$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa File: b1b96800-888f-3087-b255-7df30b1557be.roa (raw, json) Hash identifier: utFWdo7qt2LXvQrTI+RkI05nW0bV5oIhnISQAXchfz0= Subject key identifier: 6A:68:A9:5D:00:3C:2B:0D:67:6A:40:5E:7A:6C:AF:11:5D:E8:E0:53 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584ACF70FF2EB29BFFC57B3D8B80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 30058 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:ff:2e:b2:9b:ff:c5:7b:3d:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=ed7c2c51-d67f-4763-90c6-c1f7460585f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:4a:01:b3:1d:cd:9b:f0:bd:12:ab:14:b1: ee:61:3d:b3:2d:7e:b4:9c:d5:4f:d0:ab:5a:07:1f: 4b:63:7e:b3:57:35:eb:14:4e:3e:aa:d0:a7:4f:02: e4:ec:c1:9a:ed:2c:e7:a0:0b:43:17:99:3a:b0:ae: 7c:05:50:10:ae:11:e7:e5:04:29:e7:e9:2b:7b:ae: 72:7e:90:aa:12:fb:e1:d9:18:9c:20:61:a2:69:a9: ab:04:94:94:b2:a5:7c:af:ee:2d:46:10:d9:bf:08: bd:8d:3d:d5:da:fd:71:09:73:95:7e:28:9e:d5:15: 0e:81:7b:1c:96:92:51:b4:60:ba:94:f0:9c:67:f1: f2:70:e9:4f:2c:bc:a5:55:3c:09:c0:26:b9:f2:1a: a0:dd:25:cc:9f:af:da:f5:19:fd:0a:6b:0a:c3:7f: 11:ad:f4:d9:14:92:a1:05:5f:98:29:ae:07:4a:1b: c4:1c:fc:e9:ee:8d:ac:6e:6a:2d:9a:73:e5:8d:2b: 67:33:ea:ac:8b:5f:4e:50:0e:3c:55:68:6d:32:b5: a8:7a:95:3f:03:a8:e6:64:84:2e:f2:e8:46:a8:d9: 83:ed:bd:41:46:a0:36:1f:58:fb:f1:77:ed:d8:4f: 57:9f:41:bd:d7:4f:5b:e1:05:d8:e9:0a:18:5c:c2: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:68:A9:5D:00:3C:2B:0D:67:6A:40:5E:7A:6C:AF:11:5D:E8:E0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:16:d6:1c:1d:96:fd:b4:b8:d2:83:d4:c3:0c:8f:7b:1d:f5: 49:66:57:cb:72:c0:52:fe:d4:18:1b:7e:ed:3f:7d:7f:a6:75: fb:59:ea:bb:9f:87:3b:b0:94:ed:20:7f:d0:d4:8a:c9:9c:1a: 93:06:e8:b8:b2:6f:00:be:dd:fc:99:ae:21:cd:cb:97:e0:8f: 1b:f8:09:58:11:24:7a:af:cf:0c:3d:6c:39:d3:cc:bb:6c:2f: 5c:3a:31:40:dd:13:6d:8a:a2:64:87:2e:41:72:63:d8:a6:42: 44:4d:e6:b4:be:b0:65:c5:ad:6d:76:cf:79:6d:80:26:7f:c5: c3:2e:3c:22:30:05:fc:79:3d:52:34:24:32:5b:66:f1:ce:f7: 7e:f7:7b:45:30:ff:75:86:8a:dc:06:15:34:07:59:31:48:57: 9c:0b:f5:76:b7:58:ba:f8:76:32:00:fa:82:e1:10:da:0a:09: ac:17:40:9a:ad:6b:44:5b:9f:1d:08:01:f3:6a:60:07:eb:cd: 99:6e:a0:a3:f4:50:66:37:fa:8e:00:69:47:ca:5f:6c:2e:9a: f1:bd:3f:36:2b:72:5a:f3:75:d0:bb:6e:72:d4:46:d2:06:7f: 99:51:43:3d:a4:23:be:bc:32:e6:aa:3c:4f:e4:25:ad:fe:db: e4:a7:a6:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcP8uspv/xXs9i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZWQ3YzJjNTEtZDY3Zi00NzYzLTkwYzYtYzFmNzQ2MDU4NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDBKAbMdzZvwvRKrFLHuYT2zLX60nNVP0Kta Bx9LY36zVzXrFE4+qtCnTwLk7MGa7SznoAtDF5k6sK58BVAQrhHn5QQp5+kre65y fpCqEvvh2RicIGGiaamrBJSUsqV8r+4tRhDZvwi9jT3V2v1xCXOVfiie1RUOgXsc lpJRtGC6lPCcZ/HycOlPLLylVTwJwCa58hqg3SXMn6/a9Rn9CmsKw38RrfTZFJKh BV+YKa4HShvEHPzp7o2sbmotmnPljStnM+qsi19OUA48VWhtMrWoepU/A6jmZIQu 8uhGqNmD7b1BRqA2H1j78Xft2E9Xn0G9109b4QXY6QoYXMIKjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpoqV0APCsNZ2pAXnpsrxFd6OBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjFiOTY4MDAtODg4Zi0z MDg3LWIyNTUtN2RmMzBiMTU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAW1hwdlv20uNKD1MMMj3sd9UlmV8tywFL+1Bgbfu0/fX+mdftZ6ruf hzuwlO0gf9DUismcGpMG6LiybwC+3fyZriHNy5fgjxv4CVgRJHqvzww9bDnTzLts L1w6MUDdE22KomSHLkFyY9imQkRN5rS+sGXFrW12z3ltgCZ/xcMuPCIwBfx5PVI0 JDJbZvHO9373e0Uw/3WGitwGFTQHWTFIV5wL9Xa3WLr4djIA+oLhENoKCawXQJqt a0Rbnx0IAfNqYAfrzZluoKP0UGY3+o4AaUfKX2wumvG9PzYrclrzddC7bnLURtIG f5lRQz2kI768MuaqPE/kJa3+2+Snpro= -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:12 2025 by rpki-client