$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa File: 70af0ead-85cc-31a4-98e8-0be232ccacd6.roa (raw, json) Hash identifier: J7vIbA71IcKYylbXiCt/A3mNaB90lHdcqqsvsvPqxcY= Subject key identifier: DD:75:BE:0C:DA:F6:39:98:AD:C5:11:62:95:C0:EB:D0:47:EB:38:23 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584ADA9BCD3056973B68BF36A580 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 1239 IP address blocks: 23.237.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cd:30:56:97:3b:68:bf:36:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=8b4d40e9-66b3-4e1d-8a15-c7379f33b7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:99:c2:de:94:63:10:ba:09:f2:e7:6b:b7: 4d:43:14:86:92:53:aa:29:63:f9:fd:cb:33:31:4c: 6b:fb:64:a7:b1:65:e3:5c:e7:b4:22:ff:a8:89:7d: 85:01:ea:b9:1e:9f:25:ec:b9:82:46:08:fa:ad:12: 33:87:2b:de:a0:9c:28:b3:ad:0e:09:36:b6:a1:85: 65:0e:d1:63:2a:99:52:f9:1e:fa:76:75:1c:ff:3d: 29:23:92:2f:bf:16:1d:6b:e8:de:ab:18:15:7d:e8: 6d:1a:3b:98:a6:19:ca:68:20:de:d0:b9:ba:15:e0: 75:95:0e:a0:7b:d2:e3:29:7e:36:c6:b0:c0:86:5a: 2d:5b:c8:bd:75:54:f3:e7:ca:86:da:59:ad:81:69: 87:f4:92:69:6c:93:5d:cb:76:86:0d:8e:ba:c1:24: 13:5d:98:0e:6b:b0:89:7a:5c:f4:04:1d:82:ce:0c: 47:0f:40:e9:bf:80:6a:6f:29:4b:ac:7d:98:aa:0a: 43:f3:fd:58:fc:dc:61:93:59:a9:7d:91:16:dc:9b: 59:41:2f:19:45:c5:07:bc:84:34:6c:27:64:de:d9: b5:9a:90:4c:27:c8:58:6d:05:50:67:a0:a3:12:7e: 7a:b2:de:a5:6e:94:9d:38:3b:07:ae:db:af:4a:c8: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:BE:0C:DA:F6:39:98:AD:C5:11:62:95:C0:EB:D0:47:EB:38:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ef:14:a0:1a:2e:43:cd:06:e2:da:67:bc:25:62:e9:74:89: e0:58:da:56:56:5b:48:05:5f:e0:2d:59:b8:4c:d7:48:48:85: a0:3c:3d:9c:d8:0a:81:16:01:8a:65:39:32:56:89:ea:f2:b9: f1:82:80:a6:05:bf:52:1c:2d:4e:db:e2:32:dc:a6:e4:98:a8: 86:0a:62:54:7d:69:7c:99:d8:0c:81:01:e0:a5:be:3b:fa:c3: 96:d6:32:01:d4:a6:9c:08:71:4c:f0:15:48:c6:5b:a3:81:4e: 16:27:18:e4:20:0c:23:bc:12:00:9f:ac:1b:83:00:c5:5f:3a: 04:ff:4f:dd:e3:2c:51:d1:bb:50:90:c1:87:54:f1:c2:cb:ef: f7:5d:60:3c:56:ff:e8:0d:c6:8a:bd:f3:db:d4:64:52:29:f7: 79:b5:fe:53:2b:8e:d5:4c:6f:b5:e8:bd:10:b7:3b:2c:ac:27: 79:8a:be:f4:d8:78:b6:f4:65:8b:8f:fe:d0:99:24:84:1e:73: 85:4f:43:6f:b5:81:4a:79:47:06:0f:1b:3b:2b:00:67:d3:58: 65:25:64:ab:81:8e:53:5b:e8:c9:43:38:29:c4:c5:7f:7e:f5: 6f:d2:a9:9b:ae:d5:3b:b8:09:41:4b:00:a5:f3:f4:f0:94:74: 50:5c:e5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram80wVpc7aL82pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk OGI0ZDQwZTktNjZiMy00ZTFkLThhMTUtYzczNzlmMzNiN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+mZwt6UYxC6CfLna7dNQxSGklOqKWP5/csz MUxr+2SnsWXjXOe0Iv+oiX2FAeq5Hp8l7LmCRgj6rRIzhyveoJwos60OCTa2oYVl DtFjKplS+R76dnUc/z0pI5IvvxYda+jeqxgVfehtGjuYphnKaCDe0Lm6FeB1lQ6g e9LjKX42xrDAhlotW8i9dVTz58qG2lmtgWmH9JJpbJNdy3aGDY66wSQTXZgOa7CJ elz0BB2CzgxHD0Dpv4BqbylLrH2YqgpD8/1Y/Nxhk1mpfZEW3JtZQS8ZRcUHvIQ0 bCdk3tm1mpBMJ8hYbQVQZ6CjEn56st6lbpSdODsHrtuvSshN9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN11vgza9jmYrcURYpXA69BH6zgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzBhZjBlYWQtODVjYy0z MWE0LTk4ZTgtMGJlMjMyY2NhY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzvFKAaLkPNBuLaZ7wlYul0ieBY2lZWW0gFX+AtWbhM10hIhaA8PZzY CoEWAYplOTJWieryufGCgKYFv1IcLU7b4jLcpuSYqIYKYlR9aXyZ2AyBAeClvjv6 w5bWMgHUppwIcUzwFUjGW6OBThYnGOQgDCO8EgCfrBuDAMVfOgT/T93jLFHRu1CQ wYdU8cLL7/ddYDxW/+gNxoq989vUZFIp93m1/lMrjtVMb7XovRC3OyysJ3mKvvTY eLb0ZYuP/tCZJIQec4VPQ2+1gUp5RwYPGzsrAGfTWGUlZKuBjlNb6MlDOCnExX9+ 9W/SqZuu1Tu4CUFLAKXz9PCUdFBc5W8= -----END CERTIFICATE-----Generated at Sat Aug 23 08:23:25 2025 by rpki-client