$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa File: 1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa (raw, json) Hash identifier: lXLwDQE4oqoJnkbA5a8fkMX1YxyvFI5B+yWxdov5ctw= Subject key identifier: 8A:72:FF:98:6B:32:3A:24:F7:96:E2:EA:2C:C2:FC:96:2D:44:CC:6C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F4975C1E469582700D6846F80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1239 IP address blocks: 198.16.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:c1:e4:69:58:27:00:d6:84:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33f40906-2f6b-4b9f-8d33-b8f1cb939806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:4f:89:0a:e9:2b:92:00:26:7d:aa:52:96: 61:22:71:02:14:81:73:3e:4d:1a:b2:61:48:cf:b1: 3f:15:f6:da:32:b5:a8:5a:3d:74:1c:2f:49:a4:d5: 6f:82:fe:e8:10:2c:a5:b9:02:5f:8e:56:93:44:ce: 95:e7:6b:d5:30:b9:2e:bf:8e:dd:85:22:73:cf:f8: ab:74:08:4d:42:df:bd:69:74:2b:52:2d:88:fc:5d: 05:ed:56:74:18:d6:f5:94:61:72:e9:a9:0b:ab:64: 43:af:13:71:88:36:15:53:c9:11:44:6b:53:ac:a2: 07:2d:d0:34:37:6f:44:50:1c:a9:49:0f:1f:86:a1: fa:50:1c:d8:76:fc:de:b6:f4:fd:41:3e:1b:da:5c: 1c:b1:78:bb:41:72:94:61:7e:08:c5:60:38:d8:26: f9:3d:ae:b2:f4:f2:2c:53:5a:6f:08:b5:ca:09:7f: 44:62:b6:81:fc:91:b0:e9:85:b0:d7:57:21:8f:56: cd:e3:fb:5e:43:99:9c:f1:0d:e0:91:fc:7b:ac:09: 25:fe:8d:2a:ed:34:5d:9d:79:23:e3:3a:b3:27:19: 45:81:9e:8f:aa:1e:14:08:42:d2:66:dc:c1:1f:7f: 77:8c:c8:ae:c2:b9:f7:ed:b4:bd:d7:80:9c:29:a0: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:72:FF:98:6B:32:3A:24:F7:96:E2:EA:2C:C2:FC:96:2D:44:CC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6d:22:a2:19:dc:24:9e:c5:7b:66:2b:8d:12:4b:bc:4e:e6: 28:9f:15:f6:e8:a8:e0:9a:da:de:5b:22:77:b6:d8:19:9c:64: e9:2f:ff:6f:80:1f:22:0d:59:e7:d4:73:5e:48:70:89:06:8c: 33:46:76:b0:3e:88:22:ce:7e:fb:65:9c:93:88:67:6a:16:0c: a0:18:0d:a4:89:88:3f:ad:55:02:03:9e:f4:92:c0:3a:e4:ea: b0:52:8f:d0:00:16:b4:c3:63:f6:be:eb:f1:46:05:7a:ca:51: 2b:0b:89:37:15:de:42:eb:4a:51:9d:f7:df:c8:3f:1d:bf:33: c9:30:36:eb:a2:7b:b2:79:20:7e:6c:e4:3b:bb:42:83:a9:2d: 22:27:b4:a6:45:9b:b2:f1:03:81:2e:63:b9:fa:ed:fb:b8:3f: 9e:59:b5:66:4b:d0:89:93:d9:e8:d1:5c:57:f2:48:03:d3:b6: 42:d3:a4:5c:ec:ce:3a:20:99:b7:34:05:af:8f:7c:3e:8a:80: b0:15:ff:da:76:ae:9a:fa:80:05:43:21:9f:70:ba:b1:ee:28: af:a3:0d:66:91:ce:2f:95:17:8f:ee:86:08:dc:33:5c:72:89: 3e:02:9f:fb:52:cd:e8:14:95:a4:d9:3a:3b:58:73:2c:cd:de: ff:66:aa:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdcHkaVgnANaEb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNmNDA5MDYtMmY2Yi00YjlmLThkMzMtYjhmMWNiOTM5ODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3xPiQrpK5IAJn2qUpZhInECFIFzPk0asmFI z7E/FfbaMrWoWj10HC9JpNVvgv7oECyluQJfjlaTRM6V52vVMLkuv47dhSJzz/ir dAhNQt+9aXQrUi2I/F0F7VZ0GNb1lGFy6akLq2RDrxNxiDYVU8kRRGtTrKIHLdA0 N29EUBypSQ8fhqH6UBzYdvzetvT9QT4b2lwcsXi7QXKUYX4IxWA42Cb5Pa6y9PIs U1pvCLXKCX9EYraB/JGw6YWw11chj1bN4/teQ5mc8Q3gkfx7rAkl/o0q7TRdnXkj 4zqzJxlFgZ6Pqh4UCELSZtzBH393jMiuwrn37bS914CcKaDeCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpy/5hrMjok95bi6izC/JYtRMxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWY5Yjc4YWEtYjg2Ni0z NTE3LTg4MmEtN2MwYzdhYzBiNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhtIqIZ3CSexXtmK40SS7xO5iifFfboqOCa2t5bIne22BmcZOkv/2+A HyINWefUc15IcIkGjDNGdrA+iCLOfvtlnJOIZ2oWDKAYDaSJiD+tVQIDnvSSwDrk 6rBSj9AAFrTDY/a+6/FGBXrKUSsLiTcV3kLrSlGd99/IPx2/M8kwNuuie7J5IH5s 5Du7QoOpLSIntKZFm7LxA4EuY7n67fu4P55ZtWZL0ImT2ejRXFfySAPTtkLTpFzs zjogmbc0Ba+PfD6KgLAV/9p2rpr6gAVDIZ9wurHuKK+jDWaRzi+VF4/uhgjcM1xy iT4Cn/tSzegUlaTZOjtYcyzN3v9mquc= -----END CERTIFICATE-----Generated at Sun Sep 27 09:06:01 2026 by rpki-client