$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa File: 961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa (raw, json) Hash identifier: v3wCPwxJS/bJNExvY0Cv9unohaSZvmt3gn9Yf1gsclg= Subject key identifier: 78:6C:C0:F7:13:7F:D6:E1:3F:80:B6:BF:B1:1D:88:24:93:B1:C2:BA Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AF9514A67F861BC8A629F2F00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 174 IP address blocks: 67.159.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4a:67:f8:61:bc:8a:62:9f:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=9a7dc9eb-90ba-431b-a34f-3ffd7a2ad310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:74:b6:c6:12:44:a7:2e:b3:3c:6c:25:85: 12:36:3d:f4:9f:07:8a:35:70:aa:ce:20:de:4c:02: cf:72:8a:65:f8:54:27:bf:94:7d:e3:9c:50:48:b6: ee:30:fe:35:58:ce:dc:ad:d9:ed:d6:ae:97:5b:80: 8e:ad:5d:ca:f2:1d:cc:fe:29:39:b1:a4:10:3b:81: 94:6b:08:7d:ea:fa:2b:b8:14:0d:9f:ca:3f:48:98: 6c:37:24:7f:9e:96:57:fe:c0:1a:b3:3d:db:16:5d: b2:e0:38:c1:b3:e0:3d:19:5e:5f:69:a9:21:fc:df: e3:57:40:7a:90:27:7e:3d:5c:a9:84:31:fc:5a:05: aa:07:be:49:4e:58:6b:f4:b0:fc:af:5b:9e:2e:e9: f0:86:d6:f2:67:9b:c2:32:6a:64:e5:c3:de:6c:0d: 15:84:c1:06:0a:6c:14:91:5a:b1:ef:74:09:7b:95: 58:59:9c:5e:b7:39:c8:eb:74:86:89:d1:0a:da:7e: 50:28:06:35:56:60:c1:70:e9:50:cc:80:13:b3:82: 85:ef:ea:42:71:b2:37:1a:1d:7f:13:11:5d:3b:69: a0:fd:4c:88:73:54:71:91:a5:61:5b:57:7c:c2:ae: 57:af:a6:5e:f3:de:04:45:c6:c1:70:25:39:ac:67: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6C:C0:F7:13:7F:D6:E1:3F:80:B6:BF:B1:1D:88:24:93:B1:C2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:33:6c:33:dc:d1:41:d6:4c:2d:6f:18:85:6f:67:19:1a:c4: c2:18:23:02:31:44:6f:61:43:b9:93:54:62:49:59:08:bd:e4: 79:9e:1d:5e:11:57:28:4e:06:7b:b0:dd:67:7f:6f:b2:ad:f7: 59:e9:7c:91:ce:a2:58:2a:71:53:29:28:b5:77:89:56:12:c4: 3e:60:0e:ea:16:f9:2f:03:29:f2:48:f5:2b:71:76:e3:6a:0f: ff:b7:64:31:2d:42:47:43:a5:0b:99:eb:6e:1b:bd:59:3e:32: d6:97:ec:2c:ed:da:4d:a9:7e:be:80:7e:44:e4:28:f2:f8:aa: 3e:3f:5c:23:a0:d0:e3:96:dd:33:65:e1:af:11:6b:a4:a2:98: 8e:49:b6:d7:f8:c6:43:2d:76:94:76:2f:1c:50:2e:4e:13:02: 84:38:0d:1c:ca:4b:24:b9:7c:7e:51:c7:ad:da:7a:89:1f:7e: 3f:8a:cf:42:0e:9a:75:44:1d:ac:6b:be:bb:b7:20:40:a7:f2: 02:f1:91:a0:2c:b5:f2:dd:6b:1d:8b:05:77:82:99:b7:c8:b2: d7:b7:e1:6c:0c:84:cb:f1:5e:5c:b4:66:c9:b3:72:99:2f:53: 14:98:f2:3b:36:1d:f2:dd:41:5d:f5:8d:ee:4f:8f:91:77:da: aa:0f:b6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUpn+GG8imKfLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OWE3ZGM5ZWItOTBiYS00MzFiLWEzNGYtM2ZmZDdhMmFkMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PB0tsYSRKcuszxsJYUSNj30nweKNXCqziDe TALPcopl+FQnv5R945xQSLbuMP41WM7crdnt1q6XW4COrV3K8h3M/ik5saQQO4GU awh96voruBQNn8o/SJhsNyR/npZX/sAasz3bFl2y4DjBs+A9GV5faakh/N/jV0B6 kCd+PVyphDH8WgWqB75JTlhr9LD8r1ueLunwhtbyZ5vCMmpk5cPebA0VhMEGCmwU kVqx73QJe5VYWZxetznI63SGidEK2n5QKAY1VmDBcOlQzIATs4KF7+pCcbI3Gh1/ ExFdO2mg/UyIc1RxkaVhW1d8wq5Xr6Ze894ERcbBcCU5rGc1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhswPcTf9bhP4C2v7EdiCSTscK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTYxYjUyMTktOWZiOS0z ZDVhLWI2ZWYtNGZiMDUyYmQxMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ58oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkzbDPc0UHWTC1vGIVvZxkaxMIYIwIxRG9hQ7mTVGJJWQi95HmeHV4R VyhOBnuw3Wd/b7Kt91npfJHOolgqcVMpKLV3iVYSxD5gDuoW+S8DKfJI9StxduNq D/+3ZDEtQkdDpQuZ624bvVk+MtaX7Czt2k2pfr6AfkTkKPL4qj4/XCOg0OOW3TNl 4a8Ra6SimI5Jttf4xkMtdpR2LxxQLk4TAoQ4DRzKSyS5fH5Rx63aeokffj+Kz0IO mnVEHaxrvru3IECn8gLxkaAstfLdax2LBXeCmbfIste34WwMhMvxXly0Zsmzcpkv UxSY8js2HfLdQV31je5Pj5F32qoPtvg= -----END CERTIFICATE-----Generated at Thu Sep 18 06:36:54 2025 by rpki-client