$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f99f907f-fd7d-3cc9-b4e7-43156b5e1257.roa File: f99f907f-fd7d-3cc9-b4e7-43156b5e1257.roa (raw, json) Hash identifier: bVOUgvreME4EvV3+lsad7zfXF3KTNqIgAL/PxBDZmMg= Subject key identifier: 0A:95:46:F8:6D:27:58:2C:76:D8:AB:27:EC:E0:60:20:C8:43:69:05 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584B2496D8CAA370CB8C5338B980 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f99f907f-fd7d-3cc9-b4e7-43156b5e1257.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 1299 IP address blocks: 66.90.100.0/24 maxlen: 24 66.90.103.0/24 maxlen: 24 67.159.10.0/24 maxlen: 24 198.16.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d8:ca:a3:70:cb:8c:53:38:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=c9a33e98-7189-4540-80af-6d51cfbab7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:5b:f4:a9:94:2b:08:13:2e:6c:6e:67:89: ac:a5:98:2a:43:1e:d9:23:98:31:f6:14:45:4d:88: 9c:42:d9:5d:87:5b:5d:be:d6:0d:de:2b:06:03:68: c3:40:e6:85:83:84:cd:05:8b:f0:17:e4:65:47:90: 58:29:05:c9:b0:f9:c9:25:22:e5:84:7b:7f:36:9d: ea:2b:4c:f5:ec:39:8c:7f:c3:89:34:37:4f:bf:03: f6:49:fb:ab:94:25:cf:8f:55:bd:56:2f:fb:cb:ca: 2d:3e:fc:da:56:e5:38:a0:0b:fe:26:2b:75:b4:37: bd:5c:b2:79:26:cd:08:86:69:6b:46:59:f8:f3:35: e3:88:12:bb:2a:e9:17:dd:f6:66:a4:4c:9c:f6:a9: 07:25:15:76:87:e8:c0:93:80:8b:30:ff:4c:7a:66: ee:33:74:7f:34:e4:ec:74:b7:2f:a7:3a:1c:ed:0d: ab:1b:42:51:df:45:0f:35:de:04:7b:04:d7:f2:9f: 95:8d:1d:e5:ba:81:e4:69:c5:dc:a5:5e:16:72:b5: 5b:27:d7:83:02:95:b1:ca:02:cd:9e:64:fa:03:cc: 2f:9e:5d:d4:97:a2:77:93:3d:58:ee:24:ff:51:f1: e5:5b:f1:56:17:23:71:5e:01:8c:b8:6e:78:95:7a: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:95:46:F8:6D:27:58:2C:76:D8:AB:27:EC:E0:60:20:C8:43:69:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f99f907f-fd7d-3cc9-b4e7-43156b5e1257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.100.0/24 66.90.103.0/24 67.159.10.0/24 198.16.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1d:02:d5:86:e2:a0:0b:83:78:ff:4a:31:78:62:7b:0d:0e: 0b:22:71:12:16:86:b4:5e:52:09:5f:59:87:29:c3:95:ce:41: 67:91:e0:18:c1:41:78:c7:82:d7:29:37:5e:9c:91:9d:ad:cd: 9a:06:3c:21:44:76:38:05:e7:50:cc:82:a5:63:50:0c:9c:62: 66:b2:18:01:09:98:3f:63:fe:91:c9:b9:a7:1f:a3:bf:ad:70: d1:ba:43:d8:53:ff:41:6b:a0:c0:5c:44:51:52:b5:82:d2:6b: 4d:88:60:57:0a:2b:6d:aa:1e:57:e2:6a:1b:b6:87:d1:a6:2f: 1e:4f:90:91:03:2e:b8:87:ce:67:dc:27:2a:ba:96:e9:97:08: 3a:dc:8c:e9:20:45:0f:a8:40:12:3f:89:7d:55:19:6d:1c:7b: 9e:4e:4f:c3:5b:7b:be:1e:3b:a3:aa:8e:67:74:a9:69:84:76: b1:50:57:b4:3d:b7:fc:59:00:77:74:9e:23:f5:45:f3:4c:14: 82:57:72:7d:7e:1d:a7:a5:7f:fd:c3:c1:00:ca:0d:1c:ea:6b: bc:4c:38:20:a7:a6:8a:97:50:0d:f0:67:11:19:6f:42:23:cd: 55:37:6e:c7:8a:5d:68:66:e5:33:6b:58:28:a3:ac:26:b9:25: e7:61:5a:26 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEskltjKo3DLjFM4uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YzlhMzNlOTgtNzE4OS00NTQwLTgwYWYtNmQ1MWNmYmFiN2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjspb9KmUKwgTLmxuZ4mspZgqQx7ZI5gx9hRF TYicQtldh1tdvtYN3isGA2jDQOaFg4TNBYvwF+RlR5BYKQXJsPnJJSLlhHt/Np3q K0z17DmMf8OJNDdPvwP2SfurlCXPj1W9Vi/7y8otPvzaVuU4oAv+Jit1tDe9XLJ5 Js0IhmlrRln48zXjiBK7KukX3fZmpEyc9qkHJRV2h+jAk4CLMP9MembuM3R/NOTs dLcvpzoc7Q2rG0JR30UPNd4EewTX8p+VjR3luoHkacXcpV4WcrVbJ9eDApWxygLN nmT6A8wvnl3Ul6J3kz1Y7iT/UfHlW/FWFyNxXgGMuG54lXoWuQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFAqVRvhtJ1gsdtirJ+zgYCDIQ2kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjk5ZjkwN2YtZmQ3ZC0z Y2M5LWI0ZTctNDMxNTZiNWUxMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQlpkAwQA QlpnAwQAQ58KAwQAxhBeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGkdAtWG4qALg3j/SjF4YnsNDgsicRIW hrReUglfWYcpw5XOQWeR4BjBQXjHgtcpN16ckZ2tzZoGPCFEdjgF51DMgqVjUAyc YmayGAEJmD9j/pHJuacfo7+tcNG6Q9hT/0FroMBcRFFStYLSa02IYFcKK22qHlfi ahu2h9GmLx5PkJEDLriHzmfcJyq6lumXCDrcjOkgRQ+oQBI/iX1VGW0ce55OT8Nb e74eO6Oqjmd0qWmEdrFQV7Q9t/xZAHd0niP1RfNMFIJXcn1+Haelf/3DwQDKDRzq a7xMOCCnpoqXUA3wZxEZb0IjzVU3bseKXWhm5TNrWCijrCa5JedhWiY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:07:01 2025 by rpki-client