4hGRHIMJS0+v6dA8WG6TV1VL9KcU S1UPzfICXrzB7JuFVXBLD3eMzx5W0eleXUUT3iBxhe/qi4OvVzWr8U+e8wH8X8Yq Bne3zaYFNfJVf4WB1PbQM0C8PGFJwexT129aIjpfp3HaO6x3zT0qp+k0zZK4foaX JbDI/f5rPr7gP/fHnqoNC6Nn2LNECHgOca1UJ2e+2u/Xasrc901yum+/e6mdzzOO vJZKANgGrTnUumVEf2erPDYgdgG96halQXTMt+g8V4FFCopohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHchuPjIjUbmnAhbwHfgfws/DB+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvZjk2NTZiMmYtNmRkMC0z MTNjLWJhZWEtNGVlOTNiOGUyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2s0oMilvnE2TTvhdwVHW5Zuj9uojNgRrXPOKWmB4cIRJ2FPunUnHkO A3xr0ViHO41+HzNycerxFctodAwZkD3XTs3sENSuK69MdS5YqH8YWNS7c7+xl95e SjUs8egA6y5aVoJHU8WKrfNto1yQWuZv6WVL1mw28VXf2u27nXoveBZnUp0dPynN AX5y472ZBExBaYA0GnYJtynJezsbVEEwsGUaytSASMaM0HWPhKq9CU0o3V/RIj9W 9eZDICCo3QY1klncUfhua+kRPzemVQq5htOy5+JNcapCzDxBPIEXdey6xsJTObQo TuE8izdLg4ig4q6tJmV1mLy9pS8N5fc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:40 2026 by rpki-client