$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa File: 739ab26e-0527-3580-881d-8e557b779203.roa (raw, json) Hash identifier: inhh7N/42mcL3P5qR11qWBDbDD5+FXhjYW50yUuM6B4= Subject key identifier: B5:65:83:39:32:09:C2:60:ED:AF:F3:94:B7:67:32:5F:FE:20:53:60 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BBE403A551AB547C1C0974B00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 174 IP address blocks: 23.237.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3a:55:1a:b5:47:c1:c0:97:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d810a9a9-2adc-4077-9051-819d335a8e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:83:bc:93:af:7f:c5:a0:32:4e:47:b9:68: c4:89:a4:1b:be:19:84:60:5a:cf:00:dc:b2:d5:56: e9:e7:b3:ef:f7:44:04:7a:35:b8:e9:0d:01:55:2c: d8:65:62:66:b3:54:c8:4c:ae:68:53:9d:e2:98:b3: 07:7d:4d:5c:a0:e6:ce:27:3e:57:33:f7:c3:5a:25: ed:98:af:81:32:c8:d4:c5:94:9a:d2:c0:c6:1c:0f: 0d:54:4e:3d:99:ba:c4:d3:88:d3:e6:81:c9:d6:8a: 89:f8:39:b5:41:98:c5:89:d5:6e:0b:4a:a5:56:5b: 89:e5:3e:ff:cb:84:35:f1:52:b2:55:09:20:e5:53: b7:e3:41:c2:8c:ac:8f:fc:47:f0:9b:a6:0e:ad:08: 44:80:be:2e:ec:07:55:eb:1d:a6:07:41:09:fe:cc: a9:f5:76:70:63:a4:a5:3d:fe:76:32:b2:2f:8e:90: ae:ad:14:15:48:ff:46:52:83:87:50:ef:0a:e6:3c: 82:69:a1:81:ff:e0:98:7f:c0:15:9d:25:db:75:8e: de:15:fa:74:7f:a5:c1:de:9d:8a:64:39:f9:f0:53: 33:0a:df:b3:a2:7b:1f:c4:2a:42:55:cb:31:26:6e: c3:3b:9f:af:26:bb:c3:e8:a0:f3:f0:58:52:ae:08: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:65:83:39:32:09:C2:60:ED:AF:F3:94:B7:67:32:5F:FE:20:53:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5a:2d:50:3a:9b:fc:2c:6e:a3:0d:eb:48:66:41:83:95:97: 5a:c8:bd:b1:46:48:2a:04:49:85:a5:53:7c:76:35:20:ac:02: 30:11:a2:eb:3b:74:9c:95:35:bd:0d:0f:9a:45:84:18:fa:a8: af:78:1e:75:de:36:37:1c:09:00:f5:d8:0f:92:a1:c3:54:ba: 0b:0b:24:74:df:f3:9e:ae:da:21:06:09:d8:5e:a5:46:17:09: 06:35:4d:27:b6:77:0b:c3:3d:fd:48:cc:a0:35:d5:57:40:2a: 74:d3:7f:6e:52:f2:dc:e9:a9:0e:e0:e2:3e:08:2b:22:a0:fd: ba:e8:f4:4b:4d:14:73:0b:ea:80:ec:5c:76:bd:96:9a:f2:4c: 99:90:e3:1c:71:ba:7d:d4:f0:88:78:51:02:08:73:ea:02:6d: d2:c5:23:7a:eb:09:58:e0:ca:bc:e5:1e:b7:31:e4:06:d8:3d: 97:96:e1:ed:37:bc:3a:b3:42:e9:02:40:32:c1:1f:e8:64:87: 49:10:79:42:a0:d2:21:05:64:95:fd:04:36:eb:21:cb:81:d4: 2c:67:03:1f:a3:94:24:e9:6b:af:49:37:28:0e:60:6b:32:02: fd:6b:d4:83:4e:85:ac:09:dc:aa:a8:76:47:86:39:a6:bf:11: 4d:a6:5b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDpVGrVHwcCXSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDgxMGE5YTktMmFkYy00MDc3LTkwNTEtODE5ZDMzNWE4ZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4uDvJOvf8WgMk5HuWjEiaQbvhmEYFrPANyy 1Vbp57Pv90QEejW46Q0BVSzYZWJms1TITK5oU53imLMHfU1coObOJz5XM/fDWiXt mK+BMsjUxZSa0sDGHA8NVE49mbrE04jT5oHJ1oqJ+Dm1QZjFidVuC0qlVluJ5T7/ y4Q18VKyVQkg5VO340HCjKyP/Efwm6YOrQhEgL4u7AdV6x2mB0EJ/syp9XZwY6Sl Pf52MrIvjpCurRQVSP9GUoOHUO8K5jyCaaGB/+CYf8AVnSXbdY7eFfp0f6XB3p2K ZDn58FMzCt+zonsfxCpCVcsxJm7DO5+vJrvD6KDz8FhSrggh7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVlgzkyCcJg7a/zlLdnMl/+IFNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzM5YWIyNmUtMDUyNy0z NTgwLTg4MWQtOGU1NTdiNzc5MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJaLVA6m/wsbqMN60hmQYOVl1rIvbFGSCoESYWlU3x2NSCsAjARous7 dJyVNb0ND5pFhBj6qK94HnXeNjccCQD12A+SocNUugsLJHTf856u2iEGCdhepUYX CQY1TSe2dwvDPf1IzKA11VdAKnTTf25S8tzpqQ7g4j4IKyKg/bro9EtNFHML6oDs XHa9lpryTJmQ4xxxun3U8Ih4UQIIc+oCbdLFI3rrCVjgyrzlHrcx5AbYPZeW4e03 vDqzQukCQDLBH+hkh0kQeUKg0iEFZJX9BDbrIcuB1CxnAx+jlCTpa69JNygOYGsy Av1r1INOhawJ3KqodkeGOaa/EU2mW8g= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:30 2025 by rpki-client