$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa File: 4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa (raw, json) Hash identifier: kdSvuQELYHA4wlLmQy92ZtSCPws7cQRlTD87wpz3LRk= Subject key identifier: 17:F7:7E:8C:2E:29:B7:11:4B:8D:00:89:19:44:F0:17:F2:70:93:17 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584DB77032B2D90FC606A434CB40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 174 IP address blocks: 23.237.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:32:b2:d9:0f:c6:06:a4:34:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=394a6be4-e213-43ad-be61-f7b770bba258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:0e:ec:a7:63:e0:e3:41:c1:3c:59:b1:8b: df:08:88:93:7a:09:af:ff:8f:1d:55:5a:a2:c2:a1: de:9a:28:39:3c:4c:58:2f:58:0f:d5:17:01:98:4c: 08:0b:30:56:46:e5:74:16:bf:bf:7f:71:d2:37:37: 05:62:68:41:9e:12:2c:c0:e1:d4:3c:b9:00:9a:c5: 5c:37:18:93:d3:ac:f4:4a:52:8a:85:c4:be:b0:61: b7:3d:b2:42:b6:5d:2d:4e:3c:33:77:cc:2a:94:f3: 24:fd:c8:bb:9e:45:dd:3c:81:22:14:09:f1:e9:c4: 8c:18:7c:33:e4:04:aa:54:c2:4b:72:91:9f:fd:c9: 29:73:ca:29:75:46:24:6f:a8:20:a0:ae:b9:6a:45: 35:bb:96:2c:93:46:c5:c4:8d:70:57:7e:3a:24:fb: 6c:38:a1:f7:76:b0:6e:71:8b:6b:16:bc:e9:71:67: 04:b7:51:5d:93:fc:a0:5c:b0:38:4d:8f:33:e1:92: d8:4a:32:72:f8:4b:e5:04:53:dd:13:99:21:53:e4: 18:30:9c:6a:30:5c:ab:78:6e:52:d7:7c:b2:57:ef: ca:50:3f:25:a0:30:c1:37:ef:2e:0d:80:f9:2b:26: cb:5e:bd:8a:15:30:16:7f:b5:c1:fe:3a:cb:6d:89: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:7E:8C:2E:29:B7:11:4B:8D:00:89:19:44:F0:17:F2:70:93:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:62:6e:5f:9e:3b:7a:db:ed:5b:39:bc:f8:f9:f7:52:ca:34: 57:19:06:32:57:d5:cf:46:90:de:76:44:33:35:95:a3:9b:9d: dc:a7:9a:b1:2a:ee:79:76:78:1d:86:5f:79:a3:41:b4:de:e1: 9b:35:be:69:5b:0c:ef:54:bd:14:c5:44:37:c9:dc:ca:47:4d: fe:00:36:fe:3a:78:cc:2c:24:9a:9c:3e:7f:77:69:1c:84:a4: ab:f7:b5:79:1c:4d:05:e4:42:83:84:cf:ff:ea:37:eb:2e:73: 50:b5:b5:6a:20:87:a2:7b:11:95:45:ea:fd:17:f5:35:39:14: 34:8a:7f:53:7b:11:cc:c8:cd:97:40:4a:0b:7b:6f:c6:af:dc: fe:08:8c:57:db:8c:6d:ec:c5:17:28:b1:6a:ad:05:10:c4:10: ac:d8:ce:e3:10:48:9c:e3:a1:73:4f:13:73:21:f9:f5:95:58: 64:2a:83:ba:52:74:48:e1:1e:97:da:54:a9:f6:7f:19:90:00: 8b:05:d1:6f:4d:15:08:c9:89:d9:32:ac:f8:26:67:28:ef:3a: c6:92:3a:0f:c5:4e:2a:26:4a:59:22:f1:69:f3:9e:4b:3d:ae: a4:76:3f:b3:df:83:e9:0b:20:63:b1:76:fd:1a:a8:d0:13:bc: 93:9a:94:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDKy2Q/GBqQ0y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk Mzk0YTZiZTQtZTIxMy00M2FkLWJlNjEtZjdiNzcwYmJhMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbkO7Kdj4ONBwTxZsYvfCIiTegmv/48dVVqi wqHemig5PExYL1gP1RcBmEwICzBWRuV0Fr+/f3HSNzcFYmhBnhIswOHUPLkAmsVc NxiT06z0SlKKhcS+sGG3PbJCtl0tTjwzd8wqlPMk/ci7nkXdPIEiFAnx6cSMGHwz 5ASqVMJLcpGf/ckpc8opdUYkb6ggoK65akU1u5Ysk0bFxI1wV346JPtsOKH3drBu cYtrFrzpcWcEt1Fdk/ygXLA4TY8z4ZLYSjJy+EvlBFPdE5khU+QYMJxqMFyreG5S 13yyV+/KUD8loDDBN+8uDYD5KybLXr2KFTAWf7XB/jrLbYmUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf3fowuKbcRS40AiRlE8BfycJMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNGVhYTkwMjAtZDg1Yy0z NzM0LTg3YjYtYjFjOTM0ZWIzNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtibl+eO3rb7Vs5vPj591LKNFcZBjJX1c9GkN52RDM1laObndynmrEq 7nl2eB2GX3mjQbTe4Zs1vmlbDO9UvRTFRDfJ3MpHTf4ANv46eMwsJJqcPn93aRyE pKv3tXkcTQXkQoOEz//qN+suc1C1tWogh6J7EZVF6v0X9TU5FDSKf1N7EczIzZdA Sgt7b8av3P4IjFfbjG3sxRcosWqtBRDEEKzYzuMQSJzjoXNPE3Mh+fWVWGQqg7pS dEjhHpfaVKn2fxmQAIsF0W9NFQjJidkyrPgmZyjvOsaSOg/FTiomSlki8Wnznks9 rqR2P7Pfg+kLIGOxdv0aqNATvJOalDk= -----END CERTIFICATE-----Generated at Tue May 12 21:23:53 2026 by rpki-client