$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa File: c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa (raw, json) Hash identifier: MAiiZ/+YOuRMcg3XqnU0/dr2+C7YZ1RtFfLOozjiJ08= Subject key identifier: 8D:4A:E4:56:2E:B8:AC:01:80:54:DB:FD:BF:88:F9:49:F6:AF:BD:A9 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AE5C67A51D8CF76C53ADF4280 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 174 IP address blocks: 23.237.116.0/23 maxlen: 23 2001:49f0:d0b7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:7a:51:d8:cf:76:c5:3a:df:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=75b383f8-1adc-4db6-8420-55648ad02104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:be:10:0e:a9:20:31:11:8d:1e:f1:94:e0:4e: 05:be:26:ab:97:91:b4:7f:8e:08:27:5d:6b:6c:6a: d2:10:99:79:36:e2:2c:b5:b2:1d:67:4e:c6:22:3d: 25:d0:d5:be:5d:73:6a:ec:6c:df:0d:30:f3:75:2f: cb:c3:05:61:f9:1f:af:2c:8c:a2:20:84:9e:a8:d7: 90:12:b1:59:f1:f0:22:70:2a:b0:2b:eb:96:e3:2d: 15:42:59:51:2f:4b:81:f2:7e:b6:f1:16:29:14:e3: 34:da:63:c0:d1:ca:64:3a:e2:ab:de:38:96:4e:2e: f0:77:eb:d7:69:e0:90:1d:09:f9:7c:69:7a:e2:4d: 60:5d:9e:24:97:d9:7a:ff:c9:a1:f1:cd:43:e9:d3: 82:37:8c:37:f9:6f:ea:2b:86:4d:b9:90:79:8b:b6: 45:24:f1:b4:bb:a2:89:3e:51:2b:c5:38:03:48:0a: 23:cc:42:43:3e:ec:a7:82:83:09:eb:f4:a3:b2:39: 11:20:b0:c9:f0:f2:77:08:d1:a1:17:cf:3b:d8:2e: 63:ee:5c:35:37:54:25:1f:a9:f6:60:6a:d7:06:d2: 50:b1:0f:62:1e:74:58:66:3c:d6:ec:56:6a:81:2a: ff:76:28:8f:ad:24:b5:46:98:2f:54:77:8a:4d:b9: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4A:E4:56:2E:B8:AC:01:80:54:DB:FD:BF:88:F9:49:F6:AF:BD:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.116.0/23 IPv6: 2001:49f0:d0b7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9c:eb:c1:4f:15:7a:36:0c:a5:79:b7:ef:00:07:5a:f6:34: c5:82:fa:d4:6c:75:a3:c7:f0:a9:07:21:12:8a:f3:03:65:be: 44:7b:eb:b4:ad:79:ad:98:a6:4a:48:4e:58:87:4f:75:65:16: e0:7b:74:23:8a:49:81:6e:ca:d5:6f:c4:44:ae:04:14:cd:29: 23:fc:68:77:be:24:3e:84:b1:6a:2f:ca:a8:45:41:35:49:81: b7:88:0e:df:cd:ea:c2:e3:b0:12:7b:34:33:40:57:07:bf:b1: d7:1f:3a:1a:a8:5b:81:fc:ca:84:07:d3:22:03:c5:75:17:63: 2c:1d:7f:8c:34:0d:b6:f4:75:cc:0e:e7:98:cf:cf:91:c6:77: 16:0c:5c:f2:9e:e8:1e:26:9f:30:1d:88:23:cf:6b:11:b4:ce: c1:fa:b1:60:c0:ca:0f:f4:28:fa:76:58:3f:8c:4d:38:c4:47: b0:20:71:96:14:79:65:30:a2:7a:c0:33:5e:db:ba:11:a9:89: 3f:55:1c:f5:9b:e4:62:85:83:f4:7e:3f:a8:6b:a7:a1:f9:49: 77:02:51:8c:f8:7c:eb:8a:7f:84:de:39:d3:86:d9:da:5f:e7: 6a:89:cd:1c:85:cd:8b:85:93:df:3e:66:e4:ff:9f:65:e8:f6: 0b:0b:c0:a6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErlxnpR2M92xTrfQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk NzViMzgzZjgtMWFkYy00ZGI2LTg0MjAtNTU2NDhhZDAyMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj74QDqkgMRGNHvGU4E4Fviarl5G0f44IJ11r bGrSEJl5NuIstbIdZ07GIj0l0NW+XXNq7GzfDTDzdS/LwwVh+R+vLIyiIISeqNeQ ErFZ8fAicCqwK+uW4y0VQllRL0uB8n628RYpFOM02mPA0cpkOuKr3jiWTi7wd+vX aeCQHQn5fGl64k1gXZ4kl9l6/8mh8c1D6dOCN4w3+W/qK4ZNuZB5i7ZFJPG0u6KJ PlErxTgDSAojzEJDPuyngoMJ6/SjsjkRILDJ8PJ3CNGhF8872C5j7lw1N1QlH6n2 YGrXBtJQsQ9iHnRYZjzW7FZqgSr/diiPrSS1RpgvVHeKTbleJQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFI1K5FYuuKwBgFTb/b+I+Un2r72pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzQwZmYwNGMtYmQ0YS0z YjQxLTliYzUtYmVhNjdhZTRmODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+10MA8E AgACMAkDBwAgAUnw0LcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAl5zrwU8VejYMpXm37wAHWvY0xYL61Gx1 o8fwqQchEorzA2W+RHvrtK15rZimSkhOWIdPdWUW4Ht0I4pJgW7K1W/ERK4EFM0p I/xod74kPoSxai/KqEVBNUmBt4gO383qwuOwEns0M0BXB7+x1x86GqhbgfzKhAfT IgPFdRdjLB1/jDQNtvR1zA7nmM/PkcZ3Fgxc8p7oHiafMB2II89rEbTOwfqxYMDK D/Qo+nZYP4xNOMRHsCBxlhR5ZTCiesAzXtu6EamJP1Uc9ZvkYoWD9H4/qGunoflJ dwJRjPh864p/hN4504bZ2l/naonNHIXNi4WT3z5m5P+fZej2CwvApg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:37 2025 by rpki-client