$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a71fc54b-3e18-3424-b304-1078f45ff646.roa File: a71fc54b-3e18-3424-b304-1078f45ff646.roa (raw, json) Hash identifier: zI0bn8FqvlHLMbt9xJaeDYoGKckG0msGVtGrwpJCZbg= Subject key identifier: 04:5A:CC:8E:F3:94:FA:76:B3:2A:08:37:0E:C7:2F:65:BE:C3:1E:39 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B3126F333EDAF8B005B7ECF40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a71fc54b-3e18-3424-b304-1078f45ff646.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 1239 IP address blocks: 23.237.164.0/23 maxlen: 24 23.237.210.0/23 maxlen: 24 23.237.248.0/24 maxlen: 24 216.227.166.0/24 maxlen: 24 2001:49f0:d0d2::/48 maxlen: 48 2001:49f0:d0fc::/48 maxlen: 48 2001:49f0:d13c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f3:33:ed:af:8b:00:5b:7e:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=efe5f4ed-8429-4b89-adcd-4602f7e4d243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:be:d6:fd:5e:ea:10:7a:c9:fa:31:f1:d7:8a: d0:18:75:99:8d:e4:61:45:c8:82:03:b6:39:e0:19: c8:09:b7:c8:c9:b2:3f:d8:34:3b:b1:53:47:e7:0d: bf:16:b9:ce:bb:4b:08:71:28:34:d7:27:e1:f8:b9: 37:6d:3c:67:93:8c:c3:b3:82:ac:53:cc:76:06:9c: 96:a3:92:f8:16:56:7e:d4:0d:0c:57:32:3b:c8:e4: fc:ac:39:19:2a:05:9f:ba:ce:86:06:bb:d2:e8:31: 9e:3f:3b:47:1f:99:77:37:5e:37:9e:75:db:81:cc: da:c8:55:28:b5:b4:df:a3:2d:67:aa:52:72:57:5e: 9c:fe:83:20:da:a6:e5:95:82:20:4a:b3:55:9d:15: 49:41:1e:9e:58:c3:84:f7:a6:ac:9b:30:dd:95:bc: 8a:42:53:8d:1e:66:8e:0d:5a:06:d3:50:db:69:f8: c0:ff:b3:4a:bf:d3:5e:b6:c5:cd:62:64:80:51:78: b2:b1:47:65:9b:c8:73:c9:fe:83:e5:f0:ce:4a:38: 28:b3:2e:38:72:db:70:6c:b7:3c:41:55:93:c0:53: 42:91:ed:e6:c0:12:08:38:05:c6:9e:c0:f2:ec:c9: 00:e8:11:da:ed:6d:3d:a1:b8:b4:d6:07:f9:0f:ba: 9c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5A:CC:8E:F3:94:FA:76:B3:2A:08:37:0E:C7:2F:65:BE:C3:1E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a71fc54b-3e18-3424-b304-1078f45ff646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.164.0/23 23.237.210.0/23 23.237.248.0/24 216.227.166.0/24 IPv6: 2001:49f0:d0d2::/48 2001:49f0:d0fc::/48 2001:49f0:d13c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:88:25:b5:95:c2:92:42:9b:e7:1e:97:d3:69:2e:d3:31:82: 05:89:4d:f7:57:2b:b9:eb:a5:78:e0:68:38:4e:65:57:9f:c3: 72:67:d4:bb:07:64:4c:8c:8b:eb:05:78:3d:39:42:44:92:55: 37:a0:cd:dc:f5:ef:87:7e:9c:37:73:4e:f1:7e:0a:e4:a8:c3: d6:37:97:23:d0:fe:1f:aa:8d:6d:23:36:08:62:7d:8a:c3:cc: b9:27:34:53:a6:ed:f2:f6:28:03:6c:f3:47:bc:eb:74:22:b2: 97:51:e5:b0:f0:49:90:c9:25:ef:3f:f8:54:5b:f2:c1:ed:6b: d1:c4:9f:fd:c3:24:1c:f7:25:c1:04:24:b6:db:a7:3e:9b:e2: 85:59:8f:e4:26:ce:eb:70:a7:f6:3c:88:b4:3d:4f:82:a0:2f: 19:db:aa:2c:97:28:76:6a:e4:b0:04:72:97:51:fc:09:50:11: 78:2e:de:17:25:7d:05:65:3e:80:40:3d:01:d8:3b:49:80:76: f2:3f:4f:72:d9:46:e5:41:62:25:d6:bd:d9:4b:3d:48:2a:40: ee:66:ee:5d:f9:1c:98:36:33:cc:36:af:a8:5a:e9:aa:68:85: 46:3d:4c:20:1f:aa:24:a0:19:ea:da:ee:34:6d:42:e8:47:1b: b0:03:0e:c3 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEsxJvMz7a+LAFt+z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk ZWZlNWY0ZWQtODQyOS00Yjg5LWFkY2QtNDYwMmY3ZTRkMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL7W/V7qEHrJ+jHx14rQGHWZjeRhRciCA7Y5 4BnICbfIybI/2DQ7sVNH5w2/FrnOu0sIcSg01yfh+Lk3bTxnk4zDs4KsU8x2BpyW o5L4FlZ+1A0MVzI7yOT8rDkZKgWfus6GBrvS6DGePztHH5l3N143nnXbgczayFUo tbTfoy1nqlJyV16c/oMg2qbllYIgSrNVnRVJQR6eWMOE96asmzDdlbyKQlONHmaO DVoG01DbafjA/7NKv9NetsXNYmSAUXiysUdlm8hzyf6D5fDOSjgosy44cttwbLc8 QVWTwFNCke3mwBIIOAXGnsDy7MkA6BHa7W09obi01gf5D7qcPwIDAQABo4IDijCC A4YwHQYDVR0OBBYEFARazI7zlPp2syoINw7HL2W+wx45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYTcxZmM1NGItM2UxOC0z NDI0LWIzMDQtMTA3OGY0NWZmNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzAeBAIAATAYAwQBF+2kAwQB F+3SAwQAF+34AwQA2OOmMCEEAgACMBsDBwAgAUnw0NIDBwAgAUnw0PwDBwAgAUnw 0TwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAFogltZXCkkKb5x6X02ku0zGCBYlN91crueuleOBoOE5lV5/D cmfUuwdkTIyL6wV4PTlCRJJVN6DN3PXvh36cN3NO8X4K5KjD1jeXI9D+H6qNbSM2 CGJ9isPMuSc0U6bt8vYoA2zzR7zrdCKyl1HlsPBJkMkl7z/4VFvywe1r0cSf/cMk HPclwQQkttunPpvihVmP5CbO63Cn9jyItD1PgqAvGduqLJcodmrksARyl1H8CVAR eC7eFyV9BWU+gEA9Adg7SYB28j9PctlG5UFiJda92Us9SCpA7mbuXfkcmDYzzDav qFrpqmiFRj1MIB+qJKAZ6truNG1C6EcbsAMOww== -----END CERTIFICATE-----Generated at Mon Oct 20 02:26:17 2025 by rpki-client