$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa File: dab1331a-4269-3d35-9330-184ddf84b5d0.roa (raw, json) Hash identifier: bY+Lk4G1SPVbLKExBkvrkY7eW9YNP31RwmIoAOeh7VI= Subject key identifier: 3F:00:AD:F3:6A:A2:2E:1A:ED:86:34:DF:E1:B6:11:18:FC:B8:C0:06 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584EA79A68551F0A3B9B4CE45280 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30058 IP address blocks: 67.159.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:68:55:1f:0a:3b:9b:4c:e4:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ff072adc-6fb7-4f3d-96f3-e0d6aade250b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:4e:54:46:08:b7:46:40:69:49:d0:4c:74: 6f:70:4a:c5:e4:ad:6a:1c:bc:c1:af:c7:79:62:0d: dc:e4:2a:f5:1c:57:a0:a5:39:3f:d2:62:89:62:f8: 39:ad:d9:17:aa:85:a8:88:0d:87:e7:1b:a4:28:aa: 73:f8:dd:3d:0f:86:f4:80:67:a9:fa:06:3c:59:b9: d1:9a:9f:1e:18:eb:2c:5c:5f:69:8b:d1:dc:de:cf: 8b:82:dc:40:e0:c1:37:61:e5:d5:58:a9:72:50:45: 72:0b:66:0a:3b:48:6d:91:c5:3a:ce:d1:07:8c:89: 8f:59:27:aa:d8:f6:a5:cc:bf:b0:99:df:8d:b0:2a: 37:3c:a7:42:e9:3c:9c:27:3d:df:9a:f3:05:e1:12: 1f:93:b2:69:d3:8a:18:9f:3a:be:55:67:b3:4a:6c: 66:ef:4d:38:d8:39:77:76:aa:d8:0b:ce:fc:5e:0e: 5e:cf:f8:03:b2:e9:0f:38:3c:f4:c8:4e:7c:cd:49: 9b:d9:c1:04:43:8c:52:f2:f5:e6:d1:e9:55:a5:51: 72:41:aa:c0:0c:73:be:b8:11:ec:24:0b:1e:b4:4a: 65:8e:b6:33:35:b8:3d:31:02:93:10:c2:15:20:6a: 1c:14:18:3f:0e:50:12:4e:b2:fd:40:8c:97:5f:2b: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:AD:F3:6A:A2:2E:1A:ED:86:34:DF:E1:B6:11:18:FC:B8:C0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:68:d9:1b:6f:1c:9e:a0:96:0a:be:b2:bf:1f:e6:7b:8b:c8: b4:fe:2a:94:75:6f:77:73:a0:d1:7f:00:52:2b:ca:29:40:bd: 75:f1:6d:bb:e1:63:ed:bd:da:11:77:15:ba:e6:8b:51:6b:b0: 6f:f6:9b:e6:72:17:75:74:0c:23:f3:a6:d0:5e:87:67:cf:0c: 5b:55:12:ea:83:c0:b0:6a:19:e3:11:d1:6f:5a:9c:d7:28:14: 39:e4:c2:17:ef:ae:28:df:b6:4a:04:1d:26:f8:55:32:51:e0: 1a:f4:84:50:a1:4b:d3:1f:8d:67:83:c5:79:ab:ae:90:cc:20: 4a:a7:fe:85:51:43:af:09:90:03:52:9b:cc:cc:95:4a:a2:6c: f7:34:a9:b2:26:e8:ef:0e:49:0e:1b:4d:2d:30:39:82:ad:92: 03:40:53:6c:cf:ef:62:be:89:da:68:d4:e6:bb:3f:f6:2b:6f: 39:45:c7:f1:44:c2:49:9b:e1:23:3f:8c:dd:5f:4a:18:2b:e9: 6f:e9:84:eb:aa:62:02:31:91:3e:97:e9:5c:05:a2:82:26:d0: 26:3b:93:dd:97:f4:80:69:32:9a:73:d6:30:58:5d:f1:94:bc: 70:01:5b:59:ce:c0:dc:51:e4:05:84:78:4b:af:62:df:cd:12: d5:08:82:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmmhVHwo7m0zkUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmYwNzJhZGMtNmZiNy00ZjNkLTk2ZjMtZTBkNmFhZGUyNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohpOVEYIt0ZAaUnQTHRvcErF5K1qHLzBr8d5 Yg3c5Cr1HFegpTk/0mKJYvg5rdkXqoWoiA2H5xukKKpz+N09D4b0gGep+gY8WbnR mp8eGOssXF9pi9Hc3s+LgtxA4ME3YeXVWKlyUEVyC2YKO0htkcU6ztEHjImPWSeq 2PalzL+wmd+NsCo3PKdC6TycJz3fmvMF4RIfk7Jp04oYnzq+VWezSmxm70042Dl3 dqrYC878Xg5ez/gDsukPODz0yE58zUmb2cEEQ4xS8vXm0elVpVFyQarADHO+uBHs JAsetEpljrYzNbg9MQKTEMIVIGocFBg/DlASTrL9QIyXXyv1RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8ArfNqoi4a7YY03+G2ERj8uMAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGFiMTMzMWEtNDI2OS0z ZDM1LTkzMzAtMTg0ZGRmODRiNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKto2RtvHJ6glgq+sr8f5nuLyLT+KpR1b3dzoNF/AFIryilAvXXxbbvh Y+292hF3Fbrmi1FrsG/2m+ZyF3V0DCPzptBeh2fPDFtVEuqDwLBqGeMR0W9anNco FDnkwhfvrijftkoEHSb4VTJR4Br0hFChS9MfjWeDxXmrrpDMIEqn/oVRQ68JkANS m8zMlUqibPc0qbIm6O8OSQ4bTS0wOYKtkgNAU2zP72K+idpo1Oa7P/YrbzlFx/FE wkmb4SM/jN1fShgr6W/phOuqYgIxkT6X6VwFooIm0CY7k92X9IBpMppz1jBYXfGU vHABW1nOwNxR5AWEeEuvYt/NEtUIgos= -----END CERTIFICATE-----Generated at Wed Jul 29 09:30:00 2026 by rpki-client