$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fec126fe-9e75-39ad-b561-88de195a4ec0.roa File: fec126fe-9e75-39ad-b561-88de195a4ec0.roa (raw, json) Hash identifier: d8M3+Ds9Wb0N9aLhYppl0swcdiYDk25W8sWCoVJAksI= Subject key identifier: 18:CD:3F:6E:96:54:41:E4:92:F0:14:62:B5:B3:B2:DF:C9:B7:56:CD Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BB02CFD2D1C736AC5E9D0AD80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fec126fe-9e75-39ad-b561-88de195a4ec0.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 174 IP address blocks: 216.227.132.0/23 maxlen: 23 216.227.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fd:2d:1c:73:6a:c5:e9:d0:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=de28655e-963d-4910-9a6c-59181b3f2558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:e3:5b:6f:13:f0:41:88:02:19:a5:63:ab: 71:7a:bf:42:50:a0:81:9d:89:5c:07:a1:a2:fc:e6: 93:d2:bf:c2:89:1f:76:57:1a:a0:47:1b:1d:b3:65: de:3c:83:84:59:36:24:a2:c9:04:8b:fe:53:6b:9d: 18:18:be:b5:98:7b:1c:b7:72:36:45:6f:65:ed:26: 2d:0c:bc:74:9b:cd:3e:6a:fc:a6:28:b5:a3:0b:c0: a1:49:a4:10:48:09:db:c1:4d:b9:54:4a:d4:9e:f3: 65:cf:c9:b9:bd:38:de:16:fc:e1:c0:72:75:df:f4: 5c:e5:27:39:f3:bf:a0:7e:84:f0:9d:f8:e8:60:8c: 01:13:74:24:ec:b9:57:87:a4:17:a1:71:02:8c:ac: 14:81:82:08:47:2a:76:df:2c:7b:66:1c:d0:6d:0a: 49:da:e3:a7:af:b9:a2:86:b4:7c:46:e0:6f:34:d2: e5:0a:44:df:ee:23:a7:a6:4a:68:a1:24:6e:75:b9: 82:ef:2a:d7:e1:96:ec:0a:8c:c9:eb:9e:98:d6:e6: d3:bb:ba:e5:ea:b1:68:a6:a3:44:88:af:7f:7b:9f: f5:13:7d:85:e5:fb:99:23:f7:0f:db:1f:10:98:5e: 7a:eb:ec:90:ad:e6:c3:d3:11:1d:cb:42:3b:f8:dc: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CD:3F:6E:96:54:41:E4:92:F0:14:62:B5:B3:B2:DF:C9:B7:56:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fec126fe-9e75-39ad-b561-88de195a4ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:29:97:47:42:dd:60:e6:24:03:f5:d3:71:f6:05:e1:89:31: 87:4e:98:b3:f1:cb:b4:f2:b0:3f:9e:ca:28:1d:97:27:c8:8c: c5:c7:83:18:11:8c:41:47:2f:13:fd:c9:c2:fd:c8:aa:d3:dd: 3b:8b:45:17:2a:f3:41:27:06:42:d3:55:94:01:42:c9:3a:e6: e3:e2:3a:0d:7b:10:e4:66:a8:07:6f:87:93:67:21:c3:56:2f: d1:f4:92:74:d3:86:35:b3:00:d1:17:84:07:73:d6:b4:1a:87: 70:7a:c7:c5:74:e8:77:13:c6:47:f4:d8:28:f8:21:79:dd:0f: 86:17:30:fa:7e:07:89:09:d6:83:0a:59:ac:1d:83:c3:59:c1: cc:c6:da:db:d7:4f:dc:5a:a7:43:8d:6d:c8:76:8f:4c:78:ac: 7e:8e:27:50:90:db:96:b3:d6:7c:97:a8:a1:b1:d7:41:3d:b0: a0:f1:72:e3:80:8c:d3:d9:d7:c5:3c:7a:4c:45:4f:b0:60:09: 65:fc:03:a4:05:1e:ef:2f:a7:19:86:99:08:1c:5c:8b:b2:18: 88:32:77:14:1a:5b:3f:9a:67:94:19:1c:12:c5:6e:ca:7b:ba: 75:be:9e:03:c7:35:d1:28:8b:cf:43:5e:eb:ea:2c:90:04:0b: c9:d1:eb:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLP0tHHNqxenQrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ZGUyODY1NWUtOTYzZC00OTEwLTlhNmMtNTkxODFiM2YyNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApozjW28T8EGIAhmlY6txer9CUKCBnYlcB6Gi /OaT0r/CiR92VxqgRxsds2XePIOEWTYkoskEi/5Ta50YGL61mHsct3I2RW9l7SYt DLx0m80+avymKLWjC8ChSaQQSAnbwU25VErUnvNlz8m5vTjeFvzhwHJ13/Rc5Sc5 87+gfoTwnfjoYIwBE3Qk7LlXh6QXoXECjKwUgYIIRyp23yx7ZhzQbQpJ2uOnr7mi hrR8RuBvNNLlCkTf7iOnpkpooSRudbmC7yrX4ZbsCozJ656Y1ubTu7rl6rFopqNE iK9/e5/1E32F5fuZI/cP2x8QmF566+yQrebD0xEdy0I7+NwBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjNP26WVEHkkvAUYrWzst/Jt1bNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZmVjMTI2ZmUtOWU3NS0z OWFkLWI1NjEtODhkZTE5NWE0ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgpl0dC3WDmJAP103H2BeGJMYdOmLPxy7TysD+eyigdlyfIjMXHgxgR jEFHLxP9ycL9yKrT3TuLRRcq80EnBkLTVZQBQsk65uPiOg17EORmqAdvh5NnIcNW L9H0knTThjWzANEXhAdz1rQah3B6x8V06HcTxkf02Cj4IXndD4YXMPp+B4kJ1oMK Wawdg8NZwczG2tvXT9xap0ONbch2j0x4rH6OJ1CQ25az1nyXqKGx10E9sKDxcuOA jNPZ18U8ekxFT7BgCWX8A6QFHu8vpxmGmQgcXIuyGIgydxQaWz+aZ5QZHBLFbsp7 unW+ngPHNdEoi89DXuvqLJAEC8nR67g= -----END CERTIFICATE-----Generated at Wed Nov 5 09:21:15 2025 by rpki-client