$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/daf832ee-5a21-3538-b102-19d167f5a6c0.roa File: daf832ee-5a21-3538-b102-19d167f5a6c0.roa (raw, json) Hash identifier: 5e15Kp+l80MFwf490VDXb+OXkhPd4r1nxrARaxN0S3g= Subject key identifier: 2F:02:D0:0D:32:D3:BF:44:5B:DB:9D:4C:E7:BA:8A:1C:24:87:56:2D Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F8F3DE98284B4DD660332DF80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/daf832ee-5a21-3538-b102-19d167f5a6c0.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 30058 IP address blocks: 23.237.8.0/23 maxlen: 24 198.255.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:e9:82:84:b4:dd:66:03:32:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=2d58acfd-b3b7-436e-8986-bf2350353db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:13:45:b4:4a:13:14:08:ee:40:5f:e5:87: e9:d3:1b:2a:e7:47:6b:37:fa:c4:40:a5:89:7a:55: f7:c8:9e:c1:05:b5:79:3d:ae:55:5d:ab:e9:5c:29: 6b:8e:81:67:37:82:65:53:f2:d5:f1:b8:a6:9c:65: 3e:55:c1:fa:1f:7e:c5:9e:7d:aa:59:fa:26:41:30: 81:fc:26:47:ba:80:e1:04:0e:d0:62:a6:ca:02:fa: af:26:91:42:45:85:a3:73:23:e0:4a:46:83:19:1a: eb:43:45:b3:fa:cf:4e:92:31:ba:0d:93:63:ac:c4: 06:d0:d6:66:0f:9a:ba:97:ee:73:38:5a:e2:9b:65: 1d:19:da:e1:91:2d:7b:44:26:5b:6e:71:c0:7b:a2: 94:5c:64:62:43:6e:cc:0b:bd:6d:15:ec:52:df:3f: 7f:c8:5b:c0:8d:24:c5:20:ef:be:54:75:cc:6f:fa: 7b:6c:bd:53:47:47:84:59:a3:c2:37:0f:bb:11:95: 1c:68:41:0b:b9:04:d1:a4:95:67:85:7a:0c:40:80: 9a:b3:53:a5:60:25:ab:3f:26:ae:3d:7e:67:7e:4c: df:80:7e:c0:52:93:22:9f:97:47:13:d0:58:1d:91: 3e:f7:e9:03:af:99:61:ca:f6:b4:8f:8c:f0:cf:5d: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:D0:0D:32:D3:BF:44:5B:DB:9D:4C:E7:BA:8A:1C:24:87:56:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/daf832ee-5a21-3538-b102-19d167f5a6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.8.0/23 198.255.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:46:e7:9c:15:87:cd:00:e1:42:b6:90:b9:17:09:63:9d:aa: c4:98:b7:93:2a:06:32:8d:3f:d6:0f:a0:bf:d3:94:a0:9c:d5: 93:f9:d6:27:bf:55:46:5c:25:46:05:77:e3:fd:02:af:78:62: 14:a2:9f:56:69:a9:3d:2e:9f:85:86:68:e2:05:49:b2:c4:60: 06:9c:e3:b7:c5:70:26:3b:4e:82:e4:d8:27:84:a7:7a:d3:4e: a4:57:b9:93:f8:82:70:47:5c:33:1f:04:90:b9:b3:7d:53:88: 00:c1:27:7a:65:85:b3:11:35:7f:5d:9c:1e:b9:81:74:f2:f9: 25:a8:5d:eb:07:5b:69:64:27:24:64:65:f1:b7:57:66:0e:4e: b2:67:02:ab:f4:c0:c1:51:18:4f:a3:6a:af:e2:47:26:a5:4c: f0:dd:c2:3d:c5:f9:3b:33:12:89:5a:93:1f:ed:f6:81:36:b7: e3:25:2c:03:db:b2:db:79:bc:7f:8a:45:a9:ec:76:bc:a6:96: b2:a3:db:9a:0e:ec:1c:72:c0:76:a5:69:01:5d:89:01:39:e5: 96:63:76:c2:65:3c:b1:78:28:40:d5:3f:fc:9a:e3:1b:df:b5: 9a:ef:92:a2:00:bd:a4:f2:86:f6:1a:fe:74:b2:b2:57:da:ca: d1:a2:23:d3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+PPemChLTdZgMy34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MmQ1OGFjZmQtYjNiNy00MzZlLTg5ODYtYmYyMzUwMzUzZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyUTRbRKExQI7kBf5Yfp0xsq50drN/rEQKWJ elX3yJ7BBbV5Pa5VXavpXClrjoFnN4JlU/LV8bimnGU+VcH6H37Fnn2qWfomQTCB /CZHuoDhBA7QYqbKAvqvJpFCRYWjcyPgSkaDGRrrQ0Wz+s9OkjG6DZNjrMQG0NZm D5q6l+5zOFrim2UdGdrhkS17RCZbbnHAe6KUXGRiQ27MC71tFexS3z9/yFvAjSTF IO++VHXMb/p7bL1TR0eEWaPCNw+7EZUcaEELuQTRpJVnhXoMQICas1OlYCWrPyau PX5nfkzfgH7AUpMin5dHE9BYHZE+9+kDr5lhyva0j4zwz11afQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC8C0A0y079EW9udTOe6ihwkh1YtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGFmODMyZWUtNWEyMS0z NTM4LWIxMDItMTlkMTY3ZjVhNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF+0IAwQB xv8+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEpG55wVh80A4UK2kLkXCWOdqsSYt5MqBjKNP9YPoL/TlKCc 1ZP51ie/VUZcJUYFd+P9Aq94YhSin1ZpqT0un4WGaOIFSbLEYAac47fFcCY7ToLk 2CeEp3rTTqRXuZP4gnBHXDMfBJC5s31TiADBJ3plhbMRNX9dnB65gXTy+SWoXesH W2lkJyRkZfG3V2YOTrJnAqv0wMFRGE+jaq/iRyalTPDdwj3F+TszEolakx/t9oE2 t+MlLAPbstt5vH+KRansdrymlrKj25oO7BxywHalaQFdiQE55ZZjdsJlPLF4KEDV P/ya4xvftZrvkqIAvaTyhvYa/nSyslfaytGiI9M= -----END CERTIFICATE-----Generated at Mon Oct 26 23:38:51 2026 by rpki-client