$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa File: 36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa (raw, json) Hash identifier: 7/64IhLk6nwKhwcAR7gPeeOXqePFCWrMZRAdJL+N7d0= Subject key identifier: 16:D9:B5:0E:2A:77:EB:B1:A7:4B:67:D4:D5:8D:91:1F:F8:D1:FE:86 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A5A3079385DE5544016145000 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 174 IP address blocks: 23.237.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:79:38:5d:e5:54:40:16:14:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=324bc731-14fc-48e4-92bc-980ecea5e370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:41:d0:99:4d:61:2d:dc:8d:25:4e:3e:76:c8: 6b:83:25:3e:eb:73:27:e0:62:08:c9:78:b2:98:25: 2d:68:85:2c:55:a3:c4:f8:63:41:bc:fb:33:12:65: 6e:e0:d7:f8:89:b5:98:33:59:be:14:9e:1d:66:5a: 0d:03:ca:bc:ae:22:9d:7d:b2:96:e4:c8:bd:62:ff: ec:54:23:b9:95:a1:17:31:46:80:56:3f:26:c9:b8: a1:53:fa:1e:93:81:ff:61:5b:15:01:16:9f:74:ea: b2:25:cf:d5:95:3c:a8:6d:ed:4a:35:58:f4:e9:a9: 10:d2:ba:cd:40:a0:52:31:74:19:d4:9e:e0:17:d1: fc:21:ee:48:e8:ed:9f:33:5c:ef:7f:5d:36:9b:ee: ae:30:91:fd:3d:0f:5c:8e:7d:e1:70:3e:ef:2d:33: c2:c3:ba:88:32:46:ed:04:1b:d3:02:91:ef:17:6b: 8a:dd:c4:b2:5a:c9:a4:43:ca:8f:e8:6b:b0:98:15: 4e:f3:3e:4b:84:c4:b3:a4:cc:cb:44:3f:12:0a:49: e9:24:12:2e:1f:a9:95:27:16:ea:97:27:ee:95:13: 96:d5:f8:0a:fa:e6:b4:48:03:8c:85:aa:e1:48:54: c5:4a:7c:b4:37:83:47:8b:34:ba:d6:9e:39:95:b3: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D9:B5:0E:2A:77:EB:B1:A7:4B:67:D4:D5:8D:91:1F:F8:D1:FE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:96:e3:a6:cb:f1:29:b5:ea:d3:1d:a2:63:cd:d8:0d:27:f7: 39:b6:f0:5c:e3:f6:ce:10:50:2a:a4:44:59:41:2b:b2:f2:08: 77:81:6c:04:8c:cb:0a:42:6c:ba:54:3c:1b:78:16:1c:d6:c5: 3b:79:06:0f:46:3f:23:56:aa:23:cb:53:21:3d:6b:7a:cf:f2: 95:52:03:b4:19:1d:68:d6:2e:9c:16:c8:4e:3d:9e:27:0c:8a: d2:64:3c:1a:08:38:a2:3c:b9:1c:eb:22:e2:92:c9:9c:bb:c8: c1:40:b2:6e:f8:ed:27:26:ec:00:88:48:e2:1d:ac:b2:74:32: 92:d4:7a:c0:47:ca:2e:44:b0:ce:b1:1e:59:53:76:d0:ad:79: 4d:95:88:d3:85:99:d5:2c:b6:e3:3f:8b:08:d0:f1:9f:f1:07: 24:49:89:90:a1:b9:31:cc:d5:51:f9:35:9d:50:fd:cc:11:aa: e2:15:3d:31:53:2e:d5:1a:78:e7:0b:e9:d6:ed:94:e3:73:87: 29:05:89:9d:28:d7:1f:3a:a0:ef:54:5c:67:e0:f6:44:5a:c8: ef:a5:7e:4d:ef:6c:a8:81:a0:07:31:40:dc:39:0f:95:d8:c7: fa:94:5f:ab:20:86:d1:65:f8:b1:72:4c:09:14:00:6c:14:ab: a1:86:ec:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHk4XeVUQBYUUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk MzI0YmM3MzEtMTRmYy00OGU0LTkyYmMtOTgwZWNlYTVlMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUHQmU1hLdyNJU4+dshrgyU+63Mn4GIIyXiy mCUtaIUsVaPE+GNBvPszEmVu4Nf4ibWYM1m+FJ4dZloNA8q8riKdfbKW5Mi9Yv/s VCO5laEXMUaAVj8mybihU/oek4H/YVsVARafdOqyJc/VlTyobe1KNVj06akQ0rrN QKBSMXQZ1J7gF9H8Ie5I6O2fM1zvf102m+6uMJH9PQ9cjn3hcD7vLTPCw7qIMkbt BBvTApHvF2uK3cSyWsmkQ8qP6GuwmBVO8z5LhMSzpMzLRD8SCknpJBIuH6mVJxbq lyfulROW1fgK+ua0SAOMharhSFTFSny0N4NHizS61p45lbMsrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbZtQ4qd+uxp0tn1NWNkR/40f6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzZhOGNlMGQtMTc2My0z OTNmLThlOWQtNzBjMWJmMTc3Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeW46bL8Sm16tMdomPN2A0n9zm28Fzj9s4QUCqkRFlBK7LyCHeBbASM ywpCbLpUPBt4FhzWxTt5Bg9GPyNWqiPLUyE9a3rP8pVSA7QZHWjWLpwWyE49nicM itJkPBoIOKI8uRzrIuKSyZy7yMFAsm747Scm7ACISOIdrLJ0MpLUesBHyi5EsM6x HllTdtCteU2ViNOFmdUstuM/iwjQ8Z/xByRJiZChuTHM1VH5NZ1Q/cwRquIVPTFT LtUaeOcL6dbtlONzhykFiZ0o1x86oO9UXGfg9kRayO+lfk3vbKiBoAcxQNw5D5XY x/qUX6sghtFl+LFyTAkUAGwUq6GG7Lo= -----END CERTIFICATE-----Generated at Tue Jul 1 03:14:50 2025 by rpki-client