$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa File: b246ad75-ecad-3443-88db-9306bb30ede8.roa (raw, json) Hash identifier: +cxJlnfktoE15UtedMaLJdV1FRxP8e9QgdD7KGDJxhs= Subject key identifier: FA:88:88:68:BC:DC:A5:EB:8B:00:B3:FF:6F:13:48:E1:87:E5:40:64 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5DD1F4F1AED486AB81050A80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 1239 IP address blocks: 67.159.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f4:f1:ae:d4:86:ab:81:05:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=d4dfca5f-ea04-4807-b85c-d24ad30db6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:45:c3:d3:05:46:74:02:43:cf:cf:a2:89: 4a:f4:1d:70:84:6c:49:e9:a7:aa:7a:fb:6f:02:86: 4f:47:19:01:04:78:ca:2a:48:fb:13:40:30:59:9c: 25:86:c6:95:7c:ee:28:3d:82:88:9d:ec:e2:27:63: 1c:63:26:ff:a4:23:59:17:6e:59:d2:c5:3c:4f:01: f1:e9:da:56:e8:23:3b:f6:07:96:38:6c:dc:90:5a: 48:8b:46:b6:5a:d0:f0:7b:3d:fc:66:4b:f9:89:87: 22:a6:28:5a:6e:c9:19:df:a8:9b:39:cd:86:59:43: a0:af:23:e5:39:32:46:25:e2:9f:f3:7d:82:17:80: 62:e0:9e:89:6f:23:58:48:66:86:f9:b9:49:d3:2a: 87:31:3f:c3:8c:0b:68:60:78:09:38:dd:5e:84:df: 4b:27:a6:f0:ea:21:14:45:0c:70:27:23:67:18:dc: 07:10:05:91:7f:87:61:60:02:63:dc:77:70:a6:9e: e2:a4:1c:eb:f1:6d:b1:54:da:87:13:50:46:bb:72: 44:e1:c4:4e:cd:55:fc:ba:b0:ed:b9:9a:06:ad:17: 3a:c7:9e:10:1d:54:86:df:6c:f0:41:89:d4:cc:69: 7f:37:73:70:62:de:e0:dd:88:50:6d:05:47:f4:0e: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:88:88:68:BC:DC:A5:EB:8B:00:B3:FF:6F:13:48:E1:87:E5:40:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:83:b5:06:ea:be:27:28:bc:78:5d:85:a5:16:44:65:1f:2e: 2a:49:a1:ed:2e:a7:11:06:94:a2:64:df:71:ad:7d:5e:05:ed: 3e:bc:af:43:f6:25:ee:0b:94:3c:bb:b2:88:4f:29:f9:42:6a: 1a:1c:e9:b5:bf:a9:b5:b0:b4:e7:9c:57:2a:c3:67:f4:2e:d1: 55:49:70:23:d4:11:18:7e:6e:93:87:48:d9:9b:08:de:9c:1b: d1:15:47:dc:60:81:63:3c:ba:42:a0:10:79:ec:13:af:84:de: 7d:3e:4e:c9:14:74:60:3a:c6:7a:cf:ed:a1:86:be:a4:c5:17: 01:33:29:3d:72:fb:a0:02:14:e6:02:6c:1c:a7:25:14:f5:ee: 5b:08:a8:28:aa:49:32:04:89:c7:6b:c6:b5:ab:25:f9:e1:a9: 0a:8f:34:99:75:45:ff:f3:26:37:c8:88:7b:ad:6f:ec:11:0c: 21:69:3f:9b:48:eb:9a:fb:f7:28:07:47:c7:2d:8a:4f:09:cf: bd:ea:6e:26:69:ef:50:5f:ec:85:8c:1f:77:c8:4f:45:08:d7: 9b:42:62:08:d2:7f:e9:1b:84:0a:bf:93:d8:8d:57:08:98:73: d3:84:11:e1:7d:2c:48:fd:79:07:6a:e6:70:17:f2:a3:31:d5: ea:9e:63:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fTxrtSGq4EFCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDRkZmNhNWYtZWEwNC00ODA3LWI4NWMtZDI0YWQzMGRiNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9RFw9MFRnQCQ8/PoolK9B1whGxJ6aeqevtv AoZPRxkBBHjKKkj7E0AwWZwlhsaVfO4oPYKIneziJ2McYyb/pCNZF25Z0sU8TwHx 6dpW6CM79geWOGzckFpIi0a2WtDwez38Zkv5iYcipihabskZ36ibOc2GWUOgryPl OTJGJeKf832CF4Bi4J6JbyNYSGaG+blJ0yqHMT/DjAtoYHgJON1ehN9LJ6bw6iEU RQxwJyNnGNwHEAWRf4dhYAJj3Hdwpp7ipBzr8W2xVNqHE1BGu3JE4cROzVX8urDt uZoGrRc6x54QHVSG32zwQYnUzGl/N3NwYt7g3YhQbQVH9A6K4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqIiGi83KXriwCz/28TSOGH5UBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjI0NmFkNzUtZWNhZC0z NDQzLTg4ZGItOTMwNmJiMzBlZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2DtQbqvicovHhdhaUWRGUfLipJoe0upxEGlKJk33GtfV4F7T68r0P2 Je4LlDy7sohPKflCahoc6bW/qbWwtOecVyrDZ/Qu0VVJcCPUERh+bpOHSNmbCN6c G9EVR9xggWM8ukKgEHnsE6+E3n0+TskUdGA6xnrP7aGGvqTFFwEzKT1y+6ACFOYC bBynJRT17lsIqCiqSTIEicdrxrWrJfnhqQqPNJl1Rf/zJjfIiHutb+wRDCFpP5tI 65r79ygHR8ctik8Jz73qbiZp71Bf7IWMH3fIT0UI15tCYgjSf+kbhAq/k9iNVwiY c9OEEeF9LEj9eQdq5nAX8qMx1eqeYwk= -----END CERTIFICATE-----Generated at Fri Oct 24 08:41:46 2025 by rpki-client