$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa File: b358fd28-78e4-32fd-8779-c6ee2c15a485.roa (raw, json) Hash identifier: tM+oKb8ayaY8vwA7O+KemRtNrlIrZ8AClE0eZkFw4/Y= Subject key identifier: A2:C5:DC:3E:34:12:72:F8:EB:C3:9E:BC:89:47:5B:CE:2F:2D:D5:4F Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5DD1F514F04BF25DA71C5C80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 1239 IP address blocks: 67.159.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f5:14:f0:4b:f2:5d:a7:1c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=2b5dc98a-6578-4d37-96b8-b9758ea0d406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:b0:66:b7:12:17:5d:6b:7e:ea:ab:c9:bc: 93:60:04:c1:c2:9f:64:8a:52:9a:b0:6a:20:ad:f5: cd:6a:02:ef:4e:e4:74:e0:87:e9:74:cc:ac:2b:3d: 70:8c:e8:30:fa:4d:06:3c:4b:38:0a:f6:f7:8d:d1: fa:5e:df:e7:74:45:e1:2d:2d:78:79:49:11:e5:73: cc:71:96:0b:e4:eb:2d:c0:4b:65:18:b8:1b:a1:d9: bf:3f:c7:15:ed:cd:dd:bd:39:16:91:f4:a0:95:e0: ad:03:92:29:3a:b5:56:af:ea:15:d1:58:82:54:c0: 83:4e:e6:04:e3:a7:3f:0e:5e:77:ab:01:77:c4:50: 87:62:ef:7a:28:6c:08:39:0b:b0:5a:da:4b:68:a6: 90:04:dd:b3:b3:7d:88:b9:f4:6f:64:4f:9b:5b:d6: 70:fd:5b:4d:1f:61:c1:8e:30:ae:68:f0:b1:b5:4f: 50:38:b3:e6:0d:9f:bc:f2:d7:c6:a3:71:54:f3:91: 5b:3a:2c:fc:f8:2e:0d:4c:54:28:7f:d6:6f:74:77: 56:22:8d:3d:62:e4:08:dd:9c:38:83:0c:80:2b:83: 15:27:f6:ee:ef:95:30:57:ac:c4:f3:7a:47:e0:fe: 33:5b:f3:3b:3d:1d:fd:57:58:9e:cc:c4:06:64:e0: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:DC:3E:34:12:72:F8:EB:C3:9E:BC:89:47:5B:CE:2F:2D:D5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:74:78:58:a7:be:54:90:14:3d:69:f6:e4:15:27:de:31:99: bd:f0:e3:d8:92:c9:43:8d:04:ec:dd:4a:86:90:d2:59:c6:79: 89:5d:c0:52:36:8e:1e:86:66:c7:d7:29:9e:ff:24:60:1f:3c: c0:85:82:2c:a8:1e:cb:96:35:76:6d:f4:f7:56:16:f5:a1:61: 6c:ce:13:2f:65:58:b4:af:e4:19:2f:15:45:76:e3:8e:90:e3: d9:5c:21:63:31:ee:df:18:a8:b7:87:92:b2:81:c2:61:e6:07: 18:6e:a5:ab:27:fb:6e:ab:0e:47:52:45:3e:f7:bd:cf:89:d3: dd:93:ae:a2:ad:35:0f:3c:eb:d1:ab:58:3a:ec:17:cb:cf:80: 1f:97:2d:20:fb:0f:50:41:b6:00:6b:5c:ab:7d:29:33:3d:38: 3a:e2:a3:e6:6f:da:a5:7f:38:27:f6:85:56:5e:8f:ea:2f:7a: 5f:dc:e3:ab:44:27:27:b1:76:ff:3b:17:9a:20:4b:59:29:fd: dc:a2:b3:91:79:39:a0:90:e1:46:b2:6f:bc:68:66:a9:67:c1: ec:dc:39:78:41:ce:55:98:3e:01:eb:c6:9e:79:63:8d:33:b4: 26:9a:81:67:75:0f:88:ea:79:14:5f:39:5b:9b:35:4a:10:d8: 46:50:0c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fUU8EvyXaccXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MmI1ZGM5OGEtNjU3OC00ZDM3LTk2YjgtYjk3NThlYTBkNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCCwZrcSF11rfuqrybyTYATBwp9kilKasGog rfXNagLvTuR04IfpdMysKz1wjOgw+k0GPEs4Cvb3jdH6Xt/ndEXhLS14eUkR5XPM cZYL5OstwEtlGLgbodm/P8cV7c3dvTkWkfSgleCtA5IpOrVWr+oV0ViCVMCDTuYE 46c/Dl53qwF3xFCHYu96KGwIOQuwWtpLaKaQBN2zs32IufRvZE+bW9Zw/VtNH2HB jjCuaPCxtU9QOLPmDZ+88tfGo3FU85FbOiz8+C4NTFQof9ZvdHdWIo09YuQI3Zw4 gwyAK4MVJ/bu75UwV6zE83pH4P4zW/M7PR39V1iezMQGZODGwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLF3D40EnL468OevIlHW84vLdVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjM1OGZkMjgtNzhlNC0z MmZkLTg3NzktYzZlZTJjMTVhNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL10eFinvlSQFD1p9uQVJ94xmb3w49iSyUONBOzdSoaQ0lnGeYldwFI2 jh6GZsfXKZ7/JGAfPMCFgiyoHsuWNXZt9PdWFvWhYWzOEy9lWLSv5BkvFUV2446Q 49lcIWMx7t8YqLeHkrKBwmHmBxhupasn+26rDkdSRT73vc+J092TrqKtNQ8869Gr WDrsF8vPgB+XLSD7D1BBtgBrXKt9KTM9ODrio+Zv2qV/OCf2hVZej+ovel/c46tE Jyexdv87F5ogS1kp/dyis5F5OaCQ4Uayb7xoZqlnwezcOXhBzlWYPgHrxp55Y40z tCaagWd1D4jqeRRfOVubNUoQ2EZQDAs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:47 2025 by rpki-client