
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
File: 8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa (raw, json)
Hash identifier: HG4Ha/OMuMBLKQsVO1zJU9JPk7foos+zcEi7SYO53bY=
Subject key identifier: 7F:6A:FF:B6:08:E3:F4:73:C0:DD:BE:BC:7C:58:9B:C0:02:6C:9C:9A
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584BC96AFA269E1CD4F1CBB1F460
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
Signing time: Sat 08 Nov 2025 02:00:30 +0000
ROA not before: Sat 08 Nov 2025 02:00:30 +0000
ROA not after: Fri 06 Feb 2026 02:00:30 +0000
asID: 174
IP address blocks: 23.237.48.0/24 maxlen: 24
23.237.68.0/23 maxlen: 24
23.237.70.0/23 maxlen: 24
23.237.102.0/23 maxlen: 24
23.237.104.0/23 maxlen: 24
23.237.140.0/23 maxlen: 24
198.255.86.0/23 maxlen: 24
198.255.88.0/23 maxlen: 24
198.255.122.0/24 maxlen: 24
2001:49f0:d04d::/48 maxlen: 48
2001:49f0:d04e::/48 maxlen: 48
2001:49f0:d055::/48 maxlen: 48
2001:49f0:d0a9::/48 maxlen: 48
2001:49f0:d0aa::/48 maxlen: 48
2001:49f0:d0bf::/48 maxlen: 48
2001:49f0:d138::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c9:6a:fa:26:9e:1c:d4:f1:cb:b1:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Nov 8 02:00:30 2025 GMT
Not After : Feb 6 02:00:30 2026 GMT
Subject: CN=2ea98064-5c4e-4ce2-8244-2a196b90b016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:1b:6e:0e:7b:a8:9a:02:28:aa:17:58:63:
71:e4:ef:80:1c:38:f7:a7:eb:7e:99:fb:86:67:dc:
83:8d:77:c6:58:59:60:59:94:96:85:3e:09:77:04:
f2:e9:68:0b:e2:db:6a:a8:3b:74:23:ee:c1:1a:8b:
cb:7d:8a:91:02:80:2d:b4:77:a0:76:4d:91:1e:8e:
ab:ed:24:03:c5:29:16:9c:b1:9e:b0:f5:2a:b3:95:
3d:98:b1:77:b4:3e:46:d7:c3:4d:cc:7f:0e:ea:58:
8e:18:bf:cb:cf:33:05:52:36:08:1f:7a:c9:e9:02:
17:34:53:c4:71:da:55:01:96:aa:48:ab:2a:d8:a8:
6c:8c:54:7d:d6:b4:68:f6:f3:a6:ec:89:ce:2b:2e:
81:a6:f9:a2:ab:0d:39:32:d8:4e:26:2e:dc:dc:e2:
5e:2e:eb:c6:06:30:b8:22:44:70:c6:a7:e1:b7:f9:
d8:d0:a2:56:e3:94:c2:5c:89:04:75:94:12:9a:21:
bd:22:50:4e:4b:74:c8:dd:cf:e9:ee:b4:51:79:e1:
c2:db:ed:87:4a:32:38:59:0d:6f:56:e8:40:5f:27:
a8:e3:80:82:ce:f9:16:9b:ab:f6:a7:a8:2b:32:a4:
f4:64:7f:14:e9:ca:99:db:5d:b1:d8:42:a7:68:af:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:FF:B6:08:E3:F4:73:C0:DD:BE:BC:7C:58:9B:C0:02:6C:9C:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.48.0/24
23.237.68.0/22
23.237.102.0-23.237.105.255
23.237.140.0/23
198.255.86.0-198.255.89.255
198.255.122.0/24
IPv6:
2001:49f0:d04d::-2001:49f0:d04e:ffff:ffff:ffff:ffff:ffff
2001:49f0:d055::/48
2001:49f0:d0a9::-2001:49f0:d0aa:ffff:ffff:ffff:ffff:ffff
2001:49f0:d0bf::/48
2001:49f0:d138::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:82:2b:a7:1b:47:41:e3:05:2f:0d:4c:1d:0e:e9:a9:ee:7d:
89:8a:ce:22:b2:ac:e1:0e:a2:fc:a9:33:e5:fa:08:79:d2:10:
f6:2d:84:3e:27:59:83:39:ab:8e:cc:5f:c5:9a:6f:e6:c3:ea:
8e:af:0d:d1:d6:c4:d8:42:22:4b:89:d2:6b:8d:a4:d3:23:ad:
ae:f9:f1:e3:b8:de:84:02:5d:04:fd:5b:72:a6:1f:5e:7b:f7:
d9:f0:da:4f:27:b6:b5:1e:ca:98:a8:40:32:8e:51:f7:61:69:
bc:11:d0:82:5f:91:a1:0b:ba:41:46:4a:df:87:bb:fe:e8:53:
c0:6e:75:3d:fb:2e:cd:51:5b:7d:ba:ee:80:6f:ab:a1:b0:7c:
8f:c5:41:51:1c:62:d2:4b:a4:84:4b:01:3b:e3:ab:3a:35:3b:
2a:7d:99:69:d6:3b:0f:1f:a8:40:a2:90:17:15:b9:b5:90:f1:
0a:a2:05:a8:24:05:f1:ec:29:cd:e8:e4:c8:85:7c:5c:d8:3d:
fb:9f:d7:00:32:fa:11:b1:68:68:78:9e:c9:26:c6:52:72:74:
0b:16:bc:e5:09:fa:04:46:55:e9:b6:f3:cf:15:e7:cb:86:a3:
28:49:5c:ee:e3:9f:37:9a:18:17:3c:a6:a2:ff:18:63:d0:68:
63:b9:99:62
-----BEGIN CERTIFICATE-----
MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWEvJavomnhzU8cux9GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk
MmVhOTgwNjQtNWM0ZS00Y2UyLTgyNDQtMmExOTZiOTBiMDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje8bbg57qJoCKKoXWGNx5O+AHDj3p+t+mfuG
Z9yDjXfGWFlgWZSWhT4JdwTy6WgL4ttqqDt0I+7BGovLfYqRAoAttHegdk2RHo6r
7SQDxSkWnLGesPUqs5U9mLF3tD5G18NNzH8O6liOGL/LzzMFUjYIH3rJ6QIXNFPE
cdpVAZaqSKsq2KhsjFR91rRo9vOm7InOKy6Bpvmiqw05MthOJi7c3OJeLuvGBjC4
IkRwxqfht/nY0KJW45TCXIkEdZQSmiG9IlBOS3TI3c/p7rRReeHC2+2HSjI4WQ1v
VuhAXyeo44CCzvkWm6v2p6grMqT0ZH8U6cqZ212x2EKnaK9N2wIDAQABo4ID0TCC
A80wHQYDVR0OBBYEFH9q/7YI4/RzwN2+vHxYm8ACbJyaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOGFlMGI2YTktM2FlZS0z
MDNkLThjYmMtNTg0MTZhMjU3MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMIGaBggrBgEFBQcBBwEB/wSBijCBhzA6BAIAATA0AwQAF+0w
AwQCF+1EMAwDBAEX7WYDBAEX7WgDBAEX7YwwDAMEAcb/VgMEAcb/WAMEAMb/ejBJ
BAIAAjBDMBIDBwAgAUnw0E0DBwAgAUnw0E4DBwAgAUnw0FUwEgMHACABSfDQqQMH
ACABSfDQqgMHACABSfDQvwMHACABSfDRODBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHgiunG0dB4wUvDUwd
Dump7n2Jis4isqzhDqL8qTPl+gh50hD2LYQ+J1mDOauOzF/Fmm/mw+qOrw3R1sTY
QiJLidJrjaTTI62u+fHjuN6EAl0E/Vtyph9ee/fZ8NpPJ7a1HsqYqEAyjlH3YWm8
EdCCX5GhC7pBRkrfh7v+6FPAbnU9+y7NUVt9uu6Ab6uhsHyPxUFRHGLSS6SESwE7
46s6NTsqfZlp1jsPH6hAopAXFbm1kPEKogWoJAXx7CnN6OTIhXxc2D37n9cAMvoR
sWhoeJ7JJsZScnQLFrzlCfoERlXptvPPFefLhqMoSVzu4583mhgXPKai/xhj0Ghj
uZli
-----END CERTIFICATE-----
Generated at Mon Nov 17 04:25:13 2025 by rpki-client