$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa File: f3006f6e-eb09-31d8-8265-4a9386256f5f.roa (raw, json) Hash identifier: 59AVVvPwxRnRzoqxzaOFU3zw/0C5eknEF31MIqb6rIw= Subject key identifier: 2B:B6:9D:C7:26:5C:43:61:2E:9B:EE:C9:B6:3A:3F:3E:D7:F0:47:8B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B3AEC4882BB6E7E165A4FB0C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 30058 IP address blocks: 23.237.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:48:82:bb:6e:7e:16:5a:4f:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=921df3b8-7294-4fb3-85c8-fe8185d575d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:47:0b:6b:9b:84:42:04:b3:48:27:05:f2: b0:47:1c:ba:db:15:82:91:e5:8d:3c:de:bc:19:d1: 2f:34:13:83:40:f2:34:81:a3:06:8f:7b:68:de:50: 16:8d:85:68:6c:c0:03:42:df:c3:01:4a:5a:60:9e: 54:b9:4b:b7:74:3e:b7:b0:44:f3:38:71:4f:40:e6: 61:04:1c:08:44:7e:89:62:37:00:9b:51:56:18:38: af:7e:e9:59:29:a6:9e:c5:d0:db:7c:e2:00:e7:6e: 3c:80:b3:ae:4c:07:82:29:44:de:d5:b4:77:41:4b: c9:af:b0:c2:56:1d:03:33:bd:f5:e5:c5:93:eb:1e: 07:6b:90:36:17:cb:3b:b6:87:59:d2:26:53:f3:bd: 8f:76:5f:34:7b:55:de:1d:b4:42:38:cf:47:05:c3: d6:62:e7:b5:fa:e8:f4:cf:5a:06:03:6a:de:80:03: e7:03:8e:16:0c:c9:d2:90:53:8a:7a:c5:ab:3b:2d: a8:fb:ab:29:87:82:83:dd:60:9d:31:9d:85:f4:f0: eb:b9:03:41:11:0f:d2:a8:33:d0:d8:8b:d5:40:2e: 72:09:20:f9:3b:2c:ef:8d:1c:c1:af:c1:2a:3b:65: d3:04:5b:4f:f6:a0:67:09:e8:9c:41:1c:a7:41:ef: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B6:9D:C7:26:5C:43:61:2E:9B:EE:C9:B6:3A:3F:3E:D7:F0:47:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:ea:d7:4c:a1:b1:bd:4f:b3:1f:13:48:fa:b3:84:5c:a4:ba: 98:2b:e4:ec:d8:89:62:65:15:e0:09:3b:bc:46:ef:a3:c4:3a: 23:83:2a:38:ea:af:f6:1c:db:e4:94:80:b4:4a:d7:a1:56:87: 89:88:24:23:a4:66:10:85:28:79:e8:6c:08:de:e8:e3:83:f9: 21:9b:ab:a5:4a:40:87:c5:ad:86:2c:39:2e:1f:ae:04:db:6c: bc:c2:5e:f9:51:f9:e6:f5:7f:b1:00:6d:e1:61:5a:ed:f7:30: ce:ad:6f:0f:9a:22:0a:26:c3:fd:27:da:85:b1:a0:88:5a:8d: 1f:d3:d5:2e:e8:e5:ca:7b:e9:6d:72:b1:dc:bd:d5:02:91:14: 47:38:fc:09:1e:dc:7f:0d:51:7e:3b:b5:9e:83:f0:30:5c:a5: aa:f9:31:ed:4c:11:9e:ff:2e:e2:22:dc:2b:9a:f4:1d:6d:82: 24:fe:07:68:58:71:4a:4a:9c:1c:fe:4c:be:32:95:2c:e9:e7: f0:9d:0e:83:51:87:a7:9f:09:38:82:2d:ca:a4:31:b6:f8:b2: 4e:41:87:37:e3:76:1c:e1:de:50:15:1a:fd:6b:37:b2:de:12: 3b:b9:e4:82:33:dd:93:64:cf:10:27:f4:27:36:e0:c4:33:b9: 42:65:d4:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67EiCu25+FlpPsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk OTIxZGYzYjgtNzI5NC00ZmIzLTg1YzgtZmU4MTg1ZDU3NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp9HC2ubhEIEs0gnBfKwRxy62xWCkeWNPN68 GdEvNBODQPI0gaMGj3to3lAWjYVobMADQt/DAUpaYJ5UuUu3dD63sETzOHFPQOZh BBwIRH6JYjcAm1FWGDivfulZKaaexdDbfOIA5248gLOuTAeCKUTe1bR3QUvJr7DC Vh0DM7315cWT6x4Ha5A2F8s7todZ0iZT872Pdl80e1XeHbRCOM9HBcPWYue1+uj0 z1oGA2regAPnA44WDMnSkFOKesWrOy2o+6sph4KD3WCdMZ2F9PDruQNBEQ/SqDPQ 2IvVQC5yCSD5OyzvjRzBr8EqO2XTBFtP9qBnCeicQRynQe+YTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCu2nccmXENhLpvuybY6Pz7X8EeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjMwMDZmNmUtZWIwOS0z MWQ4LTgyNjUtNGE5Mzg2MjU2ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/q10yhsb1Psx8TSPqzhFykupgr5OzYiWJlFeAJO7xG76PEOiODKjjq r/Yc2+SUgLRK16FWh4mIJCOkZhCFKHnobAje6OOD+SGbq6VKQIfFrYYsOS4frgTb bLzCXvlR+eb1f7EAbeFhWu33MM6tbw+aIgomw/0n2oWxoIhajR/T1S7o5cp76W1y sdy91QKRFEc4/Ake3H8NUX47tZ6D8DBcpar5Me1MEZ7/LuIi3Cua9B1tgiT+B2hY cUpKnBz+TL4ylSzp5/CdDoNRh6efCTiCLcqkMbb4sk5Bhzfjdhzh3lAVGv1rN7Le Eju55IIz3ZNkzxAn9Cc24MQzuUJl1NE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:49 2025 by rpki-client