$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c170d54-4da9-31f4-a6ee-a30d91a8a68d.roa File: 3c170d54-4da9-31f4-a6ee-a30d91a8a68d.roa (raw, json) Hash identifier: lM3iJdDrmIEfGjTb+tq3upGkmlBEFIv3B3S+jjNGDiw= Subject key identifier: 4A:9A:39:B5:6F:2A:CC:D3:0A:39:2E:E1:34:1F:D9:DB:3C:91:AC:62 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AF9514A8A1EEA895C70A19000 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c170d54-4da9-31f4-a6ee-a30d91a8a68d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 30058 IP address blocks: 67.159.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4a:8a:1e:ea:89:5c:70:a1:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=b1fbd91e-54ef-4070-9c6c-bf6997286248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7c:37:b3:92:a9:d6:20:df:b3:4d:ac:d3:7c: 4f:02:75:61:ff:8c:34:db:fb:39:42:5e:71:a9:23: 4e:68:c0:44:eb:e3:6e:79:1c:eb:32:96:5f:d6:11: 17:20:9d:0a:6f:b7:f5:65:db:f5:8a:17:c1:0a:5b: 8b:ca:b5:65:c6:6a:ff:64:62:b7:cd:e1:03:b7:67: 2e:8b:9c:42:f7:8e:22:c5:84:58:d6:71:7d:58:81: 92:fa:d2:09:39:ee:22:b6:9b:92:e3:2a:f1:41:0f: 5b:fb:d1:aa:ed:8d:e7:22:8b:e7:9d:26:78:c7:38: 4d:b9:e5:66:77:77:bb:34:86:f5:ae:6a:2b:cb:3d: 06:ce:cb:82:61:33:f2:60:dd:51:84:82:2d:43:1b: ed:2e:e9:15:7f:ec:55:a0:f3:c1:13:da:b3:73:8b: c4:27:d6:0c:ff:75:b7:94:27:3a:eb:f2:a9:12:20: d4:c4:23:0a:f0:05:c0:57:62:e1:5d:b0:1d:ac:27: 30:19:27:7c:d8:e0:ea:a0:5e:64:2c:13:83:86:1c: 2c:12:9d:fd:30:16:3e:6a:1f:98:87:7b:34:26:1f: fe:cf:a6:75:2a:cb:69:9c:29:0f:c4:09:94:f7:f4: e7:aa:30:f4:a9:6f:f3:26:90:da:05:fc:5f:13:de: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:39:B5:6F:2A:CC:D3:0A:39:2E:E1:34:1F:D9:DB:3C:91:AC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c170d54-4da9-31f4-a6ee-a30d91a8a68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4a:4f:b3:5e:98:5a:2e:c2:2c:3e:54:d6:bb:a2:ca:68:dd: 28:ad:12:3e:1a:96:92:25:04:77:68:9d:22:88:fc:f1:ee:eb: bd:21:82:bf:36:29:df:16:5f:ba:d5:d3:fc:b5:f7:a9:78:b9: 6a:4d:44:1e:e6:5c:cb:5c:ef:eb:c1:27:a5:aa:09:33:9f:24: f2:05:bf:c1:9e:37:85:4e:64:38:f5:e5:a5:1f:7c:05:db:57: a5:5f:94:bb:3c:d3:e8:90:e1:6a:9b:9a:86:1a:eb:5d:79:df: 30:74:75:14:ce:18:ba:70:5a:35:5d:40:f1:e6:97:3a:5c:be: f4:d7:95:eb:bc:40:62:de:68:22:fc:38:1b:17:24:d1:81:03: 0a:a2:e6:e0:4c:b7:20:93:5c:7a:47:c0:6c:52:5b:75:d3:e8: aa:a8:b0:ff:e2:c6:fa:3b:2a:29:32:9a:02:fb:e4:5e:83:b6: e4:ea:9d:e2:8a:42:1f:74:6a:8e:f3:21:21:82:6c:85:cd:a4: 09:dc:a0:e4:0d:f9:b7:6f:b5:1a:92:19:b8:c2:fd:c2:3a:3a: 13:2c:80:b0:97:62:52:80:e8:3d:08:b9:4c:0c:1f:17:98:2f: 42:84:46:c7:8b:2a:fb:bb:41:39:eb:e8:2e:ef:e4:89:cf:7f: 5d:f6:32:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUqKHuqJXHChkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjFmYmQ5MWUtNTRlZi00MDcwLTljNmMtYmY2OTk3Mjg2MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnw3s5Kp1iDfs02s03xPAnVh/4w02/s5Ql5x qSNOaMBE6+NueRzrMpZf1hEXIJ0Kb7f1Zdv1ihfBCluLyrVlxmr/ZGK3zeEDt2cu i5xC944ixYRY1nF9WIGS+tIJOe4itpuS4yrxQQ9b+9Gq7Y3nIovnnSZ4xzhNueVm d3e7NIb1rmoryz0GzsuCYTPyYN1RhIItQxvtLukVf+xVoPPBE9qzc4vEJ9YM/3W3 lCc66/KpEiDUxCMK8AXAV2LhXbAdrCcwGSd82ODqoF5kLBODhhwsEp39MBY+ah+Y h3s0Jh/+z6Z1KstpnCkPxAmU9/TnqjD0qW/zJpDaBfxfE96g2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqaObVvKszTCjku4TQf2ds8kaxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvM2MxNzBkNTQtNGRhOS0z MWY0LWE2ZWUtYTMwZDkxYThhNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ58oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9KT7NemFouwiw+VNa7ospo3SitEj4alpIlBHdonSKI/PHu670hgr82 Kd8WX7rV0/y196l4uWpNRB7mXMtc7+vBJ6WqCTOfJPIFv8GeN4VOZDj15aUffAXb V6VflLs80+iQ4WqbmoYa61153zB0dRTOGLpwWjVdQPHmlzpcvvTXleu8QGLeaCL8 OBsXJNGBAwqi5uBMtyCTXHpHwGxSW3XT6KqosP/ixvo7KikymgL75F6DtuTqneKK Qh90ao7zISGCbIXNpAncoOQN+bdvtRqSGbjC/cI6OhMsgLCXYlKA6D0IuUwMHxeY L0KERseLKvu7QTnr6C7v5InPf132MnM= -----END CERTIFICATE-----Generated at Sun Sep 7 03:52:35 2025 by rpki-client