$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa File: 3c318e52-80c2-3c11-897f-f6c9f4869930.roa (raw, json) Hash identifier: WglJNnHj+DASIPQ5DPT8t5BwefyXXe1Z28C7XSQWoQg= Subject key identifier: D0:23:F8:ED:4C:F7:47:E7:43:76:58:ED:D7:5E:5F:28:55:C9:7F:05 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F119D1CA1991D37BD1EC4B4B0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 30058 IP address blocks: 216.227.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:1c:a1:99:1d:37:bd:1e:c4:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b8d57b0e-5243-4ee6-8569-7be2800e44db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:f6:94:04:b1:1a:e6:b4:83:6f:1b:09:1b: 14:ec:b8:ad:74:64:77:b9:ad:98:10:b7:2d:74:3d: d5:7f:07:44:23:06:fd:16:08:dc:20:b7:40:7c:d3: 5e:1d:a6:5c:5d:bf:57:61:a5:ce:c7:9a:c7:52:39: 82:78:dd:85:45:77:55:e9:8f:49:b5:e2:36:ae:4c: 55:aa:7c:54:b4:5e:8c:1a:36:97:22:a4:d6:89:39: 69:95:d2:88:8c:41:6c:65:5b:32:fa:9b:46:e9:ed: 26:fd:73:04:64:b2:bc:25:a7:24:be:82:98:88:21: dc:52:06:17:b2:ad:7d:e7:0f:1d:c9:6d:83:0a:4c: e5:4c:97:d4:68:f5:cd:c6:ba:8f:93:ee:85:1f:76: 13:3b:8e:11:5c:97:f6:6f:61:c5:66:19:50:39:22: e3:45:a0:f0:0c:9d:29:ea:d9:28:9b:9c:c0:2a:52: 93:b0:de:a1:86:a6:c9:1f:d3:31:13:c7:60:32:be: ca:9b:1f:e4:a6:54:a7:fa:c0:fb:94:f6:1a:31:94: 53:65:76:59:0a:f9:2b:e7:22:c2:01:56:80:39:77: 67:13:19:d0:8a:44:f3:81:65:8b:9e:b8:60:f7:bd: 84:ab:6a:87:19:78:de:0c:dc:4c:1d:ce:5c:e8:63: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:23:F8:ED:4C:F7:47:E7:43:76:58:ED:D7:5E:5F:28:55:C9:7F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:21:4a:ca:69:d8:f0:8d:74:69:2e:0f:89:89:79:1e:19:62: eb:ca:7c:0f:a5:a8:e1:24:22:2f:76:1e:4a:25:7a:fd:94:93: 9e:e3:29:c1:9c:5a:d5:3a:2f:3a:4c:50:ce:a5:03:46:3a:c2: ab:0b:82:00:56:5e:15:12:1d:d4:33:f2:cf:7b:c3:c9:f8:b5: b7:66:b2:d5:5f:d7:36:00:ea:66:fb:89:8c:a3:26:24:52:92: 1e:ed:ec:a8:b3:97:d0:36:15:14:6d:c1:91:9f:f6:69:97:e1: 60:94:d9:d8:e6:6d:5d:d6:0a:d0:5b:3f:90:47:a3:80:5c:54: 92:20:62:13:8e:36:0c:ad:3f:7a:99:1f:c6:e8:80:e5:3a:d1: c0:a3:f6:85:63:3d:d1:5d:e2:98:ca:90:5e:85:33:88:e4:fb: 25:17:87:06:82:9f:33:2e:1f:8a:b0:3f:f0:8d:5d:48:c4:73: 5a:39:66:56:ed:6a:ab:e7:c7:8a:f4:21:4a:32:b3:78:ef:73: cd:11:a7:66:c0:0a:ac:1c:7e:01:ec:f7:24:ce:e1:08:f8:e3: dc:1e:be:41:bf:56:7f:04:2a:18:2d:4e:8e:c2:87:5b:3c:c8: 73:0a:a3:cf:61:bb:f7:92:59:70:e9:0e:5f:8a:18:b0:94:c5: 55:97:a0:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRyhmR03vR7EtLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjhkNTdiMGUtNTI0My00ZWU2LTg1NjktN2JlMjgwMGU0NGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZX2lASxGua0g28bCRsU7LitdGR3ua2YELct dD3VfwdEIwb9FgjcILdAfNNeHaZcXb9XYaXOx5rHUjmCeN2FRXdV6Y9JteI2rkxV qnxUtF6MGjaXIqTWiTlpldKIjEFsZVsy+ptG6e0m/XMEZLK8JackvoKYiCHcUgYX sq195w8dyW2DCkzlTJfUaPXNxrqPk+6FH3YTO44RXJf2b2HFZhlQOSLjRaDwDJ0p 6tkom5zAKlKTsN6hhqbJH9MxE8dgMr7Kmx/kplSn+sD7lPYaMZRTZXZZCvkr5yLC AVaAOXdnExnQikTzgWWLnrhg972Eq2qHGXjeDNxMHc5c6GO5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAj+O1M90fnQ3ZY7ddeXyhVyX8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvM2MzMThlNTItODBjMi0z YzExLTg5N2YtZjZjOWY0ODY5OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANohSspp2PCNdGkuD4mJeR4ZYuvKfA+lqOEkIi92Hkolev2Uk57jKcGc WtU6LzpMUM6lA0Y6wqsLggBWXhUSHdQz8s97w8n4tbdmstVf1zYA6mb7iYyjJiRS kh7t7Kizl9A2FRRtwZGf9mmX4WCU2djmbV3WCtBbP5BHo4BcVJIgYhOONgytP3qZ H8bogOU60cCj9oVjPdFd4pjKkF6FM4jk+yUXhwaCnzMuH4qwP/CNXUjEc1o5Zlbt aqvnx4r0IUoys3jvc80Rp2bACqwcfgHs9yTO4Qj449wevkG/Vn8EKhgtTo7Ch1s8 yHMKo89hu/eSWXDpDl+KGLCUxVWXoOM= -----END CERTIFICATE-----Generated at Mon Sep 28 22:20:49 2026 by rpki-client