$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa File: e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa (raw, json) Hash identifier: qE8iTMeIx/WLKQIIAEKTUhpZUZR1jTWPiYOh2ko4NdI= Subject key identifier: 10:1F:57:E2:C3:97:24:E2:12:0F:4D:BE:BE:80:75:7B:DC:07:EF:A8 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B8D477B68F256E631FA513A20 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 1239 IP address blocks: 216.227.168.0/23 maxlen: 24 2001:49f0:d13e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7b:68:f2:56:e6:31:fa:51:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=ce409b00-79a4-414f-bf2a-4df200469fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:90:8a:d4:81:45:1f:a9:19:bf:73:a3:81: f2:e4:d6:7f:02:6f:13:46:8d:60:bf:87:38:1e:cd: 0d:e9:98:22:5e:32:14:ca:c8:5f:d2:bb:56:6e:de: 68:39:45:f4:34:fc:22:bc:6b:fe:3d:ae:7b:50:d5: 7b:45:b1:05:7b:8c:9c:84:4f:2e:ee:75:0b:3f:c5: 54:62:aa:d8:46:ed:f5:0b:1b:3a:97:ee:68:78:99: 62:e9:81:cd:a4:48:ed:41:9e:00:34:8b:6a:86:7a: 5b:b3:1a:ad:9b:7b:c3:e4:73:da:60:0c:27:23:1d: f6:7d:59:94:80:ea:fe:72:bd:b4:c6:8d:c6:be:fa: 34:c4:c1:43:d4:74:74:78:b1:70:3b:85:f0:90:b2: 3b:1c:b3:06:47:0b:47:85:c2:eb:49:fc:51:e5:ba: e9:c7:b8:29:ef:6e:d2:82:6b:f2:ef:65:ec:a2:2a: 77:c4:b2:09:f3:1a:74:02:5c:a7:a2:3a:88:f4:be: 92:a7:64:13:f2:71:7c:20:6b:dc:9a:55:41:c4:9d: 63:ab:82:56:3e:65:fc:e8:ac:0c:7b:36:ac:08:4f: b7:63:02:19:3b:95:29:7e:57:8a:68:6c:10:0b:33: c4:c7:24:73:d6:ef:0c:f9:15:2e:80:ea:61:e2:6c: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:57:E2:C3:97:24:E2:12:0F:4D:BE:BE:80:75:7B:DC:07:EF:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.168.0/23 IPv6: 2001:49f0:d13e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:25:94:ad:1f:02:ad:83:77:2f:69:5a:7a:c4:23:fc:2a:59: 9f:c7:2e:8a:47:64:be:02:6b:78:d6:5d:42:7b:e5:48:40:dd: ae:30:ca:2a:c8:03:28:df:02:18:60:44:c3:ab:77:99:a7:fa: 2b:79:df:b1:2e:d5:fb:a1:1c:d5:4b:1f:33:fa:ac:6b:b1:29: a6:c4:2b:5f:d2:dc:48:e1:ff:07:6a:01:42:e4:1e:8d:53:d6: ab:f6:80:94:0c:3c:3b:88:40:0a:7f:aa:d7:82:d3:b6:15:6e: de:a6:37:00:e5:a6:d3:48:47:6e:3e:4a:32:b5:c0:92:84:b5: fa:2d:b8:77:d1:50:c4:49:0a:a2:b4:52:86:9e:70:d8:d1:5b: 4a:ab:7f:8d:f3:28:f1:03:9c:b8:9e:45:eb:83:39:9c:06:50: 6f:8f:74:ae:f4:bb:f9:b0:c7:5f:89:a5:94:7f:da:ed:91:fe: 77:48:cf:2d:8c:1e:a8:93:2b:74:15:5d:db:a2:bb:f3:46:80: 4e:8f:c6:60:5b:12:29:c0:f6:a4:53:7b:93:73:cd:54:f0:6d: 93:f5:c0:1e:44:88:a5:7d:af:1a:92:98:d1:ff:13:17:07:2d: 7b:5f:bc:89:97:9c:91:c0:e2:cb:9d:f5:b6:fc:0b:64:31:7c: 4d:2b:3b:a6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuNR3to8lbmMfpROiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk Y2U0MDliMDAtNzlhNC00MTRmLWJmMmEtNGRmMjAwNDY5ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrOQitSBRR+pGb9zo4Hy5NZ/Am8TRo1gv4c4 Hs0N6ZgiXjIUyshf0rtWbt5oOUX0NPwivGv+Pa57UNV7RbEFe4ychE8u7nULP8VU YqrYRu31Cxs6l+5oeJli6YHNpEjtQZ4ANItqhnpbsxqtm3vD5HPaYAwnIx32fVmU gOr+cr20xo3Gvvo0xMFD1HR0eLFwO4XwkLI7HLMGRwtHhcLrSfxR5brpx7gp727S gmvy72Xsoip3xLIJ8xp0AlynojqI9L6Sp2QT8nF8IGvcmlVBxJ1jq4JWPmX86KwM ezasCE+3YwIZO5UpfleKaGwQCzPExyRz1u8M+RUugOph4mxyJQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBAfV+LDlyTiEg9Nvr6AdXvcB++oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZThjNTNkNDctOGZiYy0z MjI5LWFmMjEtYjljYWFlNTdiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB2OOoMA8E AgACMAkDBwAgAUnw0T4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATSWUrR8CrYN3L2laesQj/CpZn8cuikdk vgJreNZdQnvlSEDdrjDKKsgDKN8CGGBEw6t3maf6K3nfsS7V+6Ec1UsfM/qsa7Ep psQrX9LcSOH/B2oBQuQejVPWq/aAlAw8O4hACn+q14LTthVu3qY3AOWm00hHbj5K MrXAkoS1+i24d9FQxEkKorRShp5w2NFbSqt/jfMo8QOcuJ5F64M5nAZQb490rvS7 +bDHX4mllH/a7ZH+d0jPLYweqJMrdBVd26K780aATo/GYFsSKcD2pFN7k3PNVPBt k/XAHkSIpX2vGpKY0f8TFwcte1+8iZeckcDiy531tvwLZDF8TSs7pg== -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:58 2025 by rpki-client