$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bdbb36f7-938d-3a08-afae-fe59de1896ba.roa File: bdbb36f7-938d-3a08-afae-fe59de1896ba.roa (raw, json) Hash identifier: T2yU8knDJAB0dwyRU+bJhRwWbZ8cnRy/nomRWAf7fTs= Subject key identifier: D7:0E:9F:73:EF:B9:78:E0:8E:C2:C4:65:58:D8:0C:FF:84:96:C3:60 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5DD1F49D1C13C7E293737C80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bdbb36f7-938d-3a08-afae-fe59de1896ba.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 174 IP address blocks: 67.159.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f4:9d:1c:13:c7:e2:93:73:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ce2096b1-ad00-44ab-aec5-f4065eafcb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:2c:3b:80:14:eb:79:2e:4a:16:72:46:e6: 26:e2:4b:10:94:58:e7:c6:a1:2f:53:fe:5f:f9:c3: e2:39:29:0e:d9:d0:cc:76:1c:89:09:54:c4:e3:39: dc:1d:7e:a3:6e:98:e6:38:1f:75:9b:a8:f5:b9:e7: ee:29:27:f0:1e:92:1a:88:b7:8c:83:bd:af:93:93: e7:fa:75:ac:67:46:56:f2:35:47:c9:61:04:8c:5b: e0:34:bd:fb:00:bb:92:9e:a9:1f:09:51:b8:ec:9c: b8:00:92:83:38:78:9e:a2:26:59:ff:d0:3e:c1:cf: 83:91:31:fc:9b:41:de:f6:ef:37:49:b6:69:60:c7: 13:83:ae:f2:35:a0:a5:30:65:31:bb:ee:dd:52:ec: 5e:2d:ef:3e:b6:42:0e:0d:8a:5a:1c:9a:e8:3e:9e: c2:5e:14:55:3d:98:03:ad:3b:95:c6:0a:d1:ec:bb: 8b:69:6e:9e:a4:c5:7c:07:e3:df:01:3a:69:07:d5: de:0e:c5:de:67:98:ef:57:6d:fc:95:ec:e2:02:c0: 46:d2:dc:c6:b6:b5:ea:d0:81:d7:fe:fe:85:91:b3: 44:47:42:8a:1e:f6:b2:1b:bf:b5:4a:78:22:c0:3c: 34:4b:be:73:f2:36:e5:31:1e:9b:4c:0f:7a:63:d3: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:9F:73:EF:B9:78:E0:8E:C2:C4:65:58:D8:0C:FF:84:96:C3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bdbb36f7-938d-3a08-afae-fe59de1896ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b9:2e:df:b9:b8:fe:ff:93:2b:38:c4:7d:1b:52:c2:60:c4: 0c:9e:af:d6:2d:46:91:7f:80:ad:2f:c5:b9:f0:b2:4e:f6:25: af:db:61:e6:a2:f0:7b:6d:63:a2:45:0c:7a:07:21:f7:73:fc: c5:3c:4c:7b:0d:fd:ee:8e:27:0c:6a:e5:d8:81:86:bc:bc:22: 13:86:7a:eb:d6:5d:0a:21:4d:4c:a1:2b:43:8f:b9:d9:de:bb: b0:b8:d0:da:97:5c:e0:6c:01:33:af:f1:86:f9:22:56:3d:35: e6:ae:72:d8:40:03:ed:04:9f:d2:7e:35:48:ed:e0:c5:72:e3: 68:0a:fa:d6:43:5b:b1:1d:84:69:31:92:4a:e8:d3:c4:7e:d0: b8:3c:b2:d2:c6:5c:06:9d:9c:00:09:c0:7b:f0:27:40:8b:3b: a4:07:f9:62:60:49:71:24:0d:ef:58:a6:f2:d3:f7:81:da:45: 14:19:d3:1f:2c:dd:bb:a9:6f:d5:ca:83:ab:01:7a:e3:85:1d: 0e:e0:9b:ad:88:22:79:4f:57:46:a4:f0:89:18:27:ca:b3:a2: 27:74:f4:74:c7:3a:d8:44:04:fc:e4:84:02:4d:78:31:6c:60: 16:f5:ab:07:d5:20:19:e5:b5:b5:57:79:6d:44:ac:5c:1a:e6: 43:35:73:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fSdHBPH4pNzfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2UyMDk2YjEtYWQwMC00NGFiLWFlYzUtZjQwNjVlYWZjYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWMsO4AU63kuShZyRuYm4ksQlFjnxqEvU/5f +cPiOSkO2dDMdhyJCVTE4zncHX6jbpjmOB91m6j1uefuKSfwHpIaiLeMg72vk5Pn +nWsZ0ZW8jVHyWEEjFvgNL37ALuSnqkfCVG47Jy4AJKDOHieoiZZ/9A+wc+DkTH8 m0He9u83SbZpYMcTg67yNaClMGUxu+7dUuxeLe8+tkIODYpaHJroPp7CXhRVPZgD rTuVxgrR7LuLaW6epMV8B+PfATppB9XeDsXeZ5jvV238leziAsBG0tzGtrXq0IHX /v6FkbNER0KKHvayG7+1SngiwDw0S75z8jblMR6bTA96Y9PuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcOn3PvuXjgjsLEZVjYDP+ElsNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYmRiYjM2ZjctOTM4ZC0z YTA4LWFmYWUtZmU1OWRlMTg5NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK5Lt+5uP7/kys4xH0bUsJgxAyer9YtRpF/gK0vxbnwsk72Ja/bYeai 8HttY6JFDHoHIfdz/MU8THsN/e6OJwxq5diBhry8IhOGeuvWXQohTUyhK0OPudne u7C40NqXXOBsATOv8Yb5IlY9NeaucthAA+0En9J+NUjt4MVy42gK+tZDW7EdhGkx kkro08R+0Lg8stLGXAadnAAJwHvwJ0CLO6QH+WJgSXEkDe9YpvLT94HaRRQZ0x8s 3bupb9XKg6sBeuOFHQ7gm62IInlPV0ak8IkYJ8qzoid09HTHOthEBPzkhAJNeDFs YBb1qwfVIBnltbVXeW1ErFwa5kM1czI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:17:17 2025 by rpki-client