$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa File: 56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa (raw, json) Hash identifier: xunsd+ardCt5a9fkAjm35Q8YRE8M8+AujS6wreTTIqc= Subject key identifier: B9:09:BB:FD:BB:39:25:07:FC:8C:83:71:46:17:84:81:4B:72:82:EB Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AE0311E74352E74DDF2295F80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 174 IP address blocks: 23.237.28.0/23 maxlen: 23 2001:49f0:d076::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:1e:74:35:2e:74:dd:f2:29:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=2fe883c7-327f-406b-98e3-dc5f818948c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:54:3d:f8:a9:32:89:d4:c6:ab:84:db:5a: 29:fd:93:75:8f:b3:96:47:ca:10:c7:c8:7f:7c:46: ad:42:b8:e2:8a:93:9b:1f:08:fa:a1:69:1a:27:f9: 1f:fd:9d:de:9a:90:91:9a:53:d9:18:49:47:3a:c7: 21:67:f5:0c:d4:60:f0:ff:e6:65:37:bf:7c:8e:fb: e4:8c:b2:55:a2:90:1b:c5:e4:33:78:50:13:13:25: 39:aa:ce:1b:54:c4:d6:10:2a:f7:ea:c0:7a:9f:69: ab:55:98:d2:f7:5d:55:79:33:94:54:b6:b8:99:9d: fc:2d:ee:58:5e:3f:17:c2:92:69:07:06:4a:df:c6: a2:88:1a:7b:17:dc:f5:3c:17:72:8c:bd:98:8e:22: 16:64:10:d7:7d:a8:2b:7f:5d:14:6a:af:99:2f:20: b3:36:1e:21:85:1d:ea:9c:c8:03:79:aa:4a:17:d3: f5:0a:e2:d4:df:f8:7e:10:07:f7:a5:09:41:3a:82: fd:1a:c6:83:80:5b:fd:ef:6c:ea:31:f2:12:59:20: ba:05:29:79:cc:65:e7:a8:e1:b1:07:8c:fa:dc:c3: 70:71:e9:ae:45:20:bb:3d:3e:a8:21:f5:09:9c:38: b5:d2:17:e2:50:35:00:a4:e3:ee:01:68:45:a8:63: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:09:BB:FD:BB:39:25:07:FC:8C:83:71:46:17:84:81:4B:72:82:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.28.0/23 IPv6: 2001:49f0:d076::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cc:66:65:ec:75:61:6f:8c:0c:c4:2b:f5:2a:82:19:12:bf: 3e:d2:0e:4a:0d:01:a7:71:8b:97:49:8b:76:c1:fd:00:96:76: 54:d8:ba:ed:0d:7c:e3:a0:a9:9f:57:1c:5d:72:56:04:37:ee: 44:7e:a4:fa:0a:31:7b:04:99:88:92:48:22:fa:d5:99:a2:a8: bc:f0:10:a3:2e:8b:31:13:f3:9b:49:36:e2:bc:38:0f:87:92: 42:17:c7:cd:44:2a:2b:ba:47:d6:5f:b2:c5:71:64:5f:1b:89: 07:3f:5e:51:f9:8e:87:af:32:ad:e3:42:8e:94:92:4e:5b:14: bc:61:70:75:bd:ac:b9:d8:d8:e5:03:dc:27:64:97:86:49:bc: 76:eb:52:d6:be:63:f9:69:3d:9c:50:3c:76:1f:2a:03:4b:69: c5:27:27:0c:aa:29:9b:a8:5e:a0:a1:a8:27:98:77:25:b2:08: 5a:f8:dd:bb:de:f9:6e:a1:57:45:b1:0d:b5:e8:67:51:62:cb: cf:7e:ba:78:a8:ba:72:35:67:a5:42:3d:65:5b:d3:d4:91:00: c5:91:75:93:33:51:e1:71:50:e0:10:2f:6b:91:2a:c2:ee:7a: 85:26:7d:b6:b6:0a:6e:b9:32:d2:ac:89:a8:99:9a:9a:ef:f6: bc:f6:ad:06 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErgMR50NS503fIpX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk MmZlODgzYzctMzI3Zi00MDZiLTk4ZTMtZGM1ZjgxODk0OGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhBUPfipMonUxquE21op/ZN1j7OWR8oQx8h/ fEatQrjiipObHwj6oWkaJ/kf/Z3empCRmlPZGElHOschZ/UM1GDw/+ZlN798jvvk jLJVopAbxeQzeFATEyU5qs4bVMTWECr36sB6n2mrVZjS911VeTOUVLa4mZ38Le5Y Xj8XwpJpBwZK38aiiBp7F9z1PBdyjL2YjiIWZBDXfagrf10Uaq+ZLyCzNh4hhR3q nMgDeapKF9P1CuLU3/h+EAf3pQlBOoL9GsaDgFv972zqMfISWSC6BSl5zGXnqOGx B4z63MNwcemuRSC7PT6oIfUJnDi10hfiUDUApOPuAWhFqGM3owIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLkJu/27OSUH/IyDcUYXhIFLcoLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNTZkMmM3ZDMtZDlhMi0z NjUwLWJiYTctN2M5ZGZhYTJkNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+0cMA8E AgACMAkDBwAgAUnw0HYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgcxmZex1YW+MDMQr9SqCGRK/PtIOSg0B p3GLl0mLdsH9AJZ2VNi67Q1846Cpn1ccXXJWBDfuRH6k+goxewSZiJJIIvrVmaKo vPAQoy6LMRPzm0k24rw4D4eSQhfHzUQqK7pH1l+yxXFkXxuJBz9eUfmOh68yreNC jpSSTlsUvGFwdb2sudjY5QPcJ2SXhkm8dutS1r5j+Wk9nFA8dh8qA0tpxScnDKop m6heoKGoJ5h3JbIIWvjdu975bqFXRbENtehnUWLLz366eKi6cjVnpUI9ZVvT1JEA xZF1kzNR4XFQ4BAva5Eqwu56hSZ9trYKbrky0qyJqJmamu/2vPatBg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:27 2025 by rpki-client