$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2613ade0-9477-3c2d-8ed1-005219c1d22d.roa File: 2613ade0-9477-3c2d-8ed1-005219c1d22d.roa (raw, json) Hash identifier: SMqkSU173iVIm1GZ5bMp78X3eoYW6ThSqRJn8NNCJJo= Subject key identifier: B3:D7:77:5F:A9:3C:E2:E7:70:01:74:E4:FC:63:C6:E2:D2:E4:BF:D2 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AB67FD0892F21BCDD9780EE80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2613ade0-9477-3c2d-8ed1-005219c1d22d.roa Signing time: Fri 01 Aug 2025 14:35:25 +0000 ROA not before: Fri 01 Aug 2025 14:35:25 +0000 ROA not after: Thu 30 Oct 2025 14:35:25 +0000 asID: 174 IP address blocks: 23.237.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:7f:d0:89:2f:21:bc:dd:97:80:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 1 14:35:25 2025 GMT Not After : Oct 30 14:35:25 2025 GMT Subject: CN=2692ba3a-2d8f-4b9b-a913-ac5f9f74d1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:3b:d8:e2:37:3a:75:b8:c8:d4:1f:ad:01: 21:62:a9:2e:82:8c:8a:eb:ff:ac:ec:87:8c:3d:9b: aa:9a:16:7c:1f:dc:28:4b:91:db:77:32:9b:4b:67: f0:0d:eb:50:82:f0:ef:f9:19:0f:67:c3:73:be:00: 40:de:4f:65:a8:4c:f0:43:23:8d:cb:47:31:89:0c: e1:b4:fa:be:6f:21:19:92:de:bd:c0:02:ac:30:54: 9e:64:24:53:d4:8d:18:0b:bb:86:44:98:cf:38:4b: 52:4d:3b:1b:a0:bb:70:23:2c:8a:5b:25:11:6e:ab: f0:1a:e9:66:bb:5c:c8:5c:d5:8c:14:67:bd:65:50: 81:c3:b2:db:d2:d3:61:2c:5e:03:e3:4d:ad:97:d5: 10:b8:82:62:55:58:d5:0f:00:04:f6:bc:36:8c:c2: a4:19:78:f4:10:3e:5f:cf:9b:91:f0:92:5b:89:f2: fe:ad:51:80:b3:1a:d9:5b:44:ef:3d:42:97:af:30: c7:8e:97:c8:55:78:21:b4:ca:2c:36:38:58:ae:7f: e3:fe:56:c5:9c:04:2d:5a:d1:e2:fa:6a:fa:b1:d2: 0c:33:8a:d1:d9:5d:67:c0:2a:30:52:e8:0a:d5:3a: b8:e9:df:ed:50:85:d7:7a:25:19:ca:dc:f3:74:8b: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:77:5F:A9:3C:E2:E7:70:01:74:E4:FC:63:C6:E2:D2:E4:BF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2613ade0-9477-3c2d-8ed1-005219c1d22d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ce:a6:37:24:c9:48:4c:82:66:8f:60:70:50:ea:46:e4:50: ed:af:3a:8f:14:f8:0b:e9:a0:0c:9d:54:c9:66:9b:e3:05:ea: da:fe:01:6c:1b:b0:90:02:84:c2:85:1b:c4:8b:4a:62:04:be: b7:60:89:75:ec:50:32:20:62:87:c4:e9:c4:db:91:8a:ea:7a: 09:4f:57:eb:51:2d:6c:ed:be:d1:d1:64:9d:e3:0e:d2:f1:0d: 0c:66:55:c6:b0:6d:3f:9f:cc:db:ac:2b:b6:35:7e:4e:40:80: 3d:46:3e:c8:ee:64:4d:35:92:ff:f5:05:ec:d5:cb:98:03:a3: e6:e9:4e:29:2a:fd:3f:cd:3e:9f:d9:59:04:e7:aa:28:92:e1: 49:67:4e:1c:dc:1d:c0:61:95:95:ac:6d:3a:32:c9:37:5e:3e: 9b:01:34:75:50:cd:b7:26:b5:51:c1:69:c4:84:e2:5c:b9:63: 69:1e:42:e5:40:17:8c:8d:4c:d3:73:ed:6d:9a:bb:4c:40:25: 85:15:8a:3f:02:71:60:89:03:02:b3:07:4e:7b:e2:fa:b2:39: 4a:7f:3d:f8:06:40:e1:d7:8d:07:33:a4:bf:e1:3e:10:93:22: 1d:59:23:23:93:88:56:a8:43:86:a6:19:e2:b8:72:93:79:03: 4b:6e:3d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2f9CJLyG83ZeA7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgwMTE0MzUyNVoXDTI1MTAzMDE0MzUyNVowLzEtMCsGA1UEAxMk MjY5MmJhM2EtMmQ4Zi00YjliLWE5MTMtYWM1ZjlmNzRkMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfQ72OI3OnW4yNQfrQEhYqkugoyK6/+s7IeM PZuqmhZ8H9woS5HbdzKbS2fwDetQgvDv+RkPZ8NzvgBA3k9lqEzwQyONy0cxiQzh tPq+byEZkt69wAKsMFSeZCRT1I0YC7uGRJjPOEtSTTsboLtwIyyKWyURbqvwGulm u1zIXNWMFGe9ZVCBw7Lb0tNhLF4D402tl9UQuIJiVVjVDwAE9rw2jMKkGXj0ED5f z5uR8JJbifL+rVGAsxrZW0TvPUKXrzDHjpfIVXghtMosNjhYrn/j/lbFnAQtWtHi +mr6sdIMM4rR2V1nwCowUugK1Tq46d/tUIXXeiUZytzzdItuuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPXd1+pPOLncAF05PxjxuLS5L/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMjYxM2FkZTAtOTQ3Ny0z YzJkLThlZDEtMDA1MjE5YzFkMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+0OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrOpjckyUhMgmaPYHBQ6kbkUO2vOo8U+AvpoAydVMlmm+MF6tr+AWwb sJAChMKFG8SLSmIEvrdgiXXsUDIgYofE6cTbkYrqeglPV+tRLWztvtHRZJ3jDtLx DQxmVcawbT+fzNusK7Y1fk5AgD1GPsjuZE01kv/1BezVy5gDo+bpTikq/T/NPp/Z WQTnqiiS4UlnThzcHcBhlZWsbToyyTdePpsBNHVQzbcmtVHBacSE4ly5Y2keQuVA F4yNTNNz7W2au0xAJYUVij8CcWCJAwKzB0574vqyOUp/PfgGQOHXjQczpL/hPhCT Ih1ZIyOTiFaoQ4amGeK4cpN5A0tuPbc= -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:01 2025 by rpki-client