$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa File: b1b96800-888f-3087-b255-7df30b1557be.roa (raw, json) Hash identifier: 88bbSvUtX18gfgiElB5bLZzRLqJ4hoTiDcJRPrnlb18= Subject key identifier: D8:03:13:D0:40:38:C3:20:25:73:59:5D:C8:8A:28:36:46:68:88:D7 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BB02D0252F913233443C25600 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 30058 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:02:52:f9:13:23:34:43:c2:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=532ce202-f1f4-4724-881c-e78fca5c7008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:ae:94:34:e3:bd:65:be:95:e2:cf:74:1a: 30:a3:fc:70:41:cd:47:e1:01:a1:ce:5a:c4:86:62: 65:3d:a3:5c:64:0b:c4:39:a0:11:12:f3:3c:5b:9c: 3f:13:9d:c7:c9:a7:fd:05:16:02:e3:86:e8:14:8f: 96:df:84:22:d5:fc:f6:b4:5f:2e:59:db:21:03:a7: 40:4b:9d:77:a9:cf:f2:da:4f:27:5c:13:c6:6f:0e: b7:90:c5:81:b8:97:18:2a:24:9b:2b:d6:76:2e:72: 58:c1:37:e4:e0:51:33:51:ab:11:82:9b:1f:0c:2f: b7:be:68:13:a2:ac:11:4b:69:58:c1:f2:84:df:93: cf:b3:4e:92:6a:02:3a:64:4a:c3:b6:4a:57:aa:16: ca:64:6f:b3:c4:34:13:93:b1:95:f0:7b:98:af:6e: bc:08:c6:f3:c7:82:3e:9d:c0:c1:76:d9:93:78:3b: 06:63:30:6f:f2:3e:89:58:bb:e9:05:7f:3b:1a:87: 60:81:04:d7:66:27:68:58:21:f6:17:e4:2f:72:eb: c3:6c:5e:62:16:43:89:86:13:23:a6:ad:39:60:d0: 69:9d:47:30:25:b1:35:40:6a:22:29:ef:78:31:90: f2:37:e7:2c:8e:e9:d6:8e:95:47:1d:b6:e7:94:34: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:03:13:D0:40:38:C3:20:25:73:59:5D:C8:8A:28:36:46:68:88:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:81:8a:a4:b8:ce:ed:84:1f:8e:30:60:a8:48:ab:5d:e6:36: be:d2:64:9b:2c:a4:ce:6a:61:ef:67:1c:ac:42:99:b5:34:b7: c8:10:08:e7:c3:ec:c2:23:ec:7f:88:d5:e0:73:f1:6a:33:30: e2:1e:55:db:e2:32:6d:4b:e2:92:27:dd:12:91:76:56:44:41: d4:48:0a:b8:39:ce:76:19:be:3e:bb:c2:31:27:bf:0f:0e:2c: 72:4c:45:ba:77:3f:87:ce:71:b5:50:af:44:b0:b0:ce:d6:8d: 6c:7f:a2:94:cc:cd:e7:ee:d9:ce:50:fe:ca:23:a7:b3:5a:2c: 7e:f0:ae:08:a2:93:61:92:31:6e:66:0e:b1:6f:ea:06:0e:82: ca:d5:17:5d:ab:ae:d5:a9:52:49:33:0b:e8:be:c4:8a:74:47: f4:af:42:0a:3d:57:ad:e9:87:72:fa:4b:30:d4:7b:11:d9:a0: 76:56:0b:39:26:8b:70:bd:f7:1b:9c:93:52:9d:00:2a:78:a2: 09:d9:7e:b6:d1:9d:c4:21:17:f2:12:11:f7:33:cc:70:f0:e2: df:30:0d:9d:ca:f1:25:72:ca:8c:1b:66:a3:6b:ba:a3:fb:5e: c0:a2:91:e0:19:56:64:16:cc:f0:8f:70:8c:75:56:58:18:41: db:4e:93:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQJS+RMjNEPCVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NTMyY2UyMDItZjFmNC00NzI0LTg4MWMtZTc4ZmNhNWM3MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuaulDTjvWW+leLPdBowo/xwQc1H4QGhzlrE hmJlPaNcZAvEOaAREvM8W5w/E53Hyaf9BRYC44boFI+W34Qi1fz2tF8uWdshA6dA S513qc/y2k8nXBPGbw63kMWBuJcYKiSbK9Z2LnJYwTfk4FEzUasRgpsfDC+3vmgT oqwRS2lYwfKE35PPs06SagI6ZErDtkpXqhbKZG+zxDQTk7GV8HuYr268CMbzx4I+ ncDBdtmTeDsGYzBv8j6JWLvpBX87GodggQTXZidoWCH2F+QvcuvDbF5iFkOJhhMj pq05YNBpnUcwJbE1QGoiKe94MZDyN+csjunWjpVHHbbnlDSHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgDE9BAOMMgJXNZXciKKDZGaIjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjFiOTY4MDAtODg4Zi0z MDg3LWIyNTUtN2RmMzBiMTU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeBiqS4zu2EH44wYKhIq13mNr7SZJsspM5qYe9nHKxCmbU0t8gQCOfD 7MIj7H+I1eBz8WozMOIeVdviMm1L4pIn3RKRdlZEQdRICrg5znYZvj67wjEnvw8O LHJMRbp3P4fOcbVQr0SwsM7WjWx/opTMzefu2c5Q/sojp7NaLH7wrgiik2GSMW5m DrFv6gYOgsrVF12rrtWpUkkzC+i+xIp0R/SvQgo9V63ph3L6SzDUexHZoHZWCzkm i3C99xuck1KdACp4ognZfrbRncQhF/ISEfczzHDw4t8wDZ3K8SVyyowbZqNruqP7 XsCikeAZVmQWzPCPcIx1VlgYQdtOkw0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:41 2025 by rpki-client