$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa File: 8bae2104-002c-3732-af7e-f26123198ae6.roa (raw, json) Hash identifier: fvfVIZpvNUvo0lIyp6+OROrfufaOOxHTM3f7OhhlrnI= Subject key identifier: 92:DF:13:F8:1A:E2:A3:D2:47:0B:9E:FA:8E:E8:AF:BF:63:86:99:06 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AECC152EB80B3C73F9F0BD580 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 174 IP address blocks: 23.237.74.0/23 maxlen: 24 23.237.82.0/23 maxlen: 24 23.237.158.0/23 maxlen: 24 23.237.208.0/24 maxlen: 24 50.7.72.0/22 maxlen: 24 192.240.100.0/23 maxlen: 24 198.255.121.0/24 maxlen: 24 2001:49f0:d002::/48 maxlen: 48 2001:49f0:d048::/48 maxlen: 48 2001:49f0:d090::/48 maxlen: 48 2001:49f0:d0c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:52:eb:80:b3:c7:3f:9f:0b:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1152822d-13b8-4660-a4e9-ecaf9995cbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:c0:59:37:d1:07:1d:41:8b:da:42:21:9f: 18:ec:1c:4d:ee:80:05:77:97:ee:8e:dc:a6:03:48: d8:e7:5f:ff:22:2e:ed:64:47:c3:a1:2a:2c:56:2c: 80:dc:ba:94:ce:80:00:66:97:b9:3c:78:2f:25:6b: 3a:ca:97:ec:2c:db:b7:70:05:15:01:c6:de:c5:5e: 9a:ee:a7:dc:80:64:0a:db:d4:eb:9e:50:fb:63:12: 01:04:50:55:2a:f1:a3:f9:91:1d:03:b3:c8:2a:de: 23:ed:98:09:1f:89:39:70:19:b4:86:9e:c0:d5:31: e3:c5:c5:cf:89:20:16:07:b9:53:97:cf:87:dd:48: bd:95:3c:78:8d:92:2b:00:6a:c1:4f:58:d1:89:26: 1b:43:3c:a0:50:7f:e0:be:81:f9:48:c5:fa:46:4a: 29:70:37:08:3a:f1:fe:fe:d5:97:bf:28:11:a7:ee: 9d:ab:c7:06:46:0c:46:80:36:c0:78:ca:e4:25:d1: 1d:6f:96:7b:29:9e:8d:e0:fa:5c:7f:3f:bd:de:b4: 71:61:ae:99:31:54:b2:90:ab:b0:5b:9f:96:3e:07: 5f:8f:8c:14:5d:e5:f6:a9:83:0f:81:31:1c:1d:03: 47:07:ce:64:70:f1:a5:18:60:b6:75:ff:a6:59:a8: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DF:13:F8:1A:E2:A3:D2:47:0B:9E:FA:8E:E8:AF:BF:63:86:99:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.74.0/23 23.237.82.0/23 23.237.158.0/23 23.237.208.0/24 50.7.72.0/22 192.240.100.0/23 198.255.121.0/24 IPv6: 2001:49f0:d002::/48 2001:49f0:d048::/48 2001:49f0:d090::/48 2001:49f0:d0c9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:17:e9:0d:bb:2e:10:8f:d6:d9:21:f3:f3:5d:b1:03:f6:c7: 1e:10:8a:7e:0f:e0:db:83:b6:cb:27:5b:b0:18:fd:75:5b:a8: 11:07:f3:c6:1d:0f:dc:a6:59:0b:74:7e:fc:1e:58:37:9e:e9: 3a:5d:5a:cb:38:a9:f7:93:08:5b:b6:61:17:a6:95:3d:74:9d: d4:43:6b:d7:32:ee:16:17:fb:1e:62:5a:0f:84:31:72:87:2e: e0:fb:5f:63:88:2b:1c:65:34:c2:b4:4d:f2:41:ca:d5:6b:a1: e1:dd:27:10:15:62:52:66:19:09:b8:a5:92:a5:5b:a5:9b:04: 38:4d:26:dc:f1:06:d8:53:91:78:9f:a7:c9:9d:4b:04:a4:c4: fe:a8:dd:c3:02:b3:b1:53:a1:b8:d9:5e:00:16:3c:47:51:04: c8:bb:42:22:a5:85:9e:c2:1b:3f:52:fc:fc:da:37:f4:7a:b4: 41:8c:3c:7c:72:70:24:7a:9c:ab:ad:45:78:ea:69:3a:a9:6b: 59:d2:2e:9f:d4:66:cb:c5:85:25:31:ae:20:47:7b:f0:17:9c: 00:a5:7e:e3:52:b5:6b:7c:51:06:af:7c:38:78:81:83:1c:fa: e5:01:ec:4e:6d:e6:74:2a:31:e4:46:75:66:5d:60:92:33:fb: 2f:0c:27:81 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWErswVLrgLPHP58L1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTE1MjgyMmQtMTNiOC00NjYwLWE0ZTktZWNhZjk5OTVjYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng/AWTfRBx1Bi9pCIZ8Y7BxN7oAFd5fujtym A0jY51//Ii7tZEfDoSosViyA3LqUzoAAZpe5PHgvJWs6ypfsLNu3cAUVAcbexV6a 7qfcgGQK29TrnlD7YxIBBFBVKvGj+ZEdA7PIKt4j7ZgJH4k5cBm0hp7A1THjxcXP iSAWB7lTl8+H3Ui9lTx4jZIrAGrBT1jRiSYbQzygUH/gvoH5SMX6RkopcDcIOvH+ /tWXvygRp+6dq8cGRgxGgDbAeMrkJdEdb5Z7KZ6N4Ppcfz+93rRxYa6ZMVSykKuw W5+WPgdfj4wUXeX2qYMPgTEcHQNHB85kcPGlGGC2df+mWagpqwIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFJLfE/ga4qPSRwue+o7or79jhpkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOGJhZTIxMDQtMDAyYy0z NzMyLWFmN2UtZjI2MTIzMTk4YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw 0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATxfpDbsuEI/W 2SHz812xA/bHHhCKfg/g24O2yydbsBj9dVuoEQfzxh0P3KZZC3R+/B5YN57pOl1a yzip95MIW7ZhF6aVPXSd1ENr1zLuFhf7HmJaD4Qxcocu4PtfY4grHGU0wrRN8kHK 1Wuh4d0nEBViUmYZCbilkqVbpZsEOE0m3PEG2FOReJ+nyZ1LBKTE/qjdwwKzsVOh uNleABY8R1EEyLtCIqWFnsIbP1L8/No39Hq0QYw8fHJwJHqcq61FeOppOqlrWdIu n9Rmy8WFJTGuIEd78BecAKV+41K1a3xRBq98OHiBgxz65QHsTm3mdCox5EZ1Zl1g kjP7LwwngQ== -----END CERTIFICATE-----Generated at Sat Aug 23 08:15:38 2025 by rpki-client