$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa File: 9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa (raw, json) Hash identifier: Bnu7z/GgxN3tuMZzp8ekY9RDSWsN62ieVEDAcD/5DEE= Subject key identifier: CF:57:45:AB:6C:72:EE:ED:F6:50:75:C7:84:30:43:77:FA:82:13:50 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B8D477B7A4DC3A03DCD224A40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 30058 IP address blocks: 216.227.168.0/23 maxlen: 24 2001:49f0:d13e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7b:7a:4d:c3:a0:3d:cd:22:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=a309bc86-bb1e-43a5-9416-de37bb914b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:bf:cd:b6:7a:b2:76:9f:2d:51:d1:42:a9: 5a:70:1e:ed:d3:98:63:78:e2:67:a6:5e:7f:aa:ef: 2e:b9:48:4c:7a:22:e9:03:52:e3:fd:dd:cb:9a:77: 7e:54:16:75:b8:06:b7:4e:2e:85:f2:86:d8:40:b5: 37:bb:39:59:32:23:c0:fe:f6:5c:1c:21:90:57:0f: c2:08:f7:65:97:13:4d:32:4b:43:b8:d8:31:b6:28: 69:87:8d:41:ee:d5:6d:16:af:88:52:a3:ea:83:76: 49:3f:d0:2b:d1:86:73:79:33:54:b3:c9:3b:be:5a: a2:85:b0:7e:84:54:21:fa:18:5c:d2:7e:ad:8b:76: 95:c1:e3:46:1f:24:7b:9d:35:dc:ba:1b:54:f4:3e: 47:ec:32:cc:9b:10:27:41:e7:bc:6a:43:39:17:36: af:f2:32:1c:72:74:2f:af:90:80:d3:a0:52:3f:42: 59:3c:96:c7:eb:ee:bd:7b:2d:b9:5f:38:16:3a:87: fe:0b:a0:4a:9f:6d:46:49:5c:aa:98:8e:4d:b6:d7: f2:32:a9:e8:d7:a1:99:91:3c:1e:05:85:80:86:4d: c4:14:91:79:86:39:bb:8e:ed:ca:51:d9:9c:54:02: 3e:0d:3f:f0:90:3c:e2:44:a9:8d:95:f3:fa:57:d3: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:57:45:AB:6C:72:EE:ED:F6:50:75:C7:84:30:43:77:FA:82:13:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.168.0/23 IPv6: 2001:49f0:d13e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:df:83:f3:ca:9a:29:52:23:14:ac:e8:64:f0:28:fc:99:9e: db:74:5a:f5:35:97:f6:8e:ee:90:bc:a4:5d:2d:a4:8d:b1:5f: 6e:1e:6b:c0:79:97:80:79:58:03:aa:eb:7e:ab:5c:11:4b:21: f5:6a:6b:78:60:88:b7:61:c4:4b:9b:0c:6a:48:36:d7:cb:8c: 5f:71:f8:5c:88:38:9d:e5:6f:d7:f4:ac:27:7e:6b:5a:df:f0: 1f:b9:d2:90:90:68:e7:36:58:b7:a6:d5:61:68:29:8d:a8:4c: 3f:d1:81:76:ab:b5:f8:9b:c7:fc:12:bb:a2:03:21:30:32:0f: cf:e8:e0:57:c3:18:34:33:82:ce:c0:a8:e9:b2:1d:50:70:e9: 1b:7c:2c:fd:9f:00:4a:bb:4f:9b:1d:0e:e9:ee:48:48:ef:bf: dc:a0:07:77:6d:c1:5a:24:40:d9:73:76:98:40:5b:19:52:32: c5:93:26:c4:7d:5f:dc:5f:c7:2e:17:ed:10:d2:c5:84:dc:2e: 79:10:19:16:4f:a9:8a:5b:2e:8f:27:0a:9c:8c:ab:0f:73:84: bd:18:1b:7c:55:c8:70:9d:0e:1c:93:40:e3:de:62:b2:69:e1: 97:d7:93:4d:53:89:fa:6b:d7:54:84:37:0c:7e:fd:80:55:ee: 38:e9:78:6b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuNR3t6TcOgPc0iSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk YTMwOWJjODYtYmIxZS00M2E1LTk0MTYtZGUzN2JiOTE0YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx6/zbZ6snafLVHRQqlacB7t05hjeOJnpl5/ qu8uuUhMeiLpA1Lj/d3Lmnd+VBZ1uAa3Ti6F8obYQLU3uzlZMiPA/vZcHCGQVw/C CPdllxNNMktDuNgxtihph41B7tVtFq+IUqPqg3ZJP9Ar0YZzeTNUs8k7vlqihbB+ hFQh+hhc0n6ti3aVweNGHyR7nTXcuhtU9D5H7DLMmxAnQee8akM5Fzav8jIccnQv r5CA06BSP0JZPJbH6+69ey25XzgWOof+C6BKn21GSVyqmI5NttfyMqno16GZkTwe BYWAhk3EFJF5hjm7ju3KUdmcVAI+DT/wkDziRKmNlfP6V9MxaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM9XRatscu7t9lB1x4QwQ3f6ghNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOWQ3YTM0MmMtNDJiYS0z MjdjLWE2ZDUtMDdhNWM3OTRkMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB2OOoMA8E AgACMAkDBwAgAUnw0T4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARd+D88qaKVIjFKzoZPAo/Jme23Ra9TWX 9o7ukLykXS2kjbFfbh5rwHmXgHlYA6rrfqtcEUsh9WpreGCIt2HES5sMakg218uM X3H4XIg4neVv1/SsJ35rWt/wH7nSkJBo5zZYt6bVYWgpjahMP9GBdqu1+JvH/BK7 ogMhMDIPz+jgV8MYNDOCzsCo6bIdUHDpG3ws/Z8ASrtPmx0O6e5ISO+/3KAHd23B WiRA2XN2mEBbGVIyxZMmxH1f3F/HLhftENLFhNwueRAZFk+pilsujycKnIyrD3OE vRgbfFXIcJ0OHJNA495ismnhl9eTTVOJ+mvXVIQ3DH79gFXuOOl4aw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:48:32 2025 by rpki-client