$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa File: 3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa (raw, json) Hash identifier: ihg6KAK3kyc6wrglGK4cdAlv9PjIvfOJsRBOjaUbeyI= Subject key identifier: 9F:6E:81:D0:6B:53:D1:EB:6F:71:43:BB:45:BE:FB:5A:A0:4F:5F:DD Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5DD1F4B1247E74765CC8A068 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 174 IP address blocks: 67.159.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f4:b1:24:7e:74:76:5c:c8:a0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=23347e34-3733-414c-b681-f03dcbb94d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:da:0f:bf:a5:24:b9:ef:b5:f5:c0:99:65: 06:fa:47:ac:76:56:a9:0b:0e:40:fd:56:fb:82:75: d9:98:fd:09:37:92:6f:cf:23:ba:17:9e:bb:3a:05: 9f:7a:51:5e:90:06:7d:79:fd:4a:76:3e:da:eb:cb: 04:33:79:35:a1:1f:1b:75:cb:6f:c2:a7:18:d4:42: 96:f4:60:ea:2c:7d:92:d3:e9:40:e8:69:96:6c:f8: b5:72:20:32:6e:af:a7:82:78:31:f5:b5:92:09:03: 98:3a:14:5c:86:51:35:42:d1:98:c7:fb:b2:84:a5: 9b:63:ee:20:1d:a4:f1:18:8d:30:88:af:65:bb:1f: b4:c7:08:5a:a2:3e:9f:a7:64:b2:83:15:e6:35:68: 2f:7c:67:22:af:77:ac:a2:d8:9f:09:96:78:b1:76: a5:68:85:26:42:43:2a:40:bc:b6:f9:d3:cc:57:99: 1b:e2:bd:87:55:6f:e9:8e:84:17:c5:f1:4f:12:0b: c6:2d:29:22:d2:7c:9a:92:1a:4a:9f:e5:41:3a:37: fb:25:58:9b:24:f1:39:0d:bc:7f:93:cb:97:8d:52: 14:1c:e3:4b:f7:7f:87:08:78:f8:bd:b5:0f:37:1a: e9:38:51:9f:37:be:7c:a7:63:95:d3:e2:7c:83:2d: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6E:81:D0:6B:53:D1:EB:6F:71:43:BB:45:BE:FB:5A:A0:4F:5F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ec:17:0c:3b:02:7c:90:6d:0e:f1:0f:7a:15:3b:1c:79:e6: 71:d2:03:ba:9d:c8:91:b5:a0:2a:01:11:97:4f:ab:26:63:ec: 53:fd:f8:fe:55:26:a5:93:c7:1a:29:86:e0:9b:ec:5c:9d:24: 4c:dc:3e:ed:60:06:18:91:45:34:23:ba:be:62:6d:4b:60:6c: 98:8b:be:4d:fa:89:67:56:d1:ab:4a:b5:0a:49:d2:5a:e1:6a: df:67:e7:02:ec:aa:59:7d:51:b0:af:f5:76:4b:86:51:6c:70: f8:38:36:26:be:d1:23:d3:cf:66:89:bf:ce:ab:5d:62:a4:22: 8d:eb:95:1c:0f:4b:7e:70:b5:0a:98:2b:16:ad:3d:14:3a:34: bb:5a:67:12:ae:ab:3c:01:f4:88:21:77:9e:99:05:c9:23:89: d9:22:b9:31:f8:4b:5c:76:f2:cd:90:05:54:aa:f7:bf:2e:c2: 93:8b:19:ed:d3:ae:06:58:83:2d:34:b0:9a:42:3e:c2:0b:1e: fe:68:07:74:10:ed:5a:73:80:6a:78:60:75:28:c9:d8:22:1d: 18:fd:e3:d8:31:c7:29:a3:88:f9:db:f3:dd:78:15:f3:b1:82: ae:e4:cb:0a:10:2f:40:f7:a2:03:7c:bd:7e:7f:72:b2:7c:96: 90:68:ac:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fSxJH50dlzIoGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MjMzNDdlMzQtMzczMy00MTRjLWI2ODEtZjAzZGNiYjk0ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2zaD7+lJLnvtfXAmWUG+kesdlapCw5A/Vb7 gnXZmP0JN5JvzyO6F567OgWfelFekAZ9ef1Kdj7a68sEM3k1oR8bdctvwqcY1EKW 9GDqLH2S0+lA6GmWbPi1ciAybq+ngngx9bWSCQOYOhRchlE1QtGYx/uyhKWbY+4g HaTxGI0wiK9lux+0xwhaoj6fp2SygxXmNWgvfGcir3esotifCZZ4sXalaIUmQkMq QLy2+dPMV5kb4r2HVW/pjoQXxfFPEgvGLSki0nyakhpKn+VBOjf7JVibJPE5Dbx/ k8uXjVIUHONL93+HCHj4vbUPNxrpOFGfN758p2OV0+J8gy2rPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9ugdBrU9Hrb3FDu0W++1qgT1/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzE3MGZjOGItYWRiOS0z YmFkLWFiNmEtODY0MmE2YWYzN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrsFww7AnyQbQ7xD3oVOxx55nHSA7qdyJG1oCoBEZdPqyZj7FP9+P5V JqWTxxophuCb7FydJEzcPu1gBhiRRTQjur5ibUtgbJiLvk36iWdW0atKtQpJ0lrh at9n5wLsqll9UbCv9XZLhlFscPg4Nia+0SPTz2aJv86rXWKkIo3rlRwPS35wtQqY KxatPRQ6NLtaZxKuqzwB9Ighd56ZBckjidkiuTH4S1x28s2QBVSq978uwpOLGe3T rgZYgy00sJpCPsILHv5oB3QQ7VpzgGp4YHUoydgiHRj949gxxymjiPnb8914FfOx gq7kywoQL0D3ogN8vX5/crJ8lpBorMw= -----END CERTIFICATE-----Generated at Sun Oct 19 23:17:48 2025 by rpki-client