$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa File: 47fd139c-acb1-3096-ace2-587cba189c18.roa (raw, json) Hash identifier: 8qHe0fHg0Ty+8o+7RUNdy/lfHaSlwGoLSlU1ON4f1lk= Subject key identifier: A4:94:F0:02:D1:DD:2B:86:92:4B:9A:44:38:31:D5:0B:2E:59:A9:69 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BB02D02293B510381B07FE780 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 174 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:02:29:3b:51:03:81:b0:7f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=48393bde-fb55-4224-ac02-19fffd46776a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:62:0c:4e:c9:5c:91:76:32:5d:a0:f5:72: a0:aa:3e:3a:ae:ad:e4:bd:77:ec:e7:7b:a3:08:9e: 04:dc:49:86:4a:19:9a:d2:5e:65:48:b2:a0:f3:93: f2:01:64:3a:da:50:97:5f:16:29:92:f0:80:d3:5b: 20:46:5f:93:82:83:5b:a5:32:ac:1e:bd:18:4b:26: 1b:6b:7a:8f:5c:60:7a:06:a3:60:b9:21:b4:ef:a6: e9:8e:12:99:da:00:00:bd:da:70:5b:31:9c:67:45: 8e:3a:a9:c7:44:fd:b8:60:33:31:f1:5f:88:c3:7b: 99:d6:66:98:22:3b:ed:66:61:c9:26:0f:bf:f3:72: 75:e0:d7:8a:89:0b:47:60:d3:c1:b5:80:28:51:9a: 56:b8:8e:8b:32:2c:dc:49:d5:7a:f2:52:9a:7d:42: 81:f4:ad:e0:ed:1c:5e:ce:89:8a:2e:c1:82:6e:7a: 28:89:4a:de:ba:d1:e9:46:ce:89:5a:9b:78:e7:7b: 38:8f:c2:52:7f:cd:97:0e:9c:f0:0d:51:03:7a:04: 79:c5:4c:46:85:3b:25:a3:60:08:91:36:59:74:a1: 34:08:eb:cc:da:08:38:ba:3e:71:ed:7f:b9:d8:0a: 98:0d:df:f8:95:5b:ec:80:f0:ee:31:23:63:21:60: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:94:F0:02:D1:DD:2B:86:92:4B:9A:44:38:31:D5:0B:2E:59:A9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:28:98:d3:79:e0:d4:57:9d:fa:86:d3:98:6f:c0:a3:b4:ac: c6:21:91:91:8e:f5:5f:5f:39:0e:16:79:64:6e:95:6b:f9:e4: e3:d0:bc:e0:9e:be:f2:80:83:b5:7b:4c:2f:14:04:1b:86:29: 17:55:c6:c6:94:7d:4d:1c:10:eb:89:6a:76:15:c3:cb:07:27: 6c:df:e9:ee:49:fa:69:59:c4:35:4e:50:b2:47:53:f3:7c:32: 0b:e2:2f:29:1c:63:e0:77:e7:44:5c:f7:6f:18:6f:60:fc:fd: 2f:36:bd:b5:58:40:52:bd:19:22:91:27:96:b2:ef:15:25:f7: da:ab:0a:84:64:3f:27:a2:f4:dc:6e:4e:46:bc:0c:e3:b4:6d: c1:50:73:4c:51:ad:d8:c3:44:4c:15:4b:c0:2f:b8:1d:71:35: 9a:18:32:4a:7d:9a:57:97:51:ed:04:59:7c:9c:7f:03:0c:0a: aa:2c:95:45:50:f3:90:a8:ab:9a:73:28:2a:ff:0b:6b:cb:3e: da:31:fe:eb:a5:52:d9:bb:4e:f3:5f:51:87:b3:3c:c8:8a:78: c6:3a:a7:45:30:e2:9e:23:fb:03:93:83:4e:d4:8e:c6:87:ad: ce:3f:25:76:37:5e:96:a7:08:d7:9f:2a:78:ee:52:cd:b1:fe: cd:1a:a4:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQIpO1EDgbB/54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NDgzOTNiZGUtZmI1NS00MjI0LWFjMDItMTlmZmZkNDY3NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYxiDE7JXJF2Ml2g9XKgqj46rq3kvXfs53uj CJ4E3EmGShma0l5lSLKg85PyAWQ62lCXXxYpkvCA01sgRl+TgoNbpTKsHr0YSyYb a3qPXGB6BqNguSG076bpjhKZ2gAAvdpwWzGcZ0WOOqnHRP24YDMx8V+Iw3uZ1maY IjvtZmHJJg+/83J14NeKiQtHYNPBtYAoUZpWuI6LMizcSdV68lKafUKB9K3g7Rxe zomKLsGCbnooiUreutHpRs6JWpt453s4j8JSf82XDpzwDVEDegR5xUxGhTslo2AI kTZZdKE0COvM2gg4uj5x7X+52AqYDd/4lVvsgPDuMSNjIWDZZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSU8ALR3SuGkkuaRDgx1QsuWalpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNDdmZDEzOWMtYWNiMS0z MDk2LWFjZTItNTg3Y2JhMTg5YzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIomNN54NRXnfqG05hvwKO0rMYhkZGO9V9fOQ4WeWRulWv55OPQvOCe vvKAg7V7TC8UBBuGKRdVxsaUfU0cEOuJanYVw8sHJ2zf6e5J+mlZxDVOULJHU/N8 MgviLykcY+B350Rc928Yb2D8/S82vbVYQFK9GSKRJ5ay7xUl99qrCoRkPyei9Nxu Tka8DOO0bcFQc0xRrdjDREwVS8AvuB1xNZoYMkp9mleXUe0EWXycfwMMCqoslUVQ 85Coq5pzKCr/C2vLPtox/uulUtm7TvNfUYezPMiKeMY6p0Uw4p4j+wOTg07UjsaH rc4/JXY3XpanCNefKnjuUs2x/s0apKk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:59 2025 by rpki-client