$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa File: de1d8ef9-62b0-38d1-9587-cc35342d9073.roa (raw, json) Hash identifier: QJYTAYhg+K8PrKBgQAihDXlZsqebudlxN4VHf7NFhU4= Subject key identifier: 19:4B:83:76:94:5F:FA:A1:04:DA:2A:AB:C4:35:F4:F4:D6:32:91:7C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B5DD1F4C53F413A85B93AD080 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 174 IP address blocks: 67.159.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f4:c5:3f:41:3a:85:b9:3a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=3989a1a2-d519-40a8-8387-e870184e4ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:02:91:7d:b0:d1:4c:14:8c:66:a7:dc:1a: f6:95:e5:d4:4e:58:9e:dc:23:3a:8e:50:18:78:63: af:59:5c:92:57:62:a1:b8:e9:02:36:a6:1e:be:4d: 6b:99:5f:0d:3d:be:d8:7e:f5:e2:b0:26:d3:c9:cf: 73:e7:44:d2:ae:7e:64:3d:e8:c1:4f:fe:2b:ee:28: 80:85:41:c6:9b:cf:66:02:83:0b:db:5f:ee:63:c0: 27:f6:ec:fa:d5:f0:86:d2:e5:86:d1:58:64:f2:4b: 04:50:df:e5:74:65:c1:f7:62:2b:00:f9:4b:c7:7d: 0b:26:03:85:82:4e:29:02:05:9a:55:9b:b4:0c:d6: a4:0d:db:73:c3:16:06:05:d4:b7:45:a8:a8:e7:1b: 26:68:79:11:9d:f7:f4:87:10:5a:a5:41:bc:45:16: 43:6b:6c:f6:de:0e:3a:2a:df:a4:24:d6:11:3c:b8: a6:b5:b0:4e:6e:2d:a1:e8:03:4d:4c:62:75:58:5f: 75:72:3f:b3:63:00:21:01:22:09:11:a6:c7:74:f3: 0f:f3:59:ca:dd:4a:38:35:a4:bf:33:9d:87:04:2c: 8d:4f:09:13:fb:b8:fa:2d:af:a8:03:5b:6a:d1:dd: 77:d3:85:66:b8:5d:00:40:e0:fd:b5:85:ec:ff:97: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4B:83:76:94:5F:FA:A1:04:DA:2A:AB:C4:35:F4:F4:D6:32:91:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e8:ef:aa:c9:90:e5:25:ea:63:dc:4b:70:89:c5:45:46:2e: 15:a8:83:db:5a:c2:0c:5b:d6:c3:13:8c:75:71:04:f2:38:99: a7:75:e6:38:3c:d9:2e:6f:1e:23:00:70:2b:60:60:78:f9:29: da:83:78:57:e6:53:0c:c9:3d:8c:b7:90:4a:f7:cd:38:40:41: 20:d2:83:36:bf:0c:1f:ca:08:21:54:72:0b:49:d5:40:61:9b: 3e:04:4c:71:cf:f3:8b:fa:da:df:0e:0d:ee:70:cd:63:9c:cd: 19:b7:7e:0e:50:bc:2a:96:12:56:a5:b5:ff:ef:f6:70:b6:22: fa:6a:15:bd:7a:f1:df:b4:85:53:05:a2:6d:14:0c:05:33:ac: c3:c9:c8:1a:a7:3c:65:71:5d:df:98:b9:f4:56:f4:ae:5e:63: 74:3c:2a:a0:5d:61:53:10:a6:f1:20:a7:8f:52:d1:f5:d5:93: af:bf:1d:9e:9f:a4:b3:bb:39:ad:27:c4:f6:52:e4:9b:b2:ce: e7:23:4a:dc:7a:5c:90:52:5f:9b:43:35:51:36:4b:49:51:ac: 05:a5:d9:8b:7d:0c:c7:27:c4:12:57:8d:be:0f:93:5b:f2:76: ea:a4:1f:80:c4:68:5f:31:4e:5d:b3:d1:79:31:2f:b0:41:43: d8:06:8a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fTFP0E6hbk60IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Mzk4OWExYTItZDUxOS00MGE4LTgzODctZTg3MDE4NGU0YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvUCkX2w0UwUjGan3Br2leXUTlie3CM6jlAY eGOvWVySV2KhuOkCNqYevk1rmV8NPb7YfvXisCbTyc9z50TSrn5kPejBT/4r7iiA hUHGm89mAoML21/uY8An9uz61fCG0uWG0Vhk8ksEUN/ldGXB92IrAPlLx30LJgOF gk4pAgWaVZu0DNakDdtzwxYGBdS3Raio5xsmaHkRnff0hxBapUG8RRZDa2z23g46 Kt+kJNYRPLimtbBObi2h6ANNTGJ1WF91cj+zYwAhASIJEabHdPMP81nK3Uo4NaS/ M52HBCyNTwkT+7j6La+oA1tq0d1304VmuF0AQOD9tYXs/5fWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlLg3aUX/qhBNoqq8Q19PTWMpF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGUxZDhlZjktNjJiMC0z OGQxLTk1ODctY2MzNTM0MmQ5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITo76rJkOUl6mPcS3CJxUVGLhWog9tawgxb1sMTjHVxBPI4mad15jg8 2S5vHiMAcCtgYHj5KdqDeFfmUwzJPYy3kEr3zThAQSDSgza/DB/KCCFUcgtJ1UBh mz4ETHHP84v62t8ODe5wzWOczRm3fg5QvCqWElaltf/v9nC2IvpqFb168d+0hVMF om0UDAUzrMPJyBqnPGVxXd+YufRW9K5eY3Q8KqBdYVMQpvEgp49S0fXVk6+/HZ6f pLO7Oa0nxPZS5JuyzucjStx6XJBSX5tDNVE2S0lRrAWl2Yt9DMcnxBJXjb4Pk1vy duqkH4DEaF8xTl2z0XkxL7BBQ9gGijM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:58 2025 by rpki-client