$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa File: f6597ddb-566e-34d1-b4be-8f610de150d4.roa (raw, json) Hash identifier: XL2nF/KGpq1/aXqoKItPBsgKLQKsNKkWmvT0MAAh4qk= Subject key identifier: 23:5E:66:AF:C9:F9:FA:58:3E:8B:F1:5F:1B:66:C4:44:21:D6:CB:47 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584EF2E77000E57BFF597AF07600 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 1239 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:70:00:e5:7b:ff:59:7a:f0:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=da6c9800-189f-4883-a350-df65a125ca91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:4b:5e:4b:87:5b:ca:46:cf:75:90:2e:09: df:3c:b6:09:da:c2:15:d5:ff:05:4e:df:d9:13:74: 99:e7:48:1b:ec:1f:98:eb:fb:61:f9:1a:00:bc:7d: e2:bd:01:d0:0c:d4:4c:98:e3:10:e4:31:60:44:c7: af:b0:84:fe:1a:37:d9:57:f3:93:38:97:a5:4a:05: 96:ab:a1:df:ba:cd:78:dd:4b:25:93:65:b6:44:37: 38:e8:4d:16:1b:9e:ed:be:f4:6d:82:af:50:0c:c7: e1:a5:0c:2a:cf:d9:95:88:63:69:55:2d:dc:14:81: 5f:65:a2:9b:b0:67:60:ff:c9:9e:11:61:83:1f:a7: d5:3e:a0:3d:a3:db:6c:bb:17:74:d9:aa:38:13:c6: 10:67:70:3e:a6:a7:09:8f:e6:6d:49:1a:c9:cc:27: 06:c0:1f:f1:37:08:59:32:41:95:c0:82:0f:e2:db: c5:fe:26:3f:12:7b:ca:9f:fd:08:ba:48:d6:1a:d8: d4:1a:2e:ae:f7:07:16:65:38:58:3f:3f:ae:37:36: 86:d5:90:50:8f:35:29:86:16:be:19:26:06:5d:5b: 39:a0:06:e7:37:83:58:81:19:ee:bd:d6:77:b6:d0: 54:d1:2b:cd:5c:fa:13:3c:67:65:5b:d7:f6:8c:09: 97:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:66:AF:C9:F9:FA:58:3E:8B:F1:5F:1B:66:C4:44:21:D6:CB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:86:13:5a:91:bc:78:2e:b6:d2:59:11:59:bf:df:6f:a1:2b: 3a:11:dc:0b:2c:c7:36:b0:94:ff:fe:70:a3:b1:17:0d:6c:d4: 40:aa:d6:93:c2:0e:12:47:a5:22:bf:cb:93:c9:c9:70:9f:bf: 85:11:e2:7e:eb:85:fa:f7:d9:ba:e4:a3:d0:0d:60:d8:b1:3e: ef:92:8f:2c:85:13:84:c7:d5:9c:b3:74:62:b6:1a:36:5d:cb: 67:66:06:32:54:59:d4:6d:05:ef:bb:da:bc:1a:1c:7e:05:7b: 9a:66:46:eb:fe:83:81:22:eb:17:4c:38:a1:dd:22:49:bc:8b: 25:ba:44:a1:28:88:dd:d9:05:c3:ba:9c:ab:3e:7d:83:07:0a: 36:80:b7:e9:a2:a5:d9:e5:9e:13:33:7a:48:fe:d7:a2:0e:a7: b2:80:4b:84:a5:b9:fd:9c:31:43:07:d1:2a:26:b7:3f:25:0a: 17:e1:ef:f1:b3:44:ea:22:9b:1f:16:0e:40:f5:67:22:e7:c0: 81:12:38:6d:cc:67:8e:5e:9b:38:05:01:13:e5:af:19:61:d1: ca:d2:21:25:93:94:d3:7a:c3:9c:5d:09:c6:3e:3c:04:d0:51: e2:d1:a6:ea:0f:33:ac:87:90:22:5a:c9:af:18:d2:01:66:45: fc:07:06:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53AA5Xv/WXrwdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZGE2Yzk4MDAtMTg5Zi00ODgzLWEzNTAtZGY2NWExMjVjYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDFLXkuHW8pGz3WQLgnfPLYJ2sIV1f8FTt/Z E3SZ50gb7B+Y6/th+RoAvH3ivQHQDNRMmOMQ5DFgRMevsIT+GjfZV/OTOJelSgWW q6Hfus143Uslk2W2RDc46E0WG57tvvRtgq9QDMfhpQwqz9mViGNpVS3cFIFfZaKb sGdg/8meEWGDH6fVPqA9o9tsuxd02ao4E8YQZ3A+pqcJj+ZtSRrJzCcGwB/xNwhZ MkGVwIIP4tvF/iY/EnvKn/0IukjWGtjUGi6u9wcWZThYPz+uNzaG1ZBQjzUphha+ GSYGXVs5oAbnN4NYgRnuvdZ3ttBU0SvNXPoTPGdlW9f2jAmXdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNeZq/J+fpYPovxXxtmxEQh1stHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjY1OTdkZGItNTY2ZS0z NGQxLWI0YmUtOGY2MTBkZTE1MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiGE1qRvHguttJZEVm/32+hKzoR3AssxzawlP/+cKOxFw1s1ECq1pPC DhJHpSK/y5PJyXCfv4UR4n7rhfr32brko9ANYNixPu+SjyyFE4TH1ZyzdGK2GjZd y2dmBjJUWdRtBe+72rwaHH4Fe5pmRuv+g4Ei6xdMOKHdIkm8iyW6RKEoiN3ZBcO6 nKs+fYMHCjaAt+mipdnlnhMzekj+16IOp7KAS4Sluf2cMUMH0Somtz8lChfh7/Gz ROoimx8WDkD1ZyLnwIESOG3MZ45emzgFARPlrxlh0crSISWTlNN6w5xdCcY+PATQ UeLRpuoPM6yHkCJaya8Y0gFmRfwHBhI= -----END CERTIFICATE-----Generated at Tue Sep 22 11:11:25 2026 by rpki-client