$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/daf832ee-5a21-3538-b102-19d167f5a6c0.roa File: daf832ee-5a21-3538-b102-19d167f5a6c0.roa (raw, json) Hash identifier: rH/4JKIfCtYFXpnw6FlVFBL0WP/3x4dVvZVKGVrNLMQ= Subject key identifier: B9:03:1C:C6:6F:D5:F0:FB:B6:DA:81:C5:3C:45:D1:D1:59:62:EA:76 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BAA97B7A1381CEC1F170F1D80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/daf832ee-5a21-3538-b102-19d167f5a6c0.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 30058 IP address blocks: 23.237.8.0/23 maxlen: 24 198.255.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b7:a1:38:1c:ec:1f:17:0f:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=7815616d-4fd0-4368-a78d-54572c14311e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:86:d5:ab:0e:79:f1:d7:af:d2:64:6b:3f: bc:81:41:12:a1:21:f7:3f:5b:16:0d:ae:43:56:13: 6e:8f:10:82:f7:1c:31:21:5f:4a:a1:ee:7a:18:f8: 1d:f2:b6:61:d3:f1:08:63:5f:4e:65:4f:86:8f:b1: f4:aa:c6:8c:6b:cb:8f:6f:8c:78:d1:27:32:b5:48: 9d:c9:5d:62:a1:6c:0c:aa:95:88:3e:56:17:60:7a: 5f:27:f5:73:4a:1c:72:68:d3:29:81:8c:85:0b:e8: 3b:b9:91:fb:97:67:35:ea:54:76:53:ed:6f:ee:db: 87:73:6a:24:52:90:3e:16:3f:1e:97:78:c7:f4:a4: 48:29:f5:a0:f0:0c:09:14:bb:b7:c2:5e:69:fa:1c: 03:91:4c:3c:6c:29:dc:a2:91:82:b3:f1:e0:d6:be: 7a:bc:3e:86:44:3d:a9:67:f1:ed:6e:f0:59:85:b1: 0a:a5:d4:f7:d3:c0:7c:9b:ec:2c:01:b9:3e:e5:45: 02:7e:fc:f5:ef:69:e3:6a:e4:4a:b2:fe:0e:a2:97: e5:03:d4:b1:b5:1e:d4:06:d7:01:4b:09:7c:3f:96: 51:ca:3d:31:26:02:e3:d8:14:d4:ad:ab:f5:c6:14: 66:f0:e4:2f:fd:d0:87:29:65:3b:9e:31:e8:f6:70: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:03:1C:C6:6F:D5:F0:FB:B6:DA:81:C5:3C:45:D1:D1:59:62:EA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/daf832ee-5a21-3538-b102-19d167f5a6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.8.0/23 198.255.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:fc:67:49:45:53:45:ba:05:ca:38:86:84:19:8c:7d:f2:8e: 4d:48:b3:e0:af:ce:08:fb:44:b2:9c:02:c1:b6:d5:3f:3c:e3: 4e:b4:e2:fa:46:14:79:ed:2c:24:c0:21:e9:7e:b0:1e:11:f1: 09:c5:f5:06:45:1b:03:85:3a:0b:b0:88:28:a1:a6:41:22:64: 4b:43:7b:c2:f0:63:f1:56:0c:e6:fc:86:38:ac:d7:7e:d9:52: 90:5e:a1:42:76:01:4c:7b:8e:ba:5e:65:3d:36:5d:75:09:0e: e0:82:7a:e1:09:c2:cd:6b:73:b5:d0:61:73:a9:16:8f:5c:40: c5:13:24:db:c8:66:7f:a6:43:d4:1e:fe:e3:73:a5:70:ab:81: f7:0b:c1:e1:63:ff:83:c6:f7:eb:50:92:e2:b9:b5:4b:75:4b: 88:fa:7d:3e:12:05:c0:71:bd:ef:9b:0b:9b:9a:ad:32:3e:dd: 9d:8a:46:e6:a9:0f:ca:b5:3e:29:d8:9a:fd:7e:cd:f8:70:3d: 89:83:e6:7c:20:49:f2:e7:0b:64:fe:bf:95:a5:65:21:ec:32: 8f:7b:c5:c0:f2:67:f5:a5:70:ba:cc:76:41:98:9e:f4:00:07: ee:24:9e:fd:ff:06:3e:ed:ce:ec:fc:8a:17:64:92:ef:ac:26: 6f:1e:cc:ea -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuql7ehOBzsHxcPHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NzgxNTYxNmQtNGZkMC00MzY4LWE3OGQtNTQ1NzJjMTQzMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFmG1asOefHXr9Jkaz+8gUESoSH3P1sWDa5D VhNujxCC9xwxIV9Koe56GPgd8rZh0/EIY19OZU+Gj7H0qsaMa8uPb4x40ScytUid yV1ioWwMqpWIPlYXYHpfJ/VzShxyaNMpgYyFC+g7uZH7l2c16lR2U+1v7tuHc2ok UpA+Fj8el3jH9KRIKfWg8AwJFLu3wl5p+hwDkUw8bCncopGCs/Hg1r56vD6GRD2p Z/HtbvBZhbEKpdT308B8m+wsAbk+5UUCfvz172njauRKsv4OopflA9SxtR7UBtcB Swl8P5ZRyj0xJgLj2BTUrav1xhRm8OQv/dCHKWU7njHo9nAvFQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLkDHMZv1fD7ttqBxTxF0dFZYup2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGFmODMyZWUtNWEyMS0z NTM4LWIxMDItMTlkMTY3ZjVhNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF+0IAwQB xv8+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMn8Z0lFU0W6Bco4hoQZjH3yjk1Is+Cvzgj7RLKcAsG21T88 40604vpGFHntLCTAIel+sB4R8QnF9QZFGwOFOguwiCihpkEiZEtDe8LwY/FWDOb8 hjis137ZUpBeoUJ2AUx7jrpeZT02XXUJDuCCeuEJws1rc7XQYXOpFo9cQMUTJNvI Zn+mQ9Qe/uNzpXCrgfcLweFj/4PG9+tQkuK5tUt1S4j6fT4SBcBxve+bC5uarTI+ 3Z2KRuapD8q1PinYmv1+zfhwPYmD5nwgSfLnC2T+v5WlZSHsMo97xcDyZ/WlcLrM dkGYnvQAB+4knv3/Bj7tzuz8ihdkku+sJm8ezOo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:00:43 2025 by rpki-client