$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa File: 96e227a2-d436-397b-82d9-f9ece14a3136.roa (raw, json) Hash identifier: mROoSNTq0W2x4JTPcgukOe1y1FXjNH8NQZL3JRdfirY= Subject key identifier: 5C:49:D2:98:9B:76:7A:96:22:0A:F4:E3:B4:34:02:03:3F:0F:3D:92 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B99D78F5916F861BDF8478C80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 30058 IP address blocks: 23.237.59.0/24 maxlen: 24 216.227.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8f:59:16:f8:61:bd:f8:47:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=359ffbf6-66d4-46a7-94a3-b876b3e072f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:5a:33:11:e4:4f:ee:c0:4d:33:91:03:c3: 5c:6f:81:03:23:e1:60:3c:e4:5a:0c:a2:12:85:8a: 8d:1c:ce:6f:11:50:35:a8:5b:cb:4d:3b:98:cd:00: 6a:19:64:15:2c:c7:82:f1:92:55:2f:6a:bf:4b:c4: 1b:99:28:50:a1:5b:97:3e:30:5c:ce:f2:4b:41:5c: 40:5b:d0:90:69:c3:ec:d9:d5:a7:71:11:db:90:25: ee:56:74:bf:0b:16:01:cb:b1:83:47:92:c4:56:00: d1:a8:37:3d:ab:3a:52:d0:c3:8e:93:75:80:a0:7e: 73:1e:7a:d3:46:d8:1d:7b:6a:79:72:c5:4f:7c:6b: 1c:6f:6b:98:e5:98:e6:33:2b:0c:47:da:f8:8c:aa: 01:9d:8b:ef:89:09:fc:d6:e5:06:c0:e4:39:e9:a4: 3a:be:79:73:3d:2e:80:cc:91:0c:d2:ef:b2:17:9f: 34:fb:89:88:b9:dd:86:5e:a6:6e:60:fe:fa:d7:f3: 86:10:3c:98:6c:67:62:20:29:78:24:b1:a7:12:14: fa:40:07:54:a5:2d:2e:b2:b4:74:c8:11:25:40:c6: 31:ec:26:d7:e5:da:ff:9f:40:04:1d:20:fa:52:a4: 33:16:82:27:fa:1d:9a:5d:17:12:7f:1d:d6:18:ee: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:D2:98:9B:76:7A:96:22:0A:F4:E3:B4:34:02:03:3F:0F:3D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.59.0/24 216.227.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8b:ad:2b:07:47:5c:66:1f:10:26:47:b6:fa:e6:fa:4c:94: 9f:98:c2:17:0b:0a:fe:7f:6a:5b:e4:ff:2b:35:ac:ca:06:65: 5f:e6:fc:17:14:b5:15:97:5f:1d:a1:20:8b:b2:07:8a:f3:7e: 4d:88:87:17:59:cb:8c:a8:20:4e:c8:73:15:21:06:59:74:e5: 46:df:7f:37:b1:a7:08:0f:e6:3a:a4:5c:47:0d:82:65:3e:83: a1:e4:42:cc:31:31:b2:00:ec:71:45:d0:89:08:90:dc:69:d0: 68:9a:40:07:b7:e3:d1:a1:6f:18:0b:df:75:62:45:0d:a1:f2: a1:ae:39:29:75:c5:ae:a5:38:fc:c5:0e:55:76:32:a8:f6:b4: 01:1b:9c:ed:58:01:4d:13:80:70:61:6e:94:95:5e:d8:40:6d: 7d:6c:f4:7e:d8:83:84:17:a3:46:95:18:ab:52:2b:3d:a4:31: de:72:e7:72:94:ab:27:f6:f9:c8:36:6a:b6:01:ce:24:4f:12: 96:9d:88:d7:14:5e:fe:bb:75:d2:7d:22:76:52:98:ed:86:e9: 36:b7:b8:c4:ae:eb:4d:c7:36:62:0d:0a:2b:08:ac:63:93:3c: 58:ee:1e:2a:6c:18:c2:99:7e:eb:d9:e8:c9:70:ea:77:7c:29: e0:9c:ae:5d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuZ149ZFvhhvfhHjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzU5ZmZiZjYtNjZkNC00NmE3LTk0YTMtYjg3NmIzZTA3MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+daMxHkT+7ATTORA8Ncb4EDI+FgPORaDKIS hYqNHM5vEVA1qFvLTTuYzQBqGWQVLMeC8ZJVL2q/S8QbmShQoVuXPjBczvJLQVxA W9CQacPs2dWncRHbkCXuVnS/CxYBy7GDR5LEVgDRqDc9qzpS0MOOk3WAoH5zHnrT Rtgde2p5csVPfGscb2uY5ZjmMysMR9r4jKoBnYvviQn81uUGwOQ56aQ6vnlzPS6A zJEM0u+yF580+4mIud2GXqZuYP761/OGEDyYbGdiICl4JLGnEhT6QAdUpS0usrR0 yBElQMYx7CbX5dr/n0AEHSD6UqQzFoIn+h2aXRcSfx3WGO6UWQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFxJ0pibdnqWIgr047Q0AgM/Dz2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTZlMjI3YTItZDQzNi0z OTdiLTgyZDktZjllY2UxNGEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+07AwQB 2OOwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFaLrSsHR1xmHxAmR7b65vpMlJ+YwhcLCv5/alvk/ys1rMoG ZV/m/BcUtRWXXx2hIIuyB4rzfk2IhxdZy4yoIE7IcxUhBll05UbffzexpwgP5jqk XEcNgmU+g6HkQswxMbIA7HFF0IkIkNxp0GiaQAe349GhbxgL33ViRQ2h8qGuOSl1 xa6lOPzFDlV2Mqj2tAEbnO1YAU0TgHBhbpSVXthAbX1s9H7Yg4QXo0aVGKtSKz2k Md5y53KUqyf2+cg2arYBziRPEpadiNcUXv67ddJ9InZSmO2G6Ta3uMSu603HNmIN CisIrGOTPFjuHipsGMKZfuvZ6Mlw6nd8KeCcrl0= -----END CERTIFICATE-----Generated at Wed Oct 22 12:08:59 2025 by rpki-client