$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/87f43c34-81fd-3797-b2aa-39e8038e81d3.roa File: 87f43c34-81fd-3797-b2aa-39e8038e81d3.roa (raw, json) Hash identifier: GhRdD0MyrCHnv4zwXeXXM9+gSEaj0H1vB8kpN4oJ15E= Subject key identifier: 0E:90:6C:8E:3D:DF:25:8E:42:7C:FD:CF:03:7B:AD:99:F3:C1:A6:FD Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B0D81BFAED75EE6C562CAB980 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/87f43c34-81fd-3797-b2aa-39e8038e81d3.roa Signing time: Mon 01 Sep 2025 18:34:38 +0000 ROA not before: Mon 01 Sep 2025 18:34:38 +0000 ROA not after: Sun 30 Nov 2025 19:34:38 +0000 asID: 30058 IP address blocks: 23.237.16.0/23 maxlen: 24 2001:49f0:d070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0d:81:bf:ae:d7:5e:e6:c5:62:ca:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 1 18:34:38 2025 GMT Not After : Nov 30 19:34:38 2025 GMT Subject: CN=59662586-a497-4f22-aba5-d508752d962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:05:33:a0:74:49:6d:f3:49:89:19:f8:57: 34:17:c9:4a:b0:d5:58:c5:f0:db:eb:e6:a2:08:5a: 18:bd:b3:cb:13:18:39:9a:cc:04:9c:43:ce:5c:4a: 67:66:d7:68:df:f5:55:f0:6f:47:93:a6:40:26:d1: 70:57:0d:84:9a:d4:4c:35:76:21:cc:79:24:48:c2: 70:f2:2c:d1:8f:b6:6c:62:dd:c8:22:fa:29:5c:91: bd:1c:21:a7:32:d7:cd:03:64:c9:ed:ed:50:f1:9d: d5:9a:00:ab:7e:c5:8d:cc:41:9d:07:ac:d1:61:8d: 91:d0:a5:62:f6:7f:52:78:97:98:ad:a6:9a:53:89: 38:fd:62:f9:a6:74:9b:cf:b6:55:8c:54:af:7f:53: 82:2c:3d:06:49:38:33:63:30:90:4d:48:1f:57:89: c8:49:ba:f3:d7:51:a7:61:59:83:6d:c0:a8:99:97: ef:f0:a1:98:a8:0f:25:68:7b:a8:4e:16:fb:ff:d9: e0:ce:f8:19:ec:d4:e0:be:a3:73:a4:d7:b5:54:fc: 29:e8:54:2c:0d:45:8e:3c:6b:1a:82:ee:f7:85:d9: c3:e9:08:4f:e6:20:c6:69:21:d7:ca:7b:90:b4:88: ec:6b:bd:13:d6:9e:5a:bc:f3:a7:18:36:75:1f:91: 10:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:90:6C:8E:3D:DF:25:8E:42:7C:FD:CF:03:7B:AD:99:F3:C1:A6:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/87f43c34-81fd-3797-b2aa-39e8038e81d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.16.0/23 IPv6: 2001:49f0:d070::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:9b:0b:6e:49:db:1c:da:b8:92:4e:85:b2:1e:8d:d4:06:70: 7a:6c:42:e9:c2:16:2c:87:4d:a6:18:f1:5d:8a:31:71:d0:3d: 62:34:e4:c7:fd:4f:6e:39:7f:0b:df:5b:b0:16:b1:3d:7e:da: 42:3e:6e:b5:aa:4a:b3:90:35:d9:21:31:18:f0:06:fa:ed:01: 5b:a0:c9:90:6b:9f:35:f5:b9:98:ab:b7:e6:c6:3e:3d:e2:fc: 8b:8e:c2:dd:3f:b1:44:a1:f0:f5:c9:e0:41:8d:a9:9e:db:b1: 0e:3c:88:fc:f2:cf:0e:37:3d:fb:0b:f5:d0:56:33:f8:79:3c: f0:76:dc:c6:23:2b:a9:17:ca:37:fb:e9:b7:da:6d:a5:98:50: f5:be:cc:3b:c3:c1:e7:00:80:da:35:7e:95:88:d8:80:ef:75: 5b:bc:90:5a:60:bb:e4:fc:cb:5a:54:25:ae:8a:7f:45:3b:90: 59:95:9c:b8:e1:8d:af:44:a4:0b:cf:e3:92:a5:f3:3d:15:ce: 5e:4a:fb:9b:9c:73:60:f2:1a:da:2b:4f:ae:82:85:bf:d2:ed: f7:ca:4a:32:77:59:13:61:d8:70:d1:e5:32:77:4f:36:eb:5e: 6d:de:e0:d4:a5:d7:f9:e5:16:85:de:4f:93:58:88:8c:5c:40: fc:47:3b:ad -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsNgb+u117mxWLKuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkwMTE4MzQzOFoXDTI1MTEzMDE5MzQzOFowLzEtMCsGA1UEAxMk NTk2NjI1ODYtYTQ5Ny00ZjIyLWFiYTUtZDUwODc1MmQ5NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiogFM6B0SW3zSYkZ+Fc0F8lKsNVYxfDb6+ai CFoYvbPLExg5mswEnEPOXEpnZtdo3/VV8G9Hk6ZAJtFwVw2EmtRMNXYhzHkkSMJw 8izRj7ZsYt3IIvopXJG9HCGnMtfNA2TJ7e1Q8Z3VmgCrfsWNzEGdB6zRYY2R0KVi 9n9SeJeYraaaU4k4/WL5pnSbz7ZVjFSvf1OCLD0GSTgzYzCQTUgfV4nISbrz11Gn YVmDbcComZfv8KGYqA8laHuoThb7/9ngzvgZ7NTgvqNzpNe1VPwp6FQsDUWOPGsa gu73hdnD6QhP5iDGaSHXynuQtIjsa70T1p5avPOnGDZ1H5EQbwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFA6QbI493yWOQnz9zwN7rZnzwab9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODdmNDNjMzQtODFmZC0z Nzk3LWIyYWEtMzllODAzOGU4MWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+0QMA8E AgACMAkDBwAgAUnw0HAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAzpsLbknbHNq4kk6Fsh6N1AZwemxC6cIW LIdNphjxXYoxcdA9YjTkx/1Pbjl/C99bsBaxPX7aQj5utapKs5A12SExGPAG+u0B W6DJkGufNfW5mKu35sY+PeL8i47C3T+xRKHw9cngQY2pntuxDjyI/PLPDjc9+wv1 0FYz+Hk88HbcxiMrqRfKN/vpt9ptpZhQ9b7MO8PB5wCA2jV+lYjYgO91W7yQWmC7 5PzLWlQlrop/RTuQWZWcuOGNr0SkC8/jkqXzPRXOXkr7m5xzYPIa2itProKFv9Lt 98pKMndZE2HYcNHlMndPNutebd7g1KXX+eUWhd5Pk1iIjFxA/Ec7rQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:44 2025 by rpki-client