$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa File: f6597ddb-566e-34d1-b4be-8f610de150d4.roa (raw, json) Hash identifier: AC4Xsy/cqs5wLsxlS+F4MFMVfzp5YZLKWLffEtuShMQ= Subject key identifier: 3A:70:F6:48:FA:FE:44:4C:B4:78:ED:49:83:ED:18:4B:29:53:85:14 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BB02D023EE1943D7C7FE8A080 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 1239 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:02:3e:e1:94:3d:7c:7f:e8:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=8ccc3983-f922-4bb1-88a0-5cfc03b59b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:91:82:2b:26:a1:ce:19:ea:39:7d:99:ca: 39:15:10:29:3b:cc:34:db:46:fb:87:f3:e8:ee:b6: 54:3c:49:a3:dc:65:e4:32:f7:9d:49:dd:a6:71:3b: 85:c0:ad:0c:47:69:77:45:0e:a0:39:01:70:da:0c: f5:62:49:22:ac:42:69:94:4e:0a:f6:1f:8d:ef:e6: 0a:f5:25:a0:57:5e:4f:4a:13:4a:a6:8c:5a:17:17: 6c:8c:c2:17:31:d1:3a:93:9e:be:cd:0e:ae:83:ba: fe:51:8b:fb:77:d5:a9:b0:b1:20:fd:1b:2f:59:70: 48:75:90:a2:1d:93:a3:7c:b9:08:18:23:11:35:99: 5a:f7:36:bb:18:3c:10:b1:30:0d:88:99:92:61:fb: bc:da:7f:fe:56:05:e6:5c:52:90:f2:90:66:0c:64: 32:1e:cb:55:4a:63:dc:6f:0d:76:35:81:9d:2f:32: a5:a8:24:77:f4:2a:80:69:03:2a:ba:54:93:25:0a: cd:bb:77:c2:37:c9:2d:18:4f:20:a6:a5:3d:33:e8: 49:dc:2e:de:25:7f:ee:4a:ec:90:b7:83:6b:88:a7: 75:f0:4c:8d:5c:05:f0:0a:90:b6:a7:07:78:dc:6e: 78:1d:10:d1:16:49:bd:36:a8:03:90:09:a0:df:2b: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:70:F6:48:FA:FE:44:4C:B4:78:ED:49:83:ED:18:4B:29:53:85:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:22:8b:8f:ab:ea:82:76:94:e0:93:c5:9d:04:56:b5:7a:4b: 33:12:9a:f2:b2:d8:5e:5a:52:e7:31:81:e7:a0:bb:b4:6b:59: 07:44:93:a2:d9:f6:03:79:b0:8f:f9:4f:43:42:71:79:14:22: 87:8e:04:de:45:86:2b:0e:3d:cc:0b:ca:fb:5d:d7:39:e2:5d: b0:3d:ca:94:2f:cf:0f:6d:0a:66:b3:07:ae:30:58:b6:ac:84: 54:b1:8a:60:a3:9b:9c:52:f1:89:02:cb:f2:62:83:4f:6f:aa: eb:2d:25:c4:0b:c2:a4:b1:a2:d1:b5:f6:20:d2:fa:17:07:37: ef:3b:b7:47:a5:3a:c0:c2:ee:e7:87:6a:e1:61:7e:ff:8f:1e: b9:b3:05:df:dd:be:01:d8:49:60:e3:f7:fb:00:19:da:8d:4e: c9:d4:c8:46:b5:19:dd:8c:17:6c:7f:72:ae:7f:89:50:d8:d0: d0:23:94:7b:52:2a:70:27:5d:36:ef:6b:48:79:13:ba:81:9d: 78:f5:e5:11:33:57:99:68:de:03:8c:8d:a7:20:4a:97:f6:b2: 8f:4c:a8:57:3a:a2:0a:27:85:ac:b5:db:ef:de:4e:0d:f1:66: 17:f3:8d:33:34:33:1d:d1:39:b0:1f:4a:e8:8d:9e:ec:a0:a7: 50:4d:0b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQI+4ZQ9fH/ooIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk OGNjYzM5ODMtZjkyMi00YmIxLTg4YTAtNWNmYzAzYjU5YjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnomRgismoc4Z6jl9mco5FRApO8w020b7h/Po 7rZUPEmj3GXkMvedSd2mcTuFwK0MR2l3RQ6gOQFw2gz1YkkirEJplE4K9h+N7+YK 9SWgV15PShNKpoxaFxdsjMIXMdE6k56+zQ6ug7r+UYv7d9WpsLEg/RsvWXBIdZCi HZOjfLkIGCMRNZla9za7GDwQsTANiJmSYfu82n/+VgXmXFKQ8pBmDGQyHstVSmPc bw12NYGdLzKlqCR39CqAaQMqulSTJQrNu3fCN8ktGE8gpqU9M+hJ3C7eJX/uSuyQ t4NriKd18EyNXAXwCpC2pwd43G54HRDRFkm9NqgDkAmg3ysY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpw9kj6/kRMtHjtSYPtGEspU4UUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjY1OTdkZGItNTY2ZS0z NGQxLWI0YmUtOGY2MTBkZTE1MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0ii4+r6oJ2lOCTxZ0EVrV6SzMSmvKy2F5aUucxgeegu7RrWQdEk6LZ 9gN5sI/5T0NCcXkUIoeOBN5FhisOPcwLyvtd1zniXbA9ypQvzw9tCmazB64wWLas hFSximCjm5xS8YkCy/Jig09vqustJcQLwqSxotG19iDS+hcHN+87t0elOsDC7ueH auFhfv+PHrmzBd/dvgHYSWDj9/sAGdqNTsnUyEa1Gd2MF2x/cq5/iVDY0NAjlHtS KnAnXTbva0h5E7qBnXj15REzV5lo3gOMjacgSpf2so9MqFc6ogonhay12+/eTg3x ZhfzjTM0Mx3RObAfSuiNnuygp1BNCyQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:58 2025 by rpki-client