$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dea6bbe7-4340-3c9d-9569-600e7461201e.roa File: dea6bbe7-4340-3c9d-9569-600e7461201e.roa (raw, json) Hash identifier: QnOn3pixOOf/xFZP4zrUl8Y1rZZh8wPJUoHtVZx0geo= Subject key identifier: 5C:61:9A:8B:C8:56:9F:9F:4D:57:A9:69:AF:D7:0E:E9:0D:90:CF:78 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B4FDC7E96C552D325364E2680 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dea6bbe7-4340-3c9d-9569-600e7461201e.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 30058 IP address blocks: 216.227.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7e:96:c5:52:d3:25:36:4e:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=76def36f-381c-48e7-bb76-ae90297ae9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:91:de:2e:33:00:35:ce:ad:47:d1:14:a1: cb:fe:f8:41:f1:44:23:3c:2a:d8:8c:23:74:1a:32: 5a:82:21:97:95:e7:ff:44:18:74:a7:37:40:6e:66: ad:bc:e5:dc:9c:d6:3f:9c:dc:29:84:aa:1b:4e:d7: 1a:30:bf:f8:52:55:90:72:0b:1e:df:b9:67:3d:5b: 27:d3:e3:fd:08:9e:03:26:df:39:4a:c7:19:f5:a4: 99:33:11:ed:a0:e9:5a:5c:83:46:73:d6:ee:68:56: 31:94:84:bd:f4:ff:b2:1b:90:0b:8b:ae:b1:8c:67: 63:ba:d5:29:66:52:80:a2:38:1a:dc:e1:09:c0:39: 28:fe:a1:c5:21:38:6e:d6:4e:b5:28:ff:15:79:f7: 9e:1f:c6:de:b4:57:2f:4d:6e:3b:48:d2:b7:96:8b: 8b:90:a6:4f:1a:7a:b7:4c:59:66:d6:1a:b2:8d:1b: 88:92:ac:f4:05:9b:9c:5e:e3:5f:fc:0b:7c:b2:2c: d1:05:58:01:22:1b:d9:40:94:9c:54:af:e7:76:0e: 17:85:b8:53:e2:50:11:ca:d3:14:e3:27:4c:96:1a: fd:42:17:76:fc:e3:31:37:90:7e:43:be:f9:47:22: 48:94:2a:30:f3:07:4f:1d:ee:b3:96:c0:01:7b:e6: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:61:9A:8B:C8:56:9F:9F:4D:57:A9:69:AF:D7:0E:E9:0D:90:CF:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dea6bbe7-4340-3c9d-9569-600e7461201e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f1:70:24:2d:36:07:e2:c8:c5:23:ea:31:7d:62:19:86:e5: da:b4:44:ff:83:a0:92:ea:e6:c3:24:e7:de:fe:12:9e:75:bf: 84:dc:a6:d6:58:cd:45:84:d2:51:0c:b9:d9:6a:31:2c:73:eb: e0:a5:89:10:9d:cc:4f:27:26:56:b2:50:ca:b7:46:b2:4a:c7: 5d:e1:0e:8f:a0:d7:7e:b2:53:45:49:7e:fa:38:10:6e:5b:7a: 8b:9b:df:f2:42:bc:12:c3:d6:f6:3b:ae:10:ec:fc:4b:c1:1f: 1c:86:dc:f8:ca:b5:fa:ae:c7:dc:c2:57:d6:19:8b:fd:b1:69: 8a:14:fb:eb:36:c2:6a:54:a1:6c:57:6d:a6:eb:43:9c:97:0d: f3:24:ab:42:83:06:dd:58:9b:45:2d:a2:a7:9c:b6:01:72:81: fb:80:80:06:69:b3:75:de:a9:c9:b5:98:39:e8:56:87:ff:fb: b7:c6:c5:a5:cf:7a:d1:39:70:ea:a2:fe:e3:ae:60:9a:99:66: 0c:fe:00:b7:f0:a8:d6:f0:59:51:ab:f0:7b:39:d5:f9:ef:93: da:c3:83:03:8f:c1:00:95:3a:82:59:4f:d1:25:f1:f9:77:14: 8d:9a:87:3e:1e:64:1c:01:7f:b8:cf:40:f4:d8:6f:c5:6f:6a: ca:91:62:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3H6WxVLTJTZOJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NzZkZWYzNmYtMzgxYy00OGU3LWJiNzYtYWU5MDI5N2FlOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLyR3i4zADXOrUfRFKHL/vhB8UQjPCrYjCN0 GjJagiGXlef/RBh0pzdAbmatvOXcnNY/nNwphKobTtcaML/4UlWQcgse37lnPVsn 0+P9CJ4DJt85SscZ9aSZMxHtoOlaXINGc9buaFYxlIS99P+yG5ALi66xjGdjutUp ZlKAojga3OEJwDko/qHFIThu1k61KP8VefeeH8betFcvTW47SNK3louLkKZPGnq3 TFlm1hqyjRuIkqz0BZucXuNf/At8sizRBVgBIhvZQJScVK/ndg4XhbhT4lARytMU 4ydMlhr9Qhd2/OMxN5B+Q775RyJIlCow8wdPHe6zlsABe+b24wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxhmovIVp+fTVepaa/XDukNkM94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGVhNmJiZTctNDM0MC0z YzlkLTk1NjktNjAwZTc0NjEyMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2OOuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/xcCQtNgfiyMUj6jF9YhmG5dq0RP+DoJLq5sMk597+Ep51v4TcptZY zUWE0lEMudlqMSxz6+CliRCdzE8nJlayUMq3RrJKx13hDo+g136yU0VJfvo4EG5b eoub3/JCvBLD1vY7rhDs/EvBHxyG3PjKtfqux9zCV9YZi/2xaYoU++s2wmpUoWxX babrQ5yXDfMkq0KDBt1Ym0UtoqectgFygfuAgAZps3Xeqcm1mDnoVof/+7fGxaXP etE5cOqi/uOuYJqZZgz+ALfwqNbwWVGr8Hs51fnvk9rDgwOPwQCVOoJZT9El8fl3 FI2ahz4eZBwBf7jPQPTYb8VvasqRYv8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:53:01 2025 by rpki-client