$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa File: 70af0ead-85cc-31a4-98e8-0be232ccacd6.roa (raw, json) Hash identifier: kpjiy+RL/TGTTUKpQPSMGXv9/GLKeAWgMDnc2ZkFyrE= Subject key identifier: 0A:0C:37:2B:C8:F2:32:45:A2:37:A2:4E:24:8A:C8:DB:C3:5F:CA:59 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584FA163316B0F93C192D6BA28C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 1239 IP address blocks: 23.237.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:31:6b:0f:93:c1:92:d6:ba:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=df8f627b-7a30-40f4-a7db-1ebb28b8bb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:de:e5:73:46:ae:0e:29:2b:1e:a7:45:22: 07:06:46:4f:a2:32:b2:3e:e0:65:8f:59:46:3f:00: a0:3e:16:e0:ab:46:20:c8:55:6e:0a:2e:d2:44:56: 86:31:0e:a1:b5:51:88:d7:05:55:da:f6:1a:80:5d: 76:da:50:87:44:22:78:22:13:4c:39:aa:42:56:c0: 2a:ab:4a:84:bb:83:af:cb:cb:89:90:f8:3a:d3:5c: 94:29:16:f2:5a:80:4e:49:2a:81:2e:8b:0a:8d:d6: a8:c0:20:7f:37:33:ea:c4:20:f3:55:d0:e3:54:1a: 37:58:fa:8f:1a:ba:42:bd:7e:18:c2:f0:74:40:81: cd:15:6e:ef:6d:8c:0a:30:f0:cd:2c:99:9c:75:34: 3a:1d:5f:8b:0a:4c:0f:10:21:52:da:48:ea:d3:6e: 3a:cc:a1:fe:0e:f1:6c:e4:68:01:12:79:35:e1:e1: a5:ad:28:d1:9b:3e:2e:72:04:0a:77:94:5a:63:ba: b8:77:e8:01:8f:a5:af:22:9e:b1:c6:f8:76:85:ee: 73:85:e1:5a:15:da:67:0b:0d:bc:77:16:2e:6c:11: 95:a7:de:9a:5b:bc:9f:23:c5:4b:06:5b:7b:7c:c7: 87:aa:0d:ad:17:38:e7:c9:4c:11:17:68:18:0a:62: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:37:2B:C8:F2:32:45:A2:37:A2:4E:24:8A:C8:DB:C3:5F:CA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f5:68:41:87:9a:55:19:3c:90:0d:31:69:b0:66:6f:6f:c8: 33:16:f9:f9:31:de:99:7a:4c:87:80:f3:88:eb:67:d5:b5:7e: 17:f5:61:ac:8c:e8:c0:19:41:81:cb:9f:58:3c:7a:4f:cb:1a: 56:14:c3:ef:73:94:48:43:89:f6:ee:e0:cb:8d:45:92:d2:5f: fc:3a:73:25:4f:93:34:a9:00:2b:df:b0:39:3b:07:28:ad:d7: 0a:10:f0:07:45:2d:ce:83:d5:e6:2a:36:f7:ed:62:71:e3:d7: dc:f8:b8:cf:87:7f:1b:63:6c:2f:e1:fd:93:42:94:0e:b0:17: a3:f2:55:ed:80:a0:4d:ff:55:e8:46:27:43:e3:3a:bc:6a:f1: a9:15:cf:c1:a3:c2:91:b5:06:0b:51:bb:a7:83:73:51:d1:6e: 8e:6f:54:22:37:22:ca:a4:b6:81:2a:3f:9f:68:92:4a:68:00: a8:4e:6f:fa:74:c0:ec:34:cd:12:25:6e:f5:b8:2c:c9:89:63: 28:41:f6:2b:1b:16:23:87:ea:bd:46:b3:b5:78:a3:ea:07:a9: 2a:4b:4d:47:75:a2:6b:c3:ea:5a:11:d2:cb:7e:75:c9:68:f9: 5e:76:74:cc:d4:1d:f1:e9:a6:cc:a5:bf:cc:79:45:7c:e4:f9: 25:ff:8f:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzFrD5PBkta6KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk ZGY4ZjYyN2ItN2EzMC00MGY0LWE3ZGItMWViYjI4YjhiYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1/e5XNGrg4pKx6nRSIHBkZPojKyPuBlj1lG PwCgPhbgq0YgyFVuCi7SRFaGMQ6htVGI1wVV2vYagF122lCHRCJ4IhNMOapCVsAq q0qEu4Ovy8uJkPg601yUKRbyWoBOSSqBLosKjdaowCB/NzPqxCDzVdDjVBo3WPqP GrpCvX4YwvB0QIHNFW7vbYwKMPDNLJmcdTQ6HV+LCkwPECFS2kjq0246zKH+DvFs 5GgBEnk14eGlrSjRmz4ucgQKd5RaY7q4d+gBj6WvIp6xxvh2he5zheFaFdpnCw28 dxYubBGVp96aW7yfI8VLBlt7fMeHqg2tFzjnyUwRF2gYCmJvOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoMNyvI8jJFojeiTiSKyNvDX8pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzBhZjBlYWQtODVjYy0z MWE0LTk4ZTgtMGJlMjMyY2NhY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI71aEGHmlUZPJANMWmwZm9vyDMW+fkx3pl6TIeA84jrZ9W1fhf1YayM 6MAZQYHLn1g8ek/LGlYUw+9zlEhDifbu4MuNRZLSX/w6cyVPkzSpACvfsDk7Byit 1woQ8AdFLc6D1eYqNvftYnHj19z4uM+HfxtjbC/h/ZNClA6wF6PyVe2AoE3/VehG J0PjOrxq8akVz8GjwpG1BgtRu6eDc1HRbo5vVCI3IsqktoEqP59okkpoAKhOb/p0 wOw0zRIlbvW4LMmJYyhB9isbFiOH6r1Gs7V4o+oHqSpLTUd1omvD6loR0st+dclo +V52dMzUHfHppsylv8x5RXzk+SX/j/I= -----END CERTIFICATE-----Generated at Mon Oct 26 23:25:12 2026 by rpki-client