$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/00cbfd12-1a0d-3c48-9020-ebf23802d993.roa File: 00cbfd12-1a0d-3c48-9020-ebf23802d993.roa (raw, json) Hash identifier: 31tQCTLDGm+rR3djKD4ACTkxJBfeXjCIm/MuYxfmyVg= Subject key identifier: 49:75:5C:2D:8F:CA:00:D1:AF:32:24:E5:9A:FC:79:7D:41:84:D8:34 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B153C22E42E983B801F77EDC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/00cbfd12-1a0d-3c48-9020-ebf23802d993.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 30058 IP address blocks: 67.159.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:22:e4:2e:98:3b:80:1f:77:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=fde0c39e-05fb-4be1-bc03-dc8a56382905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:1f:a4:bf:bd:ed:37:e4:dd:5a:62:69:f7: 94:33:80:67:f6:f2:ff:16:66:5a:09:30:58:ef:b8: fc:b2:15:d5:69:71:3d:aa:ba:a0:3b:22:b5:92:4e: 7b:bd:f6:aa:78:89:35:70:0b:a1:74:64:d9:7b:83: 32:ef:94:e6:e2:14:d3:2a:c8:0e:59:7e:16:4b:18: 7a:13:05:ba:f9:83:25:a3:14:5b:52:45:55:18:96: a7:96:1d:8d:87:cd:f6:b1:a7:e3:ad:cb:17:d9:4d: aa:8e:b3:14:df:d1:fa:73:ae:32:6d:b6:e4:0a:b6: 49:63:38:6e:a0:68:9f:b1:04:e8:ac:3f:8f:66:87: 7f:7a:42:34:88:9e:7d:2a:de:b4:d5:e8:8d:e7:51: d5:6f:45:6f:4e:fd:d9:cd:ae:a7:5b:16:4f:66:44: 56:81:a6:fb:9f:1d:12:72:d2:d3:1e:9e:ec:32:fb: 3f:48:36:f2:d7:71:5c:ce:ef:3f:ae:ff:36:97:c3: e2:28:b8:e0:ae:fc:fd:45:20:4e:37:44:19:51:25: 00:a7:6a:9b:b3:47:b4:6f:d1:4a:ac:d6:af:49:d4: 15:1a:93:a2:90:a8:c3:84:9d:8b:8e:55:03:f7:fe: 82:f5:3d:ac:e6:87:a1:1b:94:46:6d:ef:57:ba:da: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:75:5C:2D:8F:CA:00:D1:AF:32:24:E5:9A:FC:79:7D:41:84:D8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/00cbfd12-1a0d-3c48-9020-ebf23802d993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f2:e6:4b:84:34:9a:a9:2b:f9:67:e9:8c:6a:60:7a:f2:54: a2:2f:21:1e:f2:18:a4:48:c0:11:50:3c:30:53:cc:05:9a:06: a5:1d:1c:de:03:fd:0e:81:f4:25:01:2f:9b:f0:0b:9f:62:86: 06:00:14:9a:44:63:84:23:ab:ac:ed:6f:a6:41:7a:7f:e0:0a: 64:a6:a7:cf:62:a8:79:f8:19:b7:98:c8:e8:de:e9:ab:65:c4: dc:10:d3:3e:80:f7:67:3d:02:32:50:8b:a9:36:a5:78:52:0b: 87:70:42:ee:87:f7:14:9e:9f:fe:89:a8:e8:1c:d0:a7:16:8a: 39:0c:3f:74:a5:88:d2:36:63:c4:ca:ba:ca:6a:f0:0c:4c:e3: e4:11:5a:2f:13:9e:e6:e4:5c:cc:ba:fd:1c:a2:98:83:69:44: 8b:6b:8f:ce:6c:11:78:10:05:f8:59:a3:24:01:6b:0a:a3:c1: eb:00:ab:76:16:16:f1:b2:4d:07:0d:34:e3:30:4b:4c:ab:32: f2:a3:37:66:90:b5:f7:cd:97:0c:8c:0f:eb:6f:23:da:f7:d3: 62:29:ac:83:18:4f:b5:21:53:28:49:61:b6:c3:95:f3:b6:8e: 5d:6b:55:33:5d:67:39:56:db:7f:e2:f8:f7:ca:e0:fa:3e:9f: b8:3a:1d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCLkLpg7gB937cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZmRlMGMzOWUtMDVmYi00YmUxLWJjMDMtZGM4YTU2MzgyOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEMfpL+97Tfk3VpiafeUM4Bn9vL/FmZaCTBY 77j8shXVaXE9qrqgOyK1kk57vfaqeIk1cAuhdGTZe4My75Tm4hTTKsgOWX4WSxh6 EwW6+YMloxRbUkVVGJanlh2Nh832safjrcsX2U2qjrMU39H6c64ybbbkCrZJYzhu oGifsQTorD+PZod/ekI0iJ59Kt601eiN51HVb0VvTv3Zza6nWxZPZkRWgab7nx0S ctLTHp7sMvs/SDby13Fczu8/rv82l8PiKLjgrvz9RSBON0QZUSUAp2qbs0e0b9FK rNavSdQVGpOikKjDhJ2LjlUD9/6C9T2s5oehG5RGbe9Xuto+4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl1XC2PygDRrzIk5Zr8eX1BhNg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMDBjYmZkMTItMWEwZC0z YzQ4LTkwMjAtZWJmMjM4MDJkOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ58uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTy5kuENJqpK/ln6YxqYHryVKIvIR7yGKRIwBFQPDBTzAWaBqUdHN4D /Q6B9CUBL5vwC59ihgYAFJpEY4Qjq6ztb6ZBen/gCmSmp89iqHn4GbeYyOje6atl xNwQ0z6A92c9AjJQi6k2pXhSC4dwQu6H9xSen/6JqOgc0KcWijkMP3SliNI2Y8TK uspq8AxM4+QRWi8TnubkXMy6/RyimINpRItrj85sEXgQBfhZoyQBawqjwesAq3YW FvGyTQcNNOMwS0yrMvKjN2aQtffNlwyMD+tvI9r302IprIMYT7UhUyhJYbbDlfO2 jl1rVTNdZzlW23/i+PfK4Po+n7g6HR8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:02:14 2025 by rpki-client