$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/894814b3-937c-32fa-a2e4-efc7919bbb38.roa File: 894814b3-937c-32fa-a2e4-efc7919bbb38.roa (raw, json) Hash identifier: zT1wI+CfsERhUVw5jUMC4xfU+so1qRVZfUC24kLE41s= Subject key identifier: BA:A6:0C:30:B3:9A:A1:6C:96:7F:5D:4B:64:39:54:44:41:71:3F:2B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584AEE26983C3C2B7AEA6A1DB9C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/894814b3-937c-32fa-a2e4-efc7919bbb38.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 30058 IP address blocks: 66.90.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:98:3c:3c:2b:7a:ea:6a:1d:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=3c0859c5-7d47-4dc9-af27-35a58097278d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:8e:e8:9c:7c:0f:25:4e:4a:c2:63:17:47: d2:cd:88:88:41:cf:d9:49:ed:9f:d7:70:8c:98:84: d0:41:22:31:14:3f:f9:80:6f:16:01:e2:75:ff:8f: 3b:68:26:7c:fb:18:16:e6:c6:d5:6d:29:0c:88:83: 84:af:30:06:dc:26:24:77:51:00:0b:c3:1a:15:bc: 1a:62:ed:db:e1:55:8d:64:7f:05:19:31:70:6f:ca: 65:0a:db:50:5a:ed:28:67:59:57:92:0b:cd:d4:ed: 8a:27:94:e1:05:23:20:f6:d2:a3:c6:22:7e:b0:d3: dd:2f:2a:5e:29:de:46:e6:c2:cb:25:29:48:0b:58: d0:0b:50:9d:35:b4:e5:20:15:37:1d:ba:4d:02:e7: 56:71:d3:4d:bd:07:e8:c8:20:5c:2d:2e:2f:0f:8b: 1e:ee:b3:91:40:3f:7c:44:a1:04:e3:22:54:ae:ad: a1:0c:25:9c:aa:dc:8e:fe:20:bc:e9:a4:cb:7d:93: 7d:20:15:4b:d1:f2:25:80:ce:b2:01:71:86:fd:be: 83:9f:76:2e:75:f9:89:a7:d7:4c:71:b8:ef:2f:8c: f5:b5:32:4c:f8:73:a5:61:94:12:be:56:e4:aa:96: 7b:c0:0a:34:98:c7:4b:bd:bd:f6:85:f4:35:31:ef: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:0C:30:B3:9A:A1:6C:96:7F:5D:4B:64:39:54:44:41:71:3F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/894814b3-937c-32fa-a2e4-efc7919bbb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5a:f6:72:de:f0:75:ab:cb:b1:df:d5:fd:3a:f6:6c:65:ca: 15:40:2a:c1:bb:95:ca:81:f0:39:65:8e:cb:47:8b:93:bd:36: 51:e5:0e:43:56:58:0c:8b:29:29:f4:24:1c:2e:45:6d:37:73: 12:39:b9:32:eb:31:02:19:89:46:bc:10:19:f2:cb:0f:b7:85: 1b:a3:61:cd:b4:06:ca:2e:f5:b2:81:1d:c4:53:31:2f:e8:83: f4:c0:a8:d7:39:58:d1:48:b6:a0:a4:36:44:2e:d4:f3:fa:28: 18:02:29:b4:eb:50:02:f4:32:96:eb:ad:76:69:9e:c3:1c:04: 14:6c:6a:61:24:15:eb:c4:eb:3d:02:93:e1:14:50:f0:77:27: 1c:fc:6b:e9:35:31:19:83:73:a6:82:c0:26:93:ec:2b:a2:a2: f6:fe:56:38:77:99:29:ed:c4:14:b2:db:f4:b3:67:fb:52:73: 3f:9a:fa:61:28:30:26:b9:6c:62:c0:4a:61:64:3c:ab:02:80: d0:c6:8d:1f:71:b4:10:39:8b:f2:d5:e9:06:70:62:1c:a5:73: 18:6c:a6:5a:91:51:6b:50:ff:60:e3:fc:d7:cb:18:3c:37:f7: b8:c1:0e:e9:5b:19:bd:df:99:e5:89:b5:bf:eb:76:c7:ca:4c: e4:53:6c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpg8PCt66moducAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk M2MwODU5YzUtN2Q0Ny00ZGM5LWFmMjctMzVhNTgwOTcyNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFqO6Jx8DyVOSsJjF0fSzYiIQc/ZSe2f13CM mITQQSIxFD/5gG8WAeJ1/487aCZ8+xgW5sbVbSkMiIOErzAG3CYkd1EAC8MaFbwa Yu3b4VWNZH8FGTFwb8plCttQWu0oZ1lXkgvN1O2KJ5ThBSMg9tKjxiJ+sNPdLype Kd5G5sLLJSlIC1jQC1CdNbTlIBU3HbpNAudWcdNNvQfoyCBcLS4vD4se7rORQD98 RKEE4yJUrq2hDCWcqtyO/iC86aTLfZN9IBVL0fIlgM6yAXGG/b6Dn3YudfmJp9dM cbjvL4z1tTJM+HOlYZQSvlbkqpZ7wAo0mMdLvb32hfQ1Me/8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqmDDCzmqFsln9dS2Q5VERBcT8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODk0ODE0YjMtOTM3Yy0z MmZhLWEyZTQtZWZjNzkxOWJiYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1a9nLe8HWry7Hf1f069mxlyhVAKsG7lcqB8DlljstHi5O9NlHlDkNW WAyLKSn0JBwuRW03cxI5uTLrMQIZiUa8EBnyyw+3hRujYc20Bsou9bKBHcRTMS/o g/TAqNc5WNFItqCkNkQu1PP6KBgCKbTrUAL0MpbrrXZpnsMcBBRsamEkFevE6z0C k+EUUPB3Jxz8a+k1MRmDc6aCwCaT7Cuiovb+Vjh3mSntxBSy2/SzZ/tScz+a+mEo MCa5bGLASmFkPKsCgNDGjR9xtBA5i/LV6QZwYhylcxhsplqRUWtQ/2Dj/NfLGDw3 97jBDulbGb3fmeWJtb/rdsfKTORTbEM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:46 2025 by rpki-client