$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa File: 791c2f5d-4258-3b3d-82a7-78c6a688c098.roa (raw, json) Hash identifier: lep09Htvv9P7U4yE30R8rPVYOJYW4QeZ9gvfSjK5xpk= Subject key identifier: 4C:D5:0E:D7:51:05:40:9E:44:6C:FD:FF:C7:78:9E:0C:3D:E2:41:A5 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AECC1531A21C20ABF91BB78C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30058 IP address blocks: 23.237.74.0/23 maxlen: 24 23.237.82.0/23 maxlen: 24 23.237.158.0/23 maxlen: 24 23.237.208.0/24 maxlen: 24 50.7.72.0/22 maxlen: 24 192.240.100.0/23 maxlen: 24 198.255.121.0/24 maxlen: 24 2001:49f0:d002::/48 maxlen: 48 2001:49f0:d048::/48 maxlen: 48 2001:49f0:d090::/48 maxlen: 48 2001:49f0:d0c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:53:1a:21:c2:0a:bf:91:bb:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=69ecf338-da98-4566-80d4-62c908413c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:93:b3:ed:75:16:e7:8d:e1:a5:5c:ce:e1:6c: ca:2c:8f:66:e1:58:ae:a1:ca:4f:95:7f:54:e8:8a: ab:01:b7:42:83:49:be:2a:43:1e:91:99:91:eb:87: aa:39:d2:13:8f:9b:ab:c4:b4:e5:71:11:94:e4:40: a4:d7:0a:12:3b:31:a6:89:6d:a0:8e:98:b5:66:79: e7:e7:b3:94:4f:80:7e:77:5f:3d:94:ce:3d:9d:e6: 8d:cd:97:ec:95:c5:e8:64:7c:75:35:80:7e:4d:a2: 6c:5a:0f:dc:c9:29:8c:3b:7f:0b:4d:3d:ad:61:d6: 14:c3:dd:22:55:65:35:5f:14:9d:a4:20:54:b7:8f: 89:dc:fa:74:65:16:27:6b:97:7a:1a:b1:32:6a:66: d5:c1:83:fd:c0:b7:31:76:ac:0f:a0:7b:a2:5a:90: cc:aa:09:71:38:9b:aa:32:83:fa:77:0b:5a:db:51: d5:17:23:1a:e6:b1:59:d3:53:dd:a6:d4:79:a8:bf: d0:4d:f5:4d:c1:a1:a7:b5:96:a6:b7:45:6b:df:d0: d7:1d:bb:ae:9c:89:8b:27:3d:59:c9:c4:6c:bf:3d: c9:06:20:78:cc:a6:46:a5:54:36:d5:8e:e2:c3:78: 32:74:f7:e4:a7:9d:a5:80:7f:23:25:45:31:79:1b: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D5:0E:D7:51:05:40:9E:44:6C:FD:FF:C7:78:9E:0C:3D:E2:41:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.74.0/23 23.237.82.0/23 23.237.158.0/23 23.237.208.0/24 50.7.72.0/22 192.240.100.0/23 198.255.121.0/24 IPv6: 2001:49f0:d002::/48 2001:49f0:d048::/48 2001:49f0:d090::/48 2001:49f0:d0c9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6f:8b:39:0e:83:fa:b1:ab:b6:f1:d6:73:85:2a:fb:c7:09: a6:28:57:eb:41:6a:42:1e:20:61:32:b7:9d:22:fc:07:a9:32: e4:3f:28:57:48:78:6c:07:f5:45:99:24:22:f5:f0:00:0b:51: 85:7e:5c:2e:33:e7:98:d1:e0:af:e2:05:ff:d1:db:55:3a:25: 71:f4:cc:37:14:3f:f6:8f:2e:52:40:e3:b9:5b:aa:89:87:16: 6a:d4:07:c6:13:92:0a:3e:fd:ce:e8:95:7d:b6:5c:15:23:a2: 8c:6f:85:25:95:70:12:a0:77:80:f9:18:ad:db:8e:52:ee:12: 14:01:74:bd:78:e6:1e:eb:06:56:2b:b0:f5:77:db:a4:17:9e: 46:85:54:52:b4:10:b5:77:8c:11:32:01:c7:50:b3:39:32:78: c6:26:df:9d:9b:76:f5:dc:65:68:56:74:f4:a8:77:a0:f0:3d: 5b:8d:cc:fa:3c:2a:11:47:bd:fc:ca:25:c9:bf:c6:8a:21:8f: fb:b8:de:ac:09:34:ac:0d:f5:1e:73:48:57:c7:40:88:a8:0d: 79:da:67:d2:b1:48:c2:59:0a:ff:a8:a2:3c:e0:1c:fd:7d:78: fc:a6:c9:ff:f8:b0:87:15:56:7e:92:11:9d:52:57:d4:cc:fb: d1:92:72:76 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWErswVMaIcIKv5G7eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjllY2YzMzgtZGE5OC00NTY2LTgwZDQtNjJjOTA4NDEzYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85Oz7XUW543hpVzO4WzKLI9m4ViuocpPlX9U 6IqrAbdCg0m+KkMekZmR64eqOdITj5urxLTlcRGU5ECk1woSOzGmiW2gjpi1Znnn 57OUT4B+d189lM49neaNzZfslcXoZHx1NYB+TaJsWg/cySmMO38LTT2tYdYUw90i VWU1XxSdpCBUt4+J3Pp0ZRYna5d6GrEyambVwYP9wLcxdqwPoHuiWpDMqglxOJuq MoP6dwta21HVFyMa5rFZ01PdptR5qL/QTfVNwaGntZamt0Vr39DXHbuunImLJz1Z ycRsvz3JBiB4zKZGpVQ21Y7iw3gydPfkp52lgH8jJUUxeRt7ywIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFEzVDtdRBUCeRGz9/8d4ngw94kGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzkxYzJmNWQtNDI1OC0z YjNkLTgyYTctNzhjNmE2ODhjMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw 0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATW+LOQ6D+rGr tvHWc4Uq+8cJpihX60FqQh4gYTK3nSL8B6ky5D8oV0h4bAf1RZkkIvXwAAtRhX5c LjPnmNHgr+IF/9HbVTolcfTMNxQ/9o8uUkDjuVuqiYcWatQHxhOSCj79zuiVfbZc FSOijG+FJZVwEqB3gPkYrduOUu4SFAF0vXjmHusGViuw9XfbpBeeRoVUUrQQtXeM ETIBx1CzOTJ4xibfnZt29dxlaFZ09Kh3oPA9W43M+jwqEUe9/Molyb/GiiGP+7je rAk0rA31HnNIV8dAiKgNedpn0rFIwlkK/6iiPOAc/X14/KbJ//iwhxVWfpIRnVJX 1Mz70ZJydg== -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:47 2025 by rpki-client