$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa File: f6597ddb-566e-34d1-b4be-8f610de150d4.roa (raw, json) Hash identifier: VSs8+5+W8CwToDxHLhzDucO/+GaKTKxu0svTdWhn2G4= Subject key identifier: 18:F0:30:DB:9E:7F:9D:32:E8:12:57:F2:19:51:C8:73:B7:48:9C:26 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F94D3502913C2E5ECFAA06D00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 1239 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:50:29:13:c2:e5:ec:fa:a0:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=becf706f-52e8-4cd4-86d9-fef64ada6f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:dc:b1:46:f8:63:aa:dd:92:bc:ce:46:2d: 0a:45:62:70:21:88:1b:8f:6a:32:d2:54:85:32:b1: 76:9b:b0:66:50:a5:c8:fd:ea:53:ab:62:c5:ca:74: e1:e9:4f:ff:a2:3a:55:f2:35:c4:f5:85:88:9a:b4: 8c:ac:72:90:81:4a:db:84:29:c9:4e:00:72:89:53: e5:97:7b:d1:e0:4d:cb:42:a0:a3:98:bf:c1:6d:8a: d5:ca:8a:85:8b:02:6e:74:82:3a:9c:bd:06:1d:87: 11:47:38:43:1d:c4:fe:07:74:ea:61:91:00:c8:18: e1:95:28:ae:fa:72:70:ab:16:07:5a:4d:2a:fa:b6: 41:db:ca:25:fe:e6:31:8b:5d:78:94:93:3f:58:2a: 69:2c:22:8a:d0:fc:5a:28:e4:68:b3:24:2d:be:58: 40:3d:e6:c6:81:e5:b2:f3:d2:93:1e:56:52:90:dd: 48:b5:43:71:cf:ac:d9:6d:8b:0a:a7:29:55:ad:84: 7a:20:ef:c2:63:c4:1d:84:df:33:30:76:48:c9:6e: d1:9a:fa:d8:c2:66:33:31:f4:2d:c7:b5:13:b4:94: 8a:ce:05:36:ad:66:70:10:7a:0c:c2:06:d8:46:07: 71:05:8c:ac:e6:1a:00:8e:8a:54:54:cb:3c:6f:5a: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F0:30:DB:9E:7F:9D:32:E8:12:57:F2:19:51:C8:73:B7:48:9C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f6597ddb-566e-34d1-b4be-8f610de150d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fb:00:9f:f9:06:b8:47:7b:a6:f4:6e:62:fb:8e:63:6d:a7: 57:3d:49:05:49:d0:ec:94:28:83:f3:02:0a:fc:b6:d0:78:a7: 7e:58:6f:6e:ec:10:c2:9b:63:2f:29:6e:0e:b1:2d:a9:c3:95: f4:6c:ed:f2:b5:91:e4:d1:c8:fe:ad:96:e5:db:f4:98:a8:64: 6e:f0:cb:a8:e8:9b:09:d0:c4:43:25:a7:11:51:09:8c:1d:27: b0:a6:3b:88:7e:a7:0e:1c:d4:cd:68:21:06:03:0c:64:bd:77: a5:3e:3c:47:dc:8a:e0:9b:a6:77:c5:6e:dc:96:e1:a8:d6:8d: e0:0b:aa:da:c3:7b:9f:5e:75:2e:d5:83:1d:c7:ba:54:dc:bd: ad:0c:00:1b:e6:b0:3f:a3:b5:4b:6c:7b:03:d0:37:45:25:fe: 64:ca:39:7b:92:4a:3c:f7:10:27:08:6c:fc:2f:48:93:ca:bb: 82:cd:8c:7e:c3:ed:35:f6:ac:11:9b:57:cc:76:f7:fe:1a:a1: 5d:88:94:e5:51:7c:a5:c0:08:13:33:9f:97:e9:d4:2d:d8:0b: 4d:09:d5:13:04:e9:d1:62:aa:40:2a:8b:81:ac:c1:ce:85:29: 9e:8b:cc:80:4c:ab:b1:f7:ca:b8:c2:dd:79:a0:a5:56:ef:23: 29:07:cd:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01ApE8Ll7PqgbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YmVjZjcwNmYtNTJlOC00Y2Q0LTg2ZDktZmVmNjRhZGE2ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDrcsUb4Y6rdkrzORi0KRWJwIYgbj2oy0lSF MrF2m7BmUKXI/epTq2LFynTh6U//ojpV8jXE9YWImrSMrHKQgUrbhCnJTgByiVPl l3vR4E3LQqCjmL/BbYrVyoqFiwJudII6nL0GHYcRRzhDHcT+B3TqYZEAyBjhlSiu +nJwqxYHWk0q+rZB28ol/uYxi114lJM/WCppLCKK0PxaKORosyQtvlhAPebGgeWy 89KTHlZSkN1ItUNxz6zZbYsKpylVrYR6IO/CY8QdhN8zMHZIyW7RmvrYwmYzMfQt x7UTtJSKzgU2rWZwEHoMwgbYRgdxBYys5hoAjopUVMs8b1oY3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjwMNuef50y6BJX8hlRyHO3SJwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjY1OTdkZGItNTY2ZS0z NGQxLWI0YmUtOGY2MTBkZTE1MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv7AJ/5BrhHe6b0bmL7jmNtp1c9SQVJ0OyUKIPzAgr8ttB4p35Yb27s EMKbYy8pbg6xLanDlfRs7fK1keTRyP6tluXb9JioZG7wy6jomwnQxEMlpxFRCYwd J7CmO4h+pw4c1M1oIQYDDGS9d6U+PEfciuCbpnfFbtyW4ajWjeALqtrDe59edS7V gx3HulTcva0MABvmsD+jtUtsewPQN0Ul/mTKOXuSSjz3ECcIbPwvSJPKu4LNjH7D 7TX2rBGbV8x29/4aoV2IlOVRfKXACBMzn5fp1C3YC00J1RME6dFiqkAqi4Gswc6F KZ6LzIBMq7H3yrjC3XmgpVbvIykHzVg= -----END CERTIFICATE-----Generated at Tue Oct 27 09:25:25 2026 by rpki-client