$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa File: 68297118-8e1b-3493-8b7f-527471d8a180.roa (raw, json) Hash identifier: yPlJBSt/F9Jq+95QldXSegQiOtJBExRGggmU7sh1i1Y= Subject key identifier: 2F:B1:A1:AC:FE:A1:E0:08:46:28:70:E3:05:EC:2B:E7:19:C2:52:70 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F30527D9661D3E9DB685A3480 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 30058 IP address blocks: 67.159.24.0/23 maxlen: 23 67.159.28.0/24 maxlen: 24 67.159.29.0/24 maxlen: 24 2001:49f0:d11a::/48 maxlen: 48 2001:49f0:d124::/48 maxlen: 48 2001:49f0:d125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7d:96:61:d3:e9:db:68:5a:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=faf8a254-49a7-430b-8b86-4b01e8c96d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:6d:8b:a4:2a:3a:7a:bb:79:63:48:76:c6: da:fd:72:d1:79:b4:23:c0:f1:c2:2e:8b:d0:f5:86: 38:4f:5c:33:cb:43:0a:90:6c:4b:4b:5d:2c:53:0e: 4f:7b:d2:3b:a5:10:13:f0:31:f3:39:5d:a4:fe:6a: e6:ce:9a:54:85:29:f3:56:65:79:dd:64:5f:98:b5: 76:7e:6c:0b:48:77:d6:9b:8d:12:c4:b4:9f:f2:83: bf:72:06:dd:17:6d:9f:7f:27:60:70:8b:6d:19:94: 2b:eb:f4:fa:48:c9:50:7f:c5:b3:83:da:4e:b5:c9: 04:d3:07:73:7c:59:9a:5b:97:48:fa:8c:e9:bc:8e: 6a:54:a7:97:cb:99:89:2e:3d:14:a4:6f:c2:d1:c9: 8e:32:c3:e5:6b:90:68:85:50:59:ae:1a:7f:1f:65: d8:ed:30:e2:49:b5:a2:90:a6:96:7b:ce:ba:bc:a3: b5:a3:f0:5b:50:13:9f:e9:b5:d7:7b:f0:fa:fb:72: 78:e7:8d:80:3b:48:7a:55:41:97:58:58:da:9a:6f: df:40:11:e5:b0:4e:87:4d:46:62:c2:0b:b4:30:65: 5e:cd:82:b8:9f:11:5c:ff:ab:23:d8:31:de:fc:1a: 75:f7:0a:b1:b3:98:f3:3e:70:e6:e2:80:94:36:84: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B1:A1:AC:FE:A1:E0:08:46:28:70:E3:05:EC:2B:E7:19:C2:52:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.24.0/23 67.159.28.0/23 IPv6: 2001:49f0:d11a::/48 2001:49f0:d124::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:36:55:52:01:48:7c:1c:dd:d8:ef:f1:c1:ad:85:8a:1f:d2: 35:af:4d:bf:fb:cf:96:57:2c:2a:4c:8e:8d:4d:fe:1a:23:0a: 62:f8:c9:01:ba:cf:96:15:cf:58:b5:7e:3e:53:4f:73:ff:b8: 03:b7:19:75:e9:19:21:e9:75:16:e6:bc:46:a5:47:ac:fd:7b: ec:f8:c0:0b:c6:34:19:e7:2c:f2:63:ed:4b:a0:4f:00:7f:6c: d8:a6:1e:27:71:21:d8:d2:3b:1a:37:03:5b:03:17:04:b8:78: cb:2a:d3:9d:f8:2d:50:34:6f:a9:1f:c9:fe:b0:e8:5c:ea:8a: 88:f9:75:d2:8e:1b:e5:37:ec:20:03:be:d6:a0:e4:0c:c1:50: f4:10:ee:67:67:e4:e1:9e:b7:64:70:2c:96:9e:19:78:41:7d: 00:3e:03:d9:19:52:df:00:c2:91:b7:c2:d7:a3:c0:93:19:68: 23:99:2b:5f:73:0f:76:7f:bd:60:90:d4:97:dd:13:27:d1:ce: 41:0c:91:d5:44:2b:08:f0:65:48:21:77:37:2e:2f:5a:3d:2a: ac:aa:80:08:20:6d:6d:af:60:ea:f7:8e:e3:4c:45:96:42:1f: 66:43:07:b9:15:70:4e:39:55:07:d3:e1:a5:65:29:a4:c8:d7: 4c:ce:25:fa -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE8wUn2WYdPp22haNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZmFmOGEyNTQtNDlhNy00MzBiLThiODYtNGIwMWU4Yzk2ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosRti6QqOnq7eWNIdsba/XLRebQjwPHCLovQ 9YY4T1wzy0MKkGxLS10sUw5Pe9I7pRAT8DHzOV2k/mrmzppUhSnzVmV53WRfmLV2 fmwLSHfWm40SxLSf8oO/cgbdF22ffydgcIttGZQr6/T6SMlQf8Wzg9pOtckE0wdz fFmaW5dI+ozpvI5qVKeXy5mJLj0UpG/C0cmOMsPla5BohVBZrhp/H2XY7TDiSbWi kKaWe866vKO1o/BbUBOf6bXXe/D6+3J4542AO0h6VUGXWFjamm/fQBHlsE6HTUZi wgu0MGVezYK4nxFc/6sj2DHe/Bp19wqxs5jzPnDm4oCUNoS1KwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFC+xoaz+oeAIRihw4wXsK+cZwlJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjgyOTcxMTgtOGUxYi0z NDkzLThiN2YtNTI3NDcxZDhhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQ58YAwQB Q58cMBgEAgACMBIDBwAgAUnw0RoDBwEgAUnw0SQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMjZVUgFIfBzd 2O/xwa2Fih/SNa9Nv/vPllcsKkyOjU3+GiMKYvjJAbrPlhXPWLV+PlNPc/+4A7cZ dekZIel1Fua8RqVHrP177PjAC8Y0Gecs8mPtS6BPAH9s2KYeJ3Eh2NI7GjcDWwMX BLh4yyrTnfgtUDRvqR/J/rDoXOqKiPl10o4b5TfsIAO+1qDkDMFQ9BDuZ2fk4Z63 ZHAslp4ZeEF9AD4D2RlS3wDCkbfC16PAkxloI5krX3MPdn+9YJDUl90TJ9HOQQyR 1UQrCPBlSCF3Ny4vWj0qrKqACCBtba9g6veO40xFlkIfZkMHuRVwTjlVB9PhpWUp pMjXTM4l+g== -----END CERTIFICATE-----Generated at Fri Oct 9 20:49:38 2026 by rpki-client