$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa File: b246ad75-ecad-3443-88db-9306bb30ede8.roa (raw, json) Hash identifier: sjArr32jylnKQaR+sNcDLKKoSmceMXtGCbUMPs4O6hE= Subject key identifier: B4:1D:69:AF:01:3C:66:62:6E:8B:EB:99:3D:2D:07:E7:18:29:0A:BC Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584F497746D4AD8778AE3D4EC780 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1239 IP address blocks: 67.159.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:46:d4:ad:87:78:ae:3d:4e:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a5ce30c-653e-4ea1-9767-11184dbe2350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:d6:d5:6d:45:10:1e:2d:0d:88:02:5b:65: 87:80:7c:41:e4:23:07:d7:b3:12:35:0a:ec:22:dc: 38:ee:72:0a:71:29:c4:e9:9f:8a:ee:1d:0c:1b:f3: 6c:e0:21:bc:05:40:65:39:0a:15:eb:08:b3:49:00: f4:fa:ab:56:60:40:ce:94:fa:cf:e8:ec:2c:be:4f: 84:46:86:b2:49:07:97:7d:74:81:df:78:89:90:0c: 82:81:82:08:b2:67:a1:c7:57:fb:7b:16:88:49:19: 4d:da:90:a0:96:e2:3a:02:7f:07:d7:67:9e:84:03: d1:5f:a7:84:4f:89:fa:44:55:3f:9d:9b:fe:53:43: bd:d0:d7:0e:f8:58:fc:33:9b:f0:87:96:76:07:fd: 42:3b:7f:9a:65:62:b9:7a:ba:e7:dd:62:27:d2:03: 93:81:3e:1c:35:c0:82:f2:49:3e:d1:83:62:38:eb: 9c:d1:56:cf:7b:76:d5:ed:df:71:b4:59:44:0f:18: bd:c1:52:c8:bf:93:67:e1:42:4a:1d:44:59:61:78: 61:a4:e8:18:61:b0:ff:5f:33:d1:7b:68:35:c6:31: 34:62:b6:5c:47:d9:c9:c7:58:91:c7:cb:5e:ca:35: b2:67:f1:4b:db:35:fc:f5:2f:24:91:dd:38:bd:4c: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1D:69:AF:01:3C:66:62:6E:8B:EB:99:3D:2D:07:E7:18:29:0A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1e:03:38:05:5c:95:7f:46:2d:cd:c9:2d:6b:c1:83:fc:e0: f2:07:8c:43:f1:bc:5f:f9:04:e7:84:a0:98:f4:36:04:7a:86: 5c:49:f7:a9:fc:0b:34:ce:85:08:b5:63:c1:e6:b2:19:50:51: 05:fe:53:fb:14:30:52:bf:68:18:7f:91:9f:c3:a4:e3:4e:64: 9a:a4:95:d6:67:40:13:b8:32:fe:ac:da:eb:8c:c0:50:e5:f5: 4b:60:cc:bf:97:81:b4:43:d6:1d:7f:f5:94:0b:46:d3:a7:3e: a4:2a:06:2b:6e:c4:32:5b:9e:6e:07:a0:cb:25:2b:11:42:ca: 8d:9f:b9:4a:0d:01:e8:de:91:7e:dc:71:e8:ad:f2:88:94:c1: c4:75:88:c8:d5:ff:e7:db:16:d7:7b:f5:1d:35:49:da:98:9d: 9c:de:50:0e:87:98:e0:de:a9:0f:6f:eb:77:0c:fc:44:69:9d: 7d:27:1d:fb:2f:71:ae:87:7a:f4:d2:54:f8:45:83:ff:c4:43: 7d:0e:89:c3:f7:b8:3c:82:ae:87:8b:bc:a6:ec:75:b1:3a:5f: 9c:5a:9b:ca:26:d8:bf:43:4c:e6:4d:83:eb:9f:57:ea:5d:7a: 62:ab:31:91:98:73:10:74:be:32:a3:8c:f5:e9:4e:dd:4e:ec: 9f:9d:b3:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0bUrYd4rj1Ox4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE1Y2UzMGMtNjUzZS00ZWExLTk3NjctMTExODRkYmUyMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzajW1W1FEB4tDYgCW2WHgHxB5CMH17MSNQrs Itw47nIKcSnE6Z+K7h0MG/Ns4CG8BUBlOQoV6wizSQD0+qtWYEDOlPrP6Owsvk+E RoaySQeXfXSB33iJkAyCgYIIsmehx1f7exaISRlN2pCgluI6An8H12eehAPRX6eE T4n6RFU/nZv+U0O90NcO+Fj8M5vwh5Z2B/1CO3+aZWK5errn3WIn0gOTgT4cNcCC 8kk+0YNiOOuc0VbPe3bV7d9xtFlEDxi9wVLIv5Nn4UJKHURZYXhhpOgYYbD/XzPR e2g1xjE0YrZcR9nJx1iRx8teyjWyZ/FL2zX89S8kkd04vUxFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQdaa8BPGZibovrmT0tB+cYKQq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjI0NmFkNzUtZWNhZC0z NDQzLTg4ZGItOTMwNmJiMzBlZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8eAzgFXJV/Ri3NyS1rwYP84PIHjEPxvF/5BOeEoJj0NgR6hlxJ96n8 CzTOhQi1Y8HmshlQUQX+U/sUMFK/aBh/kZ/DpONOZJqkldZnQBO4Mv6s2uuMwFDl 9UtgzL+XgbRD1h1/9ZQLRtOnPqQqBituxDJbnm4HoMslKxFCyo2fuUoNAejekX7c ceit8oiUwcR1iMjV/+fbFtd79R01SdqYnZzeUA6HmODeqQ9v63cM/ERpnX0nHfsv ca6HevTSVPhFg//EQ30OicP3uDyCroeLvKbsdbE6X5xam8om2L9DTOZNg+ufV+pd emKrMZGYcxB0vjKjjPXpTt1O7J+dsxY= -----END CERTIFICATE-----Generated at Sat Sep 26 08:29:27 2026 by rpki-client