$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/af1533ae-3210-3520-b3ab-9c27721dcb6c.roa File: af1533ae-3210-3520-b3ab-9c27721dcb6c.roa (raw, json) Hash identifier: E/sM8Uz6oBaClG94vjxSaCOWF8jRLEDgzIPtqrC8Kj4= Subject key identifier: 18:BF:A5:24:92:B4:BD:C7:9E:CC:F6:E6:4D:DF:52:61:E5:3F:5B:A7 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BC10AE03E6B0D9B17B14F1C00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/af1533ae-3210-3520-b3ab-9c27721dcb6c.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 30058 IP address blocks: 23.237.28.0/23 maxlen: 23 2001:49f0:d076::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:e0:3e:6b:0d:9b:17:b1:4f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=b0fc2420-ccce-48be-9d39-506920cd9479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:53:63:ac:42:6d:c1:e7:42:94:89:99:2c:bb: 0b:64:48:54:7a:a0:e6:f7:69:d4:c8:19:03:9d:c9: ac:58:83:cc:2c:7a:49:d4:ce:d5:cc:51:c1:09:c2: ab:dc:88:03:aa:c3:d0:f5:70:32:6b:ed:ee:a7:22: 06:d1:1e:9e:e6:41:db:38:91:54:2e:24:a1:9f:0e: 0f:8e:bf:5e:a1:9b:11:4f:6e:41:08:a1:5a:55:b7: ac:be:59:af:00:12:c9:26:06:0e:74:11:be:fd:31: d1:7d:e9:0c:a8:4a:5c:f2:b5:47:25:7e:2d:44:61: de:fc:4b:c2:46:b9:9c:38:c7:2d:f5:dd:f1:a0:cc: 43:c3:f5:35:af:67:bc:a7:d2:ad:1e:01:e7:16:9c: f6:d0:56:9e:64:9b:e4:ff:e6:84:32:0b:cc:92:49: e4:6e:98:01:05:45:01:93:10:85:7e:b1:3e:57:09: 31:d3:06:79:26:ab:fe:5c:52:9c:e1:07:af:7f:a1: f7:c1:3e:21:14:22:ce:ee:27:d7:b9:8c:2f:a6:0a: f1:be:a8:6a:e0:33:b0:c4:66:27:e9:8d:60:a8:8f: 62:a9:33:e9:91:0c:9b:41:d2:87:9c:a5:f3:b8:7b: cb:03:fe:c1:4f:88:de:cd:39:a9:fb:50:23:9d:d2: 9e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:A5:24:92:B4:BD:C7:9E:CC:F6:E6:4D:DF:52:61:E5:3F:5B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/af1533ae-3210-3520-b3ab-9c27721dcb6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.28.0/23 IPv6: 2001:49f0:d076::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9f:f4:6e:f4:ba:3a:27:71:fb:43:f4:87:2e:5c:14:55:c3: f8:21:42:43:d5:86:a4:92:04:89:c8:33:47:59:d0:d9:2b:4e: 9f:e1:9c:e4:17:49:c5:53:be:63:9b:f7:13:93:aa:8f:49:9d: 8c:e7:d3:62:70:9b:8e:2a:ba:3e:fa:98:3b:cd:b1:6d:9d:a2: 4f:88:85:69:50:36:bc:aa:03:02:a8:c9:6e:32:03:d9:35:d1: d2:ee:35:ee:6e:f0:a5:3f:ec:46:82:f3:4a:1f:cb:65:cb:a2: 7d:1b:2d:41:bf:f3:e0:db:cc:cc:55:29:4e:78:40:ed:0e:53: 37:06:6c:93:56:2d:7a:e0:35:8c:c8:40:29:54:5b:48:49:5a: 7b:11:7a:31:05:6a:a3:e6:da:af:2b:75:d6:0d:fd:de:01:d7: 0c:79:1c:1b:b4:97:de:ef:fd:35:71:e6:96:0e:bf:d4:1d:19: 5b:d2:72:46:ac:e4:ab:2a:00:da:6c:af:fa:5c:38:1f:7e:88: 62:d1:9d:39:d0:f2:d4:8d:e1:9e:2f:e8:9d:6f:8b:89:39:b7: 12:95:3c:17:d2:0b:df:b0:40:07:9e:73:94:11:60:56:ff:d3: 56:2b:07:12:db:89:00:90:1e:73:13:bc:e5:ef:64:ed:08:e7: a2:75:8c:40 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEvBCuA+aw2bF7FPHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YjBmYzI0MjAtY2NjZS00OGJlLTlkMzktNTA2OTIwY2Q5NDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61NjrEJtwedClImZLLsLZEhUeqDm92nUyBkD ncmsWIPMLHpJ1M7VzFHBCcKr3IgDqsPQ9XAya+3upyIG0R6e5kHbOJFULiShnw4P jr9eoZsRT25BCKFaVbesvlmvABLJJgYOdBG+/THRfekMqEpc8rVHJX4tRGHe/EvC RrmcOMct9d3xoMxDw/U1r2e8p9KtHgHnFpz20FaeZJvk/+aEMgvMkknkbpgBBUUB kxCFfrE+Vwkx0wZ5Jqv+XFKc4Qevf6H3wT4hFCLO7ifXuYwvpgrxvqhq4DOwxGYn 6Y1gqI9iqTPpkQybQdKHnKXzuHvLA/7BT4jezTmp+1AjndKeVQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBi/pSSStL3Hnsz25k3fUmHlP1unMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYWYxNTMzYWUtMzIxMC0z NTIwLWIzYWItOWMyNzcyMWRjYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+0cMA8E AgACMAkDBwAgAUnw0HYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATJ/0bvS6Oidx+0P0hy5cFFXD+CFCQ9WG pJIEicgzR1nQ2StOn+Gc5BdJxVO+Y5v3E5Oqj0mdjOfTYnCbjiq6PvqYO82xbZ2i T4iFaVA2vKoDAqjJbjID2TXR0u417m7wpT/sRoLzSh/LZcuifRstQb/z4NvMzFUp TnhA7Q5TNwZsk1YteuA1jMhAKVRbSElaexF6MQVqo+baryt11g393gHXDHkcG7SX 3u/9NXHmlg6/1B0ZW9JyRqzkqyoA2myv+lw4H36IYtGdOdDy1I3hni/onW+LiTm3 EpU8F9IL37BAB55zlBFgVv/TVisHEtuJAJAecxO85e9k7QjnonWMQA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:27:37 2025 by rpki-client