$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/acb78940-9691-3c98-9243-fafaee9fb772.roa File: acb78940-9691-3c98-9243-fafaee9fb772.roa (raw, json) Hash identifier: a1UlkwIABUWg1gtUD92bt1etZ/Qj+0CzKsHyy1LZCCY= Subject key identifier: 1A:AE:BD:01:D1:25:98:DD:91:FE:B5:D3:C3:C2:82:58:2E:91:CF:48 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5DD1F54CB98BF70ADA194F8C Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/acb78940-9691-3c98-9243-fafaee9fb772.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 30058 IP address blocks: 67.159.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f5:4c:b9:8b:f7:0a:da:19:4f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=148905c5-2a45-4c2d-baf0-35c0d88ac8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:b8:4c:4c:2c:1f:a9:03:30:09:33:0c:cb: 93:9c:f6:3c:d1:d2:91:fc:e8:40:b0:4e:cd:29:4b: 9b:32:cd:ec:4e:de:c8:a9:1b:f4:84:cd:a8:46:d7: 08:83:97:30:e8:e2:f4:d0:9f:93:c5:0c:71:c5:10: 4c:b2:ad:3b:8f:6d:c3:e7:4b:15:98:4a:d2:fd:71: 43:d6:a7:36:e0:e9:83:a3:7d:3c:75:ab:2d:ce:71: d6:a8:87:02:03:b7:32:61:f9:0c:0d:80:a8:ad:61: ff:a0:b4:3e:da:c6:34:03:30:58:14:b2:de:b9:33: f6:31:9e:22:b8:0e:5f:38:c8:c5:4d:d2:75:ef:cf: d0:b9:2b:42:03:53:a7:40:c3:95:64:12:7a:02:85: 4f:83:21:f5:ee:f4:d3:dd:78:2d:17:ad:78:45:4f: f7:b2:99:38:33:6a:e6:cd:b4:ab:5b:9e:88:c0:74: 65:05:64:75:ea:bc:8d:4b:79:5d:44:52:56:0f:b8: a5:b3:2a:48:3f:14:50:02:67:ad:9f:a7:0c:95:51: a0:6d:b8:8a:d7:18:2e:af:70:49:c0:48:5c:bb:87: 19:7f:24:c4:03:66:e4:d0:f1:60:1c:0a:47:93:00: ea:18:8e:8b:10:b6:92:72:2b:c7:fa:ed:56:98:41: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:BD:01:D1:25:98:DD:91:FE:B5:D3:C3:C2:82:58:2E:91:CF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/acb78940-9691-3c98-9243-fafaee9fb772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:41:87:ab:68:b0:11:ba:08:a7:c6:f2:fd:40:1a:16:8d:7c: 9f:fa:f1:88:8d:68:7e:9e:5b:a6:2b:90:7c:e0:0d:a3:fe:1c: eb:4b:da:45:04:7e:a1:87:b8:69:14:b8:23:74:97:41:1c:c4: e4:54:5f:e8:1d:e2:f8:e3:63:93:e9:d2:44:d3:94:2b:e5:b3: 55:a1:13:85:60:ad:20:3b:5b:bb:f7:14:72:ad:73:fd:15:de: bd:8e:c2:a8:be:41:0b:e5:6d:50:44:e4:52:e5:22:b9:0f:be: 08:f4:af:84:15:66:26:86:8d:aa:a5:07:ef:c1:82:19:4d:fc: 47:10:9a:cf:a7:ca:d6:18:0c:9b:c7:f6:48:0f:90:a4:ee:d7: 07:d2:2e:bd:61:5b:41:a7:ed:3a:7d:63:24:c3:3b:47:86:7f: ed:4f:f6:42:f0:56:11:3e:30:b5:05:27:1f:c3:67:29:33:22: ab:4b:f7:3a:b6:a5:72:c3:28:11:cb:f1:e6:e1:1d:2b:fd:c8: 1e:e0:54:93:90:45:e3:4a:87:51:74:87:fe:cd:d8:b7:0e:88: e0:14:8a:46:9a:e7:58:a0:2a:fc:4d:b3:e8:d1:b8:bc:5e:2d: d3:ae:91:df:c6:61:a5:da:13:0a:f3:5b:8d:9c:0e:6c:0a:36: cc:40:43:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fVMuYv3CtoZT4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MTQ4OTA1YzUtMmE0NS00YzJkLWJhZjAtMzVjMGQ4OGFjOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCa4TEwsH6kDMAkzDMuTnPY80dKR/OhAsE7N KUubMs3sTt7IqRv0hM2oRtcIg5cw6OL00J+TxQxxxRBMsq07j23D50sVmErS/XFD 1qc24OmDo308dastznHWqIcCA7cyYfkMDYCorWH/oLQ+2sY0AzBYFLLeuTP2MZ4i uA5fOMjFTdJ178/QuStCA1OnQMOVZBJ6AoVPgyH17vTT3XgtF614RU/3spk4M2rm zbSrW56IwHRlBWR16ryNS3ldRFJWD7ilsypIPxRQAmetn6cMlVGgbbiK1xgur3BJ wEhcu4cZfyTEA2bk0PFgHApHkwDqGI6LELaScivH+u1WmEGLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBquvQHRJZjdkf6108PCglgukc9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYWNiNzg5NDAtOTY5MS0z Yzk4LTkyNDMtZmFmYWVlOWZiNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpBh6tosBG6CKfG8v1AGhaNfJ/68YiNaH6eW6YrkHzgDaP+HOtL2kUE fqGHuGkUuCN0l0EcxORUX+gd4vjjY5Pp0kTTlCvls1WhE4VgrSA7W7v3FHKtc/0V 3r2Owqi+QQvlbVBE5FLlIrkPvgj0r4QVZiaGjaqlB+/BghlN/EcQms+nytYYDJvH 9kgPkKTu1wfSLr1hW0Gn7Tp9YyTDO0eGf+1P9kLwVhE+MLUFJx/DZykzIqtL9zq2 pXLDKBHL8ebhHSv9yB7gVJOQReNKh1F0h/7N2LcOiOAUikaa51igKvxNs+jRuLxe LdOukd/GYaXaEwrzW42cDmwKNsxAQ3M= -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:07 2025 by rpki-client