$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa File: 02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa (raw, json) Hash identifier: DUNOPO4o55ZpTOQeYtFsdTIO03db/RZ1Mn3EGOYcB78= Subject key identifier: 60:56:4A:F5:81:CE:0C:9D:63:07:5A:3E:F7:42:5A:85:52:ED:F9:F7 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A506AF29F132F919CB26E1400 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 30058 IP address blocks: 23.237.164.0/23 maxlen: 24 23.237.210.0/23 maxlen: 24 23.237.248.0/24 maxlen: 24 216.227.166.0/24 maxlen: 24 2001:49f0:d0d2::/48 maxlen: 48 2001:49f0:d0fc::/48 maxlen: 48 2001:49f0:d13c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f2:9f:13:2f:91:9c:b2:6e:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=af3c13a5-3736-4ecd-ac7e-b3356a21d97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:20:f2:df:1d:b3:83:8f:81:67:dc:3f:4e: 9d:f3:3c:ac:26:c1:e8:46:7d:59:75:3b:95:dd:c6: 3a:5f:22:d5:a9:ca:bf:26:0f:7d:fb:87:01:27:9a: 65:c3:67:36:a2:ed:6c:a9:fc:28:7c:86:f9:f7:7f: b3:09:60:e4:51:af:ba:3b:aa:7a:0d:9b:26:ea:bc: 75:3b:17:d1:d5:91:18:ac:9e:56:bc:92:02:9b:4d: d2:b2:f0:9e:af:86:a1:a4:f4:51:d7:bc:c7:46:d0: 75:6b:3e:29:16:f0:db:ff:dc:33:c0:d0:f5:47:da: b9:eb:48:0f:7f:23:64:79:19:dd:95:1c:62:58:8d: 68:3f:9a:30:24:3c:2a:17:aa:8d:28:f2:56:05:0e: ed:df:cf:cc:4d:56:aa:71:ae:92:5f:67:f0:4c:f4: 0c:c2:fe:f2:04:bf:33:97:9a:e3:f3:75:65:07:42: 4a:dc:5f:5a:22:58:33:89:30:0d:c7:cc:bc:4e:70: 54:72:88:a0:e6:73:ca:e6:4e:c5:ac:4d:3e:db:c4: 70:56:4d:c5:48:ef:94:5b:46:91:4c:10:d3:b6:d1: 55:7b:73:12:f7:56:f4:72:d7:88:ae:0c:4b:ef:89: 8f:b4:63:6f:2d:b3:d3:27:28:c8:26:32:e2:41:4f: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:56:4A:F5:81:CE:0C:9D:63:07:5A:3E:F7:42:5A:85:52:ED:F9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.164.0/23 23.237.210.0/23 23.237.248.0/24 216.227.166.0/24 IPv6: 2001:49f0:d0d2::/48 2001:49f0:d0fc::/48 2001:49f0:d13c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:65:9e:53:20:74:7d:2f:82:1c:9d:f7:89:99:ea:b0:43:45: 5b:63:3a:7a:8e:96:a6:d1:c5:65:fe:99:b8:32:4e:9b:ce:f5: b7:03:3e:34:9c:88:c7:ad:03:1c:68:b2:1d:ef:d6:2d:54:79: ee:78:63:b6:fb:ea:bf:a2:61:79:1c:b1:0e:44:9e:0e:34:cb: 23:a8:29:bd:33:c7:46:3c:85:2a:6d:4d:b0:63:6b:29:94:e6: 46:9b:7c:3f:34:90:aa:89:31:1a:db:c9:6e:d9:8c:98:46:31: 1a:9b:e7:37:d8:d0:99:ff:91:64:9a:5c:6c:9e:70:3c:08:8f: f9:1a:e5:36:92:1c:3b:43:10:0d:e0:59:d4:17:4d:c6:09:c7: 7b:9c:d1:13:44:82:8b:cb:af:13:40:ac:6d:9f:68:af:dd:0d: 97:5d:75:5e:53:05:da:50:f4:76:88:2a:8a:63:7f:ed:c8:8f: d2:ab:df:97:0c:f3:81:8d:f7:f7:d8:48:74:ed:13:65:59:db: 62:04:bd:bf:83:95:02:d9:31:d9:9d:d9:20:cc:52:05:2b:84: e4:31:e3:89:34:be:17:e6:69:62:24:68:c1:7b:dd:13:17:80: bd:fa:9b:84:28:0a:60:b6:cc:8f:f8:97:06:81:81:e1:d7:9d: 69:a2:f9:0c -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEpQavKfEy+RnLJuFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk YWYzYzEzYTUtMzczNi00ZWNkLWFjN2UtYjMzNTZhMjFkOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/Qg8t8ds4OPgWfcP06d8zysJsHoRn1ZdTuV 3cY6XyLVqcq/Jg99+4cBJ5plw2c2ou1sqfwofIb593+zCWDkUa+6O6p6DZsm6rx1 OxfR1ZEYrJ5WvJICm03SsvCer4ahpPRR17zHRtB1az4pFvDb/9wzwND1R9q560gP fyNkeRndlRxiWI1oP5owJDwqF6qNKPJWBQ7t38/MTVaqca6SX2fwTPQMwv7yBL8z l5rj83VlB0JK3F9aIlgziTANx8y8TnBUcoig5nPK5k7FrE0+28RwVk3FSO+UW0aR TBDTttFVe3MS91b0cteIrgxL74mPtGNvLbPTJyjIJjLiQU9J9QIDAQABo4IDijCC A4YwHQYDVR0OBBYEFGBWSvWBzgydYwdaPvdCWoVS7fn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMDJjMWZlYjktNWFkMC0z NzBjLThiM2ItMzBiM2FjZWY0NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzAeBAIAATAYAwQBF+2kAwQB F+3SAwQAF+34AwQA2OOmMCEEAgACMBsDBwAgAUnw0NIDBwAgAUnw0PwDBwAgAUnw 0TwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAZmWeUyB0fS+CHJ33iZnqsENFW2M6eo6WptHFZf6ZuDJOm871 twM+NJyIx60DHGiyHe/WLVR57nhjtvvqv6JheRyxDkSeDjTLI6gpvTPHRjyFKm1N sGNrKZTmRpt8PzSQqokxGtvJbtmMmEYxGpvnN9jQmf+RZJpcbJ5wPAiP+RrlNpIc O0MQDeBZ1BdNxgnHe5zRE0SCi8uvE0CsbZ9or90Nl111XlMF2lD0dogqimN/7ciP 0qvflwzzgY3399hIdO0TZVnbYgS9v4OVAtkx2Z3ZIMxSBSuE5DHjiTS+F+ZpYiRo wXvdExeAvfqbhCgKYLbMj/iXBoGB4dedaaL5DA== -----END CERTIFICATE-----Generated at Sun Jun 29 08:05:05 2025 by rpki-client