$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1d9b4b4d-b70f-3d6e-8b99-db50dc09697d.roa File: 1d9b4b4d-b70f-3d6e-8b99-db50dc09697d.roa (raw, json) Hash identifier: 6JJe+ld92uB3PaESXzFvyn7/BrZZgxBAO5+MczRzttE= Subject key identifier: 86:89:42:7A:7C:12:E9:E8:CD:CE:86:52:30:C1:1F:79:99:37:15:86 Certificate issuer: /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Certificate serial: 010D0C9F4328584D9B8564C12CE152DDD49FBC80 Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1d9b4b4d-b70f-3d6e-8b99-db50dc09697d.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 399643 IP address blocks: 67.220.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:64:c1:2c:e1:52:dd:d4:9f:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=3de81d6f-e0ed-40d9-b373-bf5eec19b450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:4a:ea:fb:16:61:d3:ae:4b:e6:22:c8:89: df:f6:ee:1f:38:36:50:24:78:fb:77:10:88:88:45: 94:55:52:32:ce:44:fc:6e:a1:07:a9:2c:ed:99:9b: 1f:cb:39:f7:96:25:ac:ac:43:32:6f:2d:93:d3:6c: 1a:3d:cc:e5:a5:77:a0:59:02:9b:b5:6c:1e:8f:3a: 22:78:16:f8:84:41:0d:08:e2:5c:a1:f7:f1:d8:60: e7:56:f8:c6:9d:10:d5:2a:3e:09:15:e7:0a:45:54: a9:65:dc:5b:b4:a3:20:6b:b8:40:4d:cf:a4:76:f6: 14:d1:c4:f7:9d:8f:1d:ba:c0:13:81:66:b1:e9:cf: f1:b7:4a:c6:d2:b5:78:64:7c:65:ca:2a:82:b3:9a: 9a:47:b5:d2:be:93:ea:80:57:c7:c0:f8:4c:7c:b4: 98:4b:df:a6:b6:ad:84:13:f0:b9:27:15:80:09:53: b4:d7:e6:46:3a:3a:64:02:e6:a4:ce:8a:5b:74:55: 0f:72:5a:d9:8a:b0:67:c4:8a:70:0f:55:5a:90:3f: 98:1f:19:8d:61:54:93:7e:07:c3:76:8c:54:69:a2: d9:93:da:5a:fc:35:18:76:68:e8:59:ae:82:9f:aa: ed:bc:92:e6:93:47:82:62:7c:15:e1:fa:f4:f0:e6: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:42:7A:7C:12:E9:E8:CD:CE:86:52:30:C1:1F:79:99:37:15:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1d9b4b4d-b70f-3d6e-8b99-db50dc09697d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl X509v3 Authority Key Identifier: keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer sbgp-ipAddrBlock: critical IPv4: 67.220.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ba:59:04:75:96:c5:fe:e3:39:65:6f:1d:43:48:fa:35:58: c2:5e:cc:11:87:d2:86:28:8b:13:90:ff:63:2a:d4:3e:34:a4: ea:5c:f9:e3:78:57:5a:05:7b:ce:ee:b9:53:c7:81:46:69:ce: da:7b:67:2c:aa:61:e2:13:7e:5f:ec:bd:38:0c:d1:d4:aa:7c: 3f:af:74:00:41:99:08:31:bc:67:60:4d:20:82:06:7f:50:98: 17:5f:9b:4b:7a:01:35:26:2c:5f:ef:86:c5:66:d4:72:0c:13: 9c:11:9f:20:7b:f9:75:7c:01:2a:9a:f1:88:da:11:b6:1e:7c: 89:c1:30:cb:64:b0:46:26:ec:1a:dd:04:2f:7e:4d:bd:f8:8f: 5f:10:50:f1:10:40:df:fe:6a:88:0d:74:f7:4b:50:2c:6f:c1: a0:a2:e2:07:2a:53:e0:48:99:7e:e9:b7:79:ae:36:25:15:d3: 21:36:41:4b:98:08:54:4c:19:eb:58:c6:90:b0:10:50:14:ce: 66:a8:6a:8f:70:ba:ff:86:54:57:c1:2a:b9:37:3c:29:1f:c3: 41:7c:89:aa:81:78:7c:9f:19:2b:31:fc:a2:0f:ca:a1:9b:bd: f7:83:54:22:4d:56:07:8e:34:e5:1e:26:14:2d:73:96:b7:c8: ec:92:cd:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhWTBLOFS3dSfvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmNWFjODctNzgxNC00ZjU4LWEyYjYtMjA3NWFmYzU2 ZjIxMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk M2RlODFkNmYtZTBlZC00MGQ5LWIzNzMtYmY1ZWVjMTliNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2RK6vsWYdOuS+YiyInf9u4fODZQJHj7dxCI iEWUVVIyzkT8bqEHqSztmZsfyzn3liWsrEMyby2T02waPczlpXegWQKbtWwejzoi eBb4hEENCOJcoffx2GDnVvjGnRDVKj4JFecKRVSpZdxbtKMga7hATc+kdvYU0cT3 nY8dusATgWax6c/xt0rG0rV4ZHxlyiqCs5qaR7XSvpPqgFfHwPhMfLSYS9+mtq2E E/C5JxWACVO01+ZGOjpkAuakzopbdFUPclrZirBnxIpwD1VakD+YHxmNYVSTfgfD doxUaaLZk9pa/DUYdmjoWa6Cn6rtvJLmk0eCYnwV4fr08OZjxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaJQnp8Eunozc6GUjDBH3mZNxWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1 YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1YWZjNTZmMjEvMWQ5YjRiNGQtYjcwZi0z ZDZlLThiOTktZGI1MGRjMDk2OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmZmNWFjODctNzgxNC00ZjU4LWEy YjYtMjA3NWFmYzU2ZjIxLzJmZjVhYzg3LTc4MTQtNGY1OC1hMmI2LTIwNzVhZmM1 NmYyMS5jcmwwHwYDVR0jBBgwFoAUqyudZJ+QwRg/Ky44H3m/fZNqR50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1 YWZjNTZmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9w1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF66WQR1lsX+4zllbx1DSPo1WMJezBGH0oYoixOQ/2Mq1D40pOpc+eN4 V1oFe87uuVPHgUZpztp7ZyyqYeITfl/svTgM0dSqfD+vdABBmQgxvGdgTSCCBn9Q mBdfm0t6ATUmLF/vhsVm1HIME5wRnyB7+XV8ASqa8YjaEbYefInBMMtksEYm7Brd BC9+Tb34j18QUPEQQN/+aogNdPdLUCxvwaCi4gcqU+BImX7pt3muNiUV0yE2QUuY CFRMGetYxpCwEFAUzmaoao9wuv+GVFfBKrk3PCkfw0F8iaqBeHyfGSsx/KIPyqGb vfeDVCJNVgeONOUeJhQtc5a3yOySzeE= -----END CERTIFICATE-----Generated at Wed May 13 11:12:45 2026 by rpki-client